7-Zip 24.09
Approved changes feed: RSS · Atom
cpe:2.3:a:7-zip:7-zip:24.09:*:*:*:*:*:*:*
part: a version: 24.09 update: *
| Vendor | 7 Zip (f2c7301d-8512-5d38-84e4-b3faed385a4c) |
|---|---|
| Product | 7 Zip (6f30b4d5-0085-5a75-b16c-95b457d665e4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:gitee/han_jin_fei/p7zip |
purl2cpe | 2026-06-01 10:15:10.354754 |
pkg:github/freayd/p7zip |
purl2cpe | 2026-06-01 10:15:10.354756 |
pkg:github/jbdemonte/p7zip |
purl2cpe | 2026-06-01 10:15:10.354758 |
pkg:github/jinfeihan57/p7zip |
purl2cpe | 2026-06-01 10:15:10.354760 |
pkg:github/mcmilk/7-zip |
purl2cpe | 2026-06-01 10:15:10.354762 |
pkg:sourceforge/sevenzip |
purl2cpe | 2026-06-01 10:15:10.354764 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-11002 |
vulnerable | 2026-06-08 07:02:27.906846 |
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
HIGH (7)
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the handling of symbolic links in ZIP files. Crafted data in a ZIP file can cause the process to traverse to unintended directories. An attacker can leverage this vulnerability to execute code in the context of a service account. Was ZDI-CAN-26743.
Published: 2026-01-23T02:47:05.205Z
Updated: 2026-02-26T14:44:28.176Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11001 |
vulnerable | 2026-06-08 07:02:27.905375 |
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
HIGH (7)
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the handling of symbolic links in ZIP files. Crafted data in a ZIP file can cause the process to traverse to unintended directories. An attacker can leverage this vulnerability to execute code in the context of a service account. Was ZDI-CAN-26753.
Published: 2025-11-19T21:16:49.635Z
Updated: 2026-02-26T16:07:46.480Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.