Поиск уязвимостей
Количество 8
Количество 8
CVE-2025-0411
7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of archived files. When extracting files from a crafted archive that bears the Mark-of-the-Web, 7-Zip does not propagate the Mark-of-the-Web to the extracted files. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current user. Was ZDI-CAN-25456.
CVE-2025-0411
7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of archived files. When extracting files from a crafted archive that bears the Mark-of-the-Web, 7-Zip does not propagate the Mark-of-the-Web to the extracted files. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current user. Was ZDI-CAN-25456.
CVE-2025-0411
7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows ...
GHSA-2pjx-wvcg-vhr8
7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of archived files. When extracting files from a crafted archive that bears the Mark-of-the-Web, 7-Zip does not propagate the Mark-of-the-Web to the extracted files. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current user. Was ZDI-CAN-25456.
BDU:2025-00670
Уязвимость механизма защиты Mark-of-the-Web архиватора 7-Zip позволяющая нарушителю выполнить произвольный код в контексте текущего пользователя
ROS-20250212-17
Уязвимость 7zip
ALT-PU-2025-7364
ALT-PU-2025-7364: package `7-zip` update to version 24.09-alt2
ALT-PU-2026-13491
ALT-PU-2026-13491: package `7-zip` update to version 26.02-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-0411 7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of archived files. When extracting files from a crafted archive that bears the Mark-of-the-Web, 7-Zip does not propagate the Mark-of-the-Web to the extracted files. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current user. Was ZDI-CAN-25456. | CVSS3: 7 | 48% Средний | почти 2 года назад |
 | CVE-2025-0411 7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of archived files. When extracting files from a crafted archive that bears the Mark-of-the-Web, 7-Zip does not propagate the Mark-of-the-Web to the extracted files. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current user. Was ZDI-CAN-25456. | CVSS3: 7 | 48% Средний | почти 2 года назад |
| CVE-2025-0411 7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows ... | CVSS3: 7 | 48% Средний | почти 2 года назад |
| GHSA-2pjx-wvcg-vhr8 7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of archived files. When extracting files from a crafted archive that bears the Mark-of-the-Web, 7-Zip does not propagate the Mark-of-the-Web to the extracted files. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current user. Was ZDI-CAN-25456. | CVSS3: 7 | 48% Средний | почти 2 года назад |
 | BDU:2025-00670 Уязвимость механизма защиты Mark-of-the-Web архиватора 7-Zip позволяющая нарушителю выполнить произвольный код в контексте текущего пользователя | CVSS3: 7 | 48% Средний | около 2 лет назад |
 | ROS-20250212-17 Уязвимость 7zip | CVSS2: 6.2 | 48% Средний | больше 1 года назад |
| ALT-PU-2025-7364 ALT-PU-2025-7364: package `7-zip` update to version 24.09-alt2 | CVSS3: 7.8 | больше 1 года назад | |
| ALT-PU-2026-13491 ALT-PU-2026-13491: package `7-zip` update to version 26.02-alt1 | CVSS3: 8.8 | 3 месяца назад |
Уязвимостей на страницу