# 7-Zip vulnerabilities

> 7-Zip has 22 published vulnerabilities across 3 products in our catalogue. 1 of them is on the list of flaws known to be exploited, so criminals are using them now. The most affected product is 7-Zip, with 19. If you run 7-Zip software, patch the exploited flaws first.

Canonical page: https://www.edgeprotect.io/vendors/7-zip

## At a glance

- **Published vulnerabilities:** 22
- **Known to be exploited:** 1
- **Products:** 3
- **Versions:** 153
- **Most recently added to the known-exploited list:** [CVE-2025-0411](https://www.edgeprotect.io/what-is/cve-2025-0411), 6 February 2025. We keep watching the list.

## Which 7-Zip products have the most vulnerabilities?

- [7-Zip](https://www.edgeprotect.io/product/7-zip/7-zip): 19 published vulnerabilities, 107 versions
- [P7zip](https://www.edgeprotect.io/product/7-zip/p7zip): 5 published vulnerabilities, 44 versions
- [7zip](https://www.edgeprotect.io/product/7-zip/7zip): 0 published vulnerabilities, 2 versions

Each product page lists its own known-exploited flaws.

## Which 7-Zip vulnerabilities are being exploited?

1 flaw is on the government list of vulnerabilities known to be exploited, newest first:

- [CVE-2025-0411](https://www.edgeprotect.io/what-is/cve-2025-0411): 7-Zip Mark of the Web Bypass Vulnerability. High, CVSS 7.0, chance of use in 30 days 67%, known exploited since 6 February 2025.

## Which 7-Zip flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days):

- [CVE-2025-0411](https://www.edgeprotect.io/what-is/cve-2025-0411): 67%, High (CVSS 7.0), known exploited
- [CVE-2023-31102](https://www.edgeprotect.io/what-is/cve-2023-31102): 54%, High (CVSS 7.8)
- [CVE-2024-11477](https://www.edgeprotect.io/what-is/cve-2024-11477): 22%, High (CVSS 7.8)
- [CVE-2016-2334](https://www.edgeprotect.io/what-is/cve-2016-2334): 15%, High (CVSS 7.8)
- [CVE-2016-2335](https://www.edgeprotect.io/what-is/cve-2016-2335): 9.8%, High (CVSS 8.8)
- [CVE-2007-4725](https://www.edgeprotect.io/what-is/cve-2007-4725): 5.6%, Medium (CVSS 6.8)
- [CVE-2017-17969](https://www.edgeprotect.io/what-is/cve-2017-17969): 5.0%, High (CVSS 7.8)
- [CVE-2018-10115](https://www.edgeprotect.io/what-is/cve-2018-10115): 4.5%, High (CVSS 7.8)
- [CVE-2015-1038](https://www.edgeprotect.io/what-is/cve-2015-1038): 3.3%, Medium (CVSS 5.8)

## All 7-Zip products we track

3 products with at least one tracked version, most vulnerabilities first:

- [7-Zip](https://www.edgeprotect.io/product/7-zip/7-zip): 19 vulnerabilities, 107 versions
- [P7zip](https://www.edgeprotect.io/product/7-zip/p7zip): 5 vulnerabilities, 44 versions
- [7zip](https://www.edgeprotect.io/product/7-zip/7zip): 0 vulnerabilities, 2 versions

## Questions

### How many vulnerabilities does 7-Zip have?

Our catalogue lists 22 published vulnerabilities across 3 products and 153 versions from 7-Zip. The most recent 7-Zip flaw added to the known-exploited list is CVE-2025-0411, on 6 February 2025.

### Which 7-Zip vulnerabilities are being exploited?

1 7-Zip vulnerability is on the list of flaws known to be exploited. The most recently added is CVE-2025-0411. The full list is on this page.

### Which 7-Zip product has the most vulnerabilities?

7-Zip, with 19 published vulnerabilities. Its own page lists the ones known to be exploited.

### How do I get alerts for new 7-Zip vulnerabilities?

Create a EdgeProtect account and track the 7-Zip products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

## Running 7-Zip?

EdgeProtect keeps checking for you:

- **Tell us what you run.** Pick your software from a list, or let us work it out from your website.
- **We match it to every flaw.** Over 400,000 published flaws, checked against your list.
- **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it.
- **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools.

Start free (no card, nothing to install): https://www.edgeprotect.io/register
Book a demo: https://www.edgeprotect.io/contact

