The vulnerability in question is CVE-2025-11001 (CVSS score: 7.0), which allows remote attackers to execute arbitrary code.

Two newly disclosed vulnerabilities in 7-Zip could allow attackers to execute arbitrary code by tricking users into opening a malicious ZIP archive. The issues, reported October 7 by Trend Micro’s ...

The recently reported mark-of-the-web vulnerability in 7-Zip has been exploited by attackers in the wild to smuggle malicious code. About two weeks ago, a vulnerability was disclosed in 7-Zip that ...

What makes the threat particularly dangerous is not just because it is being utilized, but also because it allows a person to remotely execute malware on an computer. 7-zip, one of the world's most ...