CVE-2025-0411 7-Zip 7-Zip
7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to execute arbitrary code in the context of the current user.
- CVSS
- not scored
On CISA’s exploited list
7-Zip Mark of the Web Bypass Vulnerability
- Added
- 2025-02-06
- Federal patch deadline
- 2025-02-27
- Ransomware use
- not known