TI-2025-24021 CVE-2025-33027 · GHSA-xrq2-2h92-m6m8
In Bandisoft Bandizip through 7.37, there is a Mark-of-the-Web Bypass Vulnerability.
Priority HIGH 67
In Bandisoft Bandizip through 7.37, there is a Mark-of-the-Web Bypass Vulnerability.
Bandisoft
Records12All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
Bandisoft records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
3 records in Bandizip · all components
TI-2021-08341 CVE-2021-26623 · GHSA-q3wh-hgh2-v2fr
Bandisoft ARK Library Out-of-bound Vulnerability
Priority MEDIUM 44
A remote code execution vulnerability due to incomplete check for 'xheader_decode_path_record' function's parameter length value in the ark library.
TI-2014-01296 CVE-2014-1680 · GHSA-wgm2-39v7-7cc5
Untrusted search path vulnerability in Bandisoft Bandizip before 3.10 allows local users…
Priority LOW 31
Untrusted search path vulnerability in Bandisoft Bandizip before 3.10 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory.