7-Zip

Version

18.06

Version trail

All 21 versions

winget:7zip.7zip

View website ↗ History

Version 18.06 of 7-Zip on Windows is exposed to documented active exploitation (CISA KEV: 0). Update urgently.

Known vulnerabilities: 32
Still open: 17
KEV open: 0
Max CVSS (open): -

Recommended action

Update to ≥ 26.02 to clear the 17 open CVEs. 1 actively-exploited CVE (CISA KEV), top priority.

Known vulnerabilities (CVE)

17 open 6 undetermined 9 fixed

Latest matched CVE: 2026

Test a different version

CVE	Status	Severity	Vector	KEV	Published	Fixed in
CVE-2026-14266 Open HIGH 7.8 Local Fixed in: 26.02 2026-07-29	Open	HIGH 7.8	Local	—	2026-07-29	26.02
CVE-2026-58052 Open LOW 3.3 Local Fixed in: > 26.01 2026-06-28	Open	LOW 3.3	Local	—	2026-06-28	> 26.01
CVE-2026-48112 Open MEDIUM 6.5 Network Fixed in: 26.01 2026-06-05	Open	MEDIUM 6.5	Network	—	2026-06-05	26.01
CVE-2026-48111 Open MEDIUM 4.3 Network Fixed in: 26.01 2026-06-05	Open	MEDIUM 4.3	Network	—	2026-06-05	26.01
CVE-2026-48104 Open MEDIUM 4.2 Network Fixed in: 26.01 2026-06-05	Open	MEDIUM 4.2	Network	—	2026-06-05	26.01
CVE-2026-48103 Open MEDIUM 4.3 Network Fixed in: 26.01 2026-06-05	Open	MEDIUM 4.3	Network	—	2026-06-05	26.01
CVE-2026-48102 Open LOW 3.1 Network Fixed in: 26.01 2026-06-05	Open	LOW 3.1	Network	—	2026-06-05	26.01
CVE-2026-48101 Open MEDIUM 6.5 Network Fixed in: 26.01 2026-06-05	Open	MEDIUM 6.5	Network	—	2026-06-05	26.01
CVE-2026-48095 Open HIGH 8.8 Network Fixed in: 26.01 2026-06-05	Open	HIGH 8.8	Network	—	2026-06-05	26.01
CVE-2026-48092 Open MEDIUM 4.3 Network Fixed in: 26.01 2026-06-05	Open	MEDIUM 4.3	Network	—	2026-06-05	26.01
CVE-2025-55188 Open LOW 3.6 Local Fixed in: 25.01 2025-08-08	Open	LOW 3.6	Local	—	2025-08-08	25.01
CVE-2025-53817 Open HIGH 7.5 Network Fixed in: 25.00 2025-07-17	Open	HIGH 7.5	Network	—	2025-07-17	25.00
CVE-2025-53816 Open HIGH 7.5 Network Fixed in: 25.00 2025-07-17	Open	HIGH 7.5	Network	—	2025-07-17	25.00
CVE-2025-0411 Open HIGH 7.0 KEV Local Fixed in: 24.09 2025-01-25	Open	HIGH 7.0	Local	KEV	2025-01-25	24.09
CVE-2024-11477 Open HIGH 7.8 Local Fixed in: 24.07 2024-11-22	Open	HIGH 7.8	Local	—	2024-11-22	24.07
CVE-2023-31102 Open HIGH 7.8 Local Fixed in: 22.01 2023-11-03	Open	HIGH 7.8	Local	—	2023-11-03	22.01
CVE-2022-29072 Open HIGH 7.8 Local Fixed in: > 21.07 2022-04-15	Open	HIGH 7.8	Local	—	2022-04-15	> 21.07

Show 9 CVEs fixed in earlier versions

CVE	Status	Severity	Vector	KEV	Published	Fixed in
CVE-2024-11612 Fixed MEDIUM 6.5 Network Fixed in: 24.08 2024-11-22	Fixed	MEDIUM 6.5	Network	—	2024-11-22	24.08
CVE-2018-10115 Fixed HIGH 7.8 Local Fixed in: > 18.03 2018-05-02	Fixed	HIGH 7.8	Local	—	2018-05-02	> 18.03
CVE-2018-10172 Fixed HIGH 8.8 Local Fixed in: > 18.01 2018-04-16	Fixed	HIGH 8.8	Local	—	2018-04-16	> 18.01
CVE-2018-5996 Fixed HIGH 7.8 Local Fixed in: 18.00 2018-01-31	Fixed	HIGH 7.8	Local	—	2018-01-31	18.00
CVE-2017-17969 Fixed HIGH 7.8 Local Fixed in: 18.00 2018-01-30	Fixed	HIGH 7.8	Local	—	2018-01-30	18.00
CVE-2016-7804 Fixed HIGH 7.8 Local Fixed in: > 16.02 2017-05-22	Fixed	HIGH 7.8	Local	—	2017-05-22	> 16.02
CVE-2016-2334 Fixed HIGH 7.8 Local Fixed in: > 15.14 2016-12-13	Fixed	HIGH 7.8	Local	—	2016-12-13	> 15.14
CVE-2008-6536 Fixed N/A Fixed in: > 4.56 2009-03-30	Fixed	N/A	—	—	2009-03-30	> 4.56
CVE-2007-4725 Fixed N/A Fixed in: > 4.42 2007-09-05	Fixed	N/A	—	—	2007-09-05	> 4.42

6 indeterminable CVE(s) hidden (missing current version or incompatible version schemes). · Show

Description, scores, permissions, trackers and HackerOne reports reflect the current store state and are only shown on the current page.