WinZip vulnerabilities

2 known vulnerabilities in WinZip from WinZip Computing. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  WinZip: Out-of-bounds Write

  CVE-2025-1240Feb 11, 2025WinZip ComputingEPSS 10.3%

  WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of WinZip. User interaction is required to exploit this vulnerability in that the tar

• 7.8 High severity

  WinZip: Always-Incorrect Control Flow Implementation

  CVE-2024-8811Nov 22, 2024WinZip Computing

  WinZip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of WinZip. User interaction is required to exploit this vulnerability in that the target must v