Known vulnerabilities in 7-Zip 3.08.03 beta

Vendor: 7-zip.org
Software: 7-Zip
Version: 3.08.03 beta
Software CPE: cpe:2.3:a:7-zip_org:7-zip:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 9
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting 7-Zip version 3.08.03 beta 7-Zip 3.08.03 beta is affected by 9 vulnerabilities: 6 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118787 - NULL Pointer Dereference
CVE-2025-53817
CWE-476 Low
No
No
25.00 26.11.2025 SB2025100830
SB2025112651
#VU116709 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-11002
CWE-22 High
Public exploit available
No
25.00 08.10.2025 SB2025100830
SB2026012765
#VU116689 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-11001
CWE-22 High
Public exploit available
No
25.00 08.10.2025 SB2025100830
#VU102998 - Security Features
CVE-2025-0411
CWE-254 High
Public exploit available
Exploited
24.09 20.01.2025 SB2025012003
SB2025031332
SB2025070424
#VU93731 - Out-of-bounds read
CVE-2023-52169
CWE-125 Medium
No
No
24.01 03.07.2024 SB2024070344
SB2024071604
SB2024073019
and 2 more
#VU93730 - Heap-based Buffer Overflow
CVE-2023-52168
CWE-122 High
No
No
24.01 03.07.2024 SB2024070344
SB2024071604
SB2024073019
and 2 more
#VU80003 - Integer underflow
CVE-2023-31102
CWE-191 High
No
No
23.00 25.08.2023 SB2023082513
SB2024091647
SB2024102543
and 2 more
#VU80002 - Out-of-bounds write
CVE-2023-40481
CWE-787 High
No
No
23.00 25.08.2023 SB2023082513
SB2024091647
SB2024102543
and 1 more
#VU62367 - Heap-based Buffer Overflow
CVE-2022-29072
CWE-122 Medium
Public exploit available
No
22.00 19.04.2022 SB2022041901