RaqibCTI
CVE

CVE-2025-0411

P2
7-Zip Mark of the Web Bypass Vulnerability
7-Zip · 7-Zip
Date added (CISA)
2025-02-06
Remediation due
2025-02-27
Known ransomware use
Not indicated
Remediation priority
P2past CISA due date

Description

7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to execute arbitrary code in the context of the current user.

Source: NVD ↗ · CISA KEV Catalog ↗