CyberSecBulletin

WinZip Computing vulnerabilities

We track 2 vulnerabilities in WinZip Computing products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 11, 2025.

2vulnerabilities
0critical
2high
0exploited
8.3average CVSS score

Latest WinZip Computing vulnerabilities

  • 8.8 High severity

    WinZip: Out-of-bounds Write

    CVE-2025-1240WinZip ComputingEPSS 10.3%

    WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of WinZip. User interaction is required to exploit this vulnerability in that the tar

  • 7.8 High severity

    WinZip: Always-Incorrect Control Flow Implementation

    CVE-2024-8811WinZip Computing

    WinZip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of WinZip. User interaction is required to exploit this vulnerability in that the target must v