Multiple vulnerabilities in 7-Zip

Description

Multiple vulnerabilities were found in 7-Zip. Malicious users can exploit these vulnerabilities to .

Below is a complete list of vulnerabilities:

1. File Parsing Directory Traversal Remote Code Execution vulnerability in 7-zip can be exploited remotely to execute arbitrary code
2. File Parsing Directory Traversal Remote Code Execution vulnerability in handling of symbolic links can be exploited remotely to execute arbitrary code

Original advisories

• CVE-2025-11001

• CVE-2025-11001
• ZDI-25-950
• ZDI-25-949

Exploitation

Public exploits exist for this vulnerability.

Related products

• 7-Zip

CVE list

• CVE-2025-11002
  high
• CVE-2025-11001
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com