TI-2025-24020 CVE-2025-33026 · GHSA-vg6j-x3v7-mwq9
In PeaZip through 10.4.0, there is a Mark-of-the-Web Bypass Vulnerability.
Priority HIGH 67
In PeaZip through 10.4.0, there is a Mark-of-the-Web Bypass Vulnerability.
PeaZip
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
PeaZip records in CISA KEVNo PeaZip vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
Priority LOW 38
Path Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas) in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via…
TI-2026-65418 CVE-2026-102514 · GHSA-6592-qv35-5gx2
Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive
Priority LOW 37
Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea component in PeaZip 11.2.0 and earlier allows an attacker who convinces a victim to open or extract a…
TI-2026-67381 CVE-2026-105050 · GHSA-377g-778f-272q
PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command…
Priority LOW 34
PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled.
TI-2023-06296 CVE-2023-6891 · GHSA-q892-p5w2-8qpf
PeaZip Library dragdropfilesdll.dll uncontrolled search path
Priority LOW 34
A vulnerability has been found in PeaZip 9.4.0 and classified as problematic.
Priority LOW 20
Incomplete List of Disallowed Inputs (CWE-184) in the dangerous-extension confirmation of the archive object viewer (peach.pas, grid_obj_open) in PeaZip 10.5.0 through 11.2.0 on Windows allows an attacker who convinces a…