Known exploited vulnerabilities
7-Zip vulnerabilities attackers have used
Every 7-Zip vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.
The short answer
CISA lists 1 7-Zip vulnerability as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2025-0411, added Feb 6, 2025. 7-Zip has the most entries (1).
- In KEV, all time
- 1
- Added, last 12 months
- 0
- Used in ransomware
- 0
- New CVEs this week
- 1
New Critical and High 7-Zip CVEs this week
- CVE-2026-125742high7-Zip before 26.06 contains a heap out-of-bounds write vulnerability in the LZX decoder that lets attackers corrupt memory when a continuation CAB volume declares a smaller window. Attackers can entice victims to extract crafted multi-volume CAB archives, where a stale _pos value bypasses bounds checks, enabling…
Every 7-Zip entry in CISA KEV
CVE-2025-0411
Added · due7-Zip Mark of the Web Bypass Vulnerability
7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to execute arbitrary code in the context of the current user.
Related
Know the day a CVE lands in your code
Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.