CVE-2018-10172

7-Zip through 18.01 on Windows implements the "Large memory pages" option by calling the LsaAddAccountRights function to add the SeLockMemoryPrivilege privilege to the user's account, which makes it easier for attackers to bypass intended access restrictions by using this privilege in the context...

CVE-2025-11001

7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on...

CVE-2025-11001: Improper Limitation of a Pathname to a Restricted Directory

7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on...

karchive:k7z_fuzzer: Use-of-uninitialized-value in K7Zip::openArchive

Detailed Report: https://oss-fuzz.com/testcase?key=6574051113107456 Project: karchive Fuzzing Engine: libFuzzer Fuzz Target: k7zfuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: K7Zip::openArchive karchivefuzzer.cc...

EUVD-2016-8653

Malware in sbrugna...

EUVD-2018-17761

Malware in sbrugna...

EUVD-2018-2250

Malware in sbrugna...

EUVD-2017-11290

Malware in sbrugna...

EUVD-2008-6503

Malware in sbrugna...

EUVD-2018-2194

Malware in sbrugna...

EUVD-2017-9112

Malware in sbrugna...

EUVD-2023-45052

Malicious code in bioql PyPI...

EUVD-2024-33917

Malicious code in bioql PyPI...

EUVD-2022-49887

Malicious code in bioql PyPI...

EUVD-2022-49886

Malicious code in bioql PyPI...

EUVD-2025-21790

Malicious code in bioql PyPI...

EUVD-2025-21791

Malicious code in bioql PyPI...

CVE-2025-55188

7-Zip before 25.01 does not always properly handle symbolic links during extraction...

CVE-2025-55188: Improper Link Resolution Before File Access

7-Zip before 25.01 does not always properly handle symbolic links during extraction...

ROS-20250804-03

Vulnerability of NCompress::NRar5::CDecoder method of RAR5 decoder of 7-Zip archiver is related to possibility of heap-based buffer overflow. Exploitation of the vulnerability could allow an attacker to cause a denial of denial of service Vulnerability of NArchive::NCom::CHandler::GetStream metho...