7-Zip

Records37All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high21CVSS 7.0–8.9

Exploited now

7-Zip records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2025-00330 7-Zip Mark of the Web Bypass Vulnerability CRITICAL 90KEV 2025-02-06

Components

Products in the NVD configurations · select one to filter the records

7-zip 32 records CRITICAL P7zip 6 records CRITICAL

Records

6 records in P7zip · all components

TI-2026-79288 CVE-2026-111497 · GHSA-9v8h-qqgm-4m35

Out-of-bounds write in Google Brotli decoder

CRITICAL 99KEV

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, dis…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.82641 Published 2026-10-22 Partial fix · 1.0.10, 1.1.1 +2 CWE-252

TI-2022-23297 CVE-2022-47069 · GHSA-hjgv-c5xv-9h9v

p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the…

HIGH 69

p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00321 Published 2023-08-22 No fix listed CWE-787

TI-2016-07593 CVE-2016-9296 · GHSA-mqw8-2gg2-v87m

A null pointer dereference bug affects the 16.02 and many old versions of p7zip.

MEDIUM 43

A null pointer dereference bug affects the 16.02 and many old versions of p7zip.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.07016 Published 2016-11-12 No fix listed CWE-476

TI-2017-13187 CVE-2017-17969 · GHSA-5mfm-p22h-8c37

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip…

MEDIUM 42

Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.04991 Published 2018-01-30 No fix listed CWE-787

TI-2018-04365 CVE-2018-5996 · GHSA-2jr3-p4jr-g977

Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip…

LOW 39

Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, allows remote attackers to cause a denial of se…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02851 Published 2018-01-31 No fix listed CWE-119

TI-2015-00935 CVE-2015-1038 · GHSA-f24r-hqqw-w96v

p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.

LOW 32

p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.03291 Published 2015-01-21 No fix listed CWE-59

Open these records in search →

Critical	2
High	21
Medium	11
Low	3
No CVSS	0