7-zip 7-zip

Name: 7-zip 7-zip
Brand: 7-zip

productUS

cpe:2.3:a:7-zip:7-zip:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical20high2medium2low

updated 2026-10-27

vulnerabilities (32)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-0411US	high7.0OT critical	67.1% (99th)	KEV	24.09	2025-01-25	< 24.09
CVE-2025-11001US	high7.8	27.4% (98th)	Exploit	no fix	2025-11-19	= 24.09
CVE-2024-11477US	high7.8	22.4% (98th)	Exploit	24.07	2024-11-22	< 24.07
CVE-2016-2334US	high7.8	14.7% (97th)	Exploit	no fix	2016-12-13	≤ 15.14
CVE-2007-4725US	medium6.8	5.56% (93rd)	Exploit	no fix	2007-09-05	11 versions
CVE-2022-29072US	high7.8	1.54% (75th)	Exploit	no fix	2022-04-15	≤ 21.07
CVE-2026-48095US	—	1.12% (66th)	Exploit	26.01	2026-06-05	< 26.01
CVE-2025-55188US	—	1.00% (62nd)	Exploit	25.01	2025-08-08	< 25.01
CVE-2026-14266US	high7.8	0.74% (54th)	Exploit	26.02	2026-07-29	< 26.02
CVE-2023-31102US	high7.8	54.0% (99th)	—	22.01	2023-11-03	< 22.01
CVE-2023-40481US	—	13.9% (97th)	—	no fix	2024-05-03	= 22.01
CVE-2016-2335US	high8.8	9.79% (96th)	—	no fix	2016-06-07	2 versions
CVE-2017-17969US	high7.8	4.99% (92nd)	—	18.00	2018-01-30	< 18.00
CVE-2018-10115US	high7.8	4.54% (92nd)	—	no fix	2018-05-02	≤ 18.03
CVE-2018-5996US	high7.8	2.88% (87th)	—	18.00	2018-01-31	< 18.00
CVE-2008-6536US	high10.0	2.81% (86th)	—	no fix	2009-03-30	36 versions
CVE-2026-48092US	high8.1	2.74% (86th)	—	26.01	2026-06-05	9.34 → 26.01
CVE-2026-48111US	high7.1	2.16% (82nd)	—	26.01	2026-06-05	9.21 → 26.01
CVE-2026-48103US	high7.1	2.16% (82nd)	—	26.01	2026-06-05	9.34 → 26.01
CVE-2016-7804US	high7.8	1.81% (79th)	—	no fix	2017-05-22	≤ 16.02
CVE-2024-11612US	—	1.77% (78th)	—	24.08	2024-11-22	24.06 → 24.08
CVE-2025-53816US	high7.5	0.73% (54th)	—	25.00	2025-07-17	< 25.00
CVE-2025-53817US	high7.5	0.71% (53rd)	—	25.00	2025-07-17	< 25.00
CVE-2025-11002US	high7.8	0.54% (45th)	—	no fix	2026-01-23	= 24.09
CVE-2018-10172US	high8.8	0.37% (31st)	—	no fix	2018-04-16	≤ 18.01
CVE-2026-48101US	—	0.28% (20th)	—	26.01	2026-06-05	9.21 → 26.01
CVE-2026-48112US	—	0.27% (19th)	—	26.01	2026-06-05	9.34 → 26.01
CVE-2022-47111US	low3.3	0.24% (15th)	—	no fix	2025-04-19	= 22.01
CVE-2022-47112US	low3.3	0.19% (9th)	—	no fix	2025-04-19	= 22.01
CVE-2026-48102US	medium4.3	0.19% (9th)	—	26.01	2026-06-05	9.11 → 26.01
CVE-2026-48104US	—	0.18% (7th)	—	26.01	2026-06-05	9.18 → 26.01
CVE-2026-58052US	—	0.17% (6th)	—	26.03	2026-06-28	< 26.03

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read6 CVEs
CWE-122Heap-based Buffer Overflow4 CVEs
CWE-190Integer Overflow or Wraparound4 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')3 CVEs
CWE-908Use of Uninitialized Resource3 CVEs
CWE-191Integer Underflow (Wrap or Wraparound)2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE32 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan