CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-01-25
7-Zip Mark-of-the-Web (MotW) Bypass and Remote Code Execution Vulnerability (CVE-2025-0411)
[Affected Scope] All unpatched installations of 7-Zip software
[Impact] When extracting files from a crafted archive, the Mark-of-the-Web (MotW) is not propagated, allowing arbitrary code execution under the current user context without security warnings
[Mitigation] Immediately upgrade 7-Zip to the latest patched version and monitor unpatched endpoint assets