PeaZip vulnerabilities
We track 5 vulnerabilities in PeaZip products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2026.
Latest PeaZip vulnerabilities
- 8.4 High severity
PeaZip: Improper Limitation of a Pathname to a Restricted Directory
Path Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas) in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... -> Associated appli
- 7.1 High severity
PeaZip: Incorrect Behavior Order: Validate Before Canonicalize
PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled.
- 8.4 High severity
PeaZip: Out-of-bounds Read
Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea component in PeaZip 11.2.0 and earlier allows an attacker who convinces a victim to open or extract a crafted .pea archive to execute arbitrar
- 7.8 High severity
PeaZip: Inclusion of Functionality from Untrusted Control Sphere
In PeaZip through 10.4.0, there is a Mark-of-the-Web Bypass Vulnerability. This vulnerability allows attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of PeaZip. User interaction is required to exploit this vulnerability in
- 7.8 High severity
PeaZip: Uncontrolled Search Path Element
A vulnerability has been found in PeaZip 9.4.0 and classified as problematic. Affected by this vulnerability is an unknown functionality in the library dragdropfilesdll.dll of the component Library Handler. The manipulation leads to uncontrolled search path. A