7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
73Vexday Risk Score
Priorize a correção. Ela exploração observada pelo VulnCheck e tem prova de conceito pública.
ssvc Actcvss 7epss 27%
da publicação à arma0 dias
Publicada no NVD19 de nov.
1ª PoC14 de out.
VulnCheck+62d
probabilidade de exploração
27%top 2% das CVEs
exploração observada
simVulnCheck
13 exploit(s) público(s)
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the handling of symbolic links in ZIP files. Crafted data in a ZIP file can cause the process to traverse to unintended directories. An attacker can leverage this vulnerability to execute code in the context of a service account. Was ZDI-CAN-26753.
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
7-Zip · 7-ZipPoCs públicas encontradas — 13
exploitdbwww.exploit-db.com/exploits/52501não verificadogithubgithub.com/pacbypass/CVE-2025-11001★ 151githubgithub.com/mbanyamer/CVE-2025-11001---7-Zip★ 7githubgithub.com/I3r1h0n/7Ziprowler★ 1githubgithub.com/ranasen-rat/CVE-2025-11001★ 0githubgithub.com/lastvocher/7zip-CVE-2025-11001★ 0vulncheckvulncheck.com/xdb/c3ff30916c09não verificadovulncheckvulncheck.com/xdb/b39307602fe6não verificadovulncheckvulncheck.com/xdb/5495a1d67b1dnão verificadovulncheckvulncheck.com/xdb/8747cceb7d12não verificadovulncheckvulncheck.com/xdb/761fb1ba9b69não verificadovulncheckvulncheck.com/xdb/4ba4387a5c21não verificadovulncheckvulncheck.com/xdb/69cd6dc0c9cbnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.