winzip vulnerabilities and fixes

Recent CVEs affecting winzip, with upgrade or downgrade steps. 2 tracked.

winzip has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-02-11. Highest priority: CVE-2025-1240 (score 55/100).

• CVE-2025-1240 HIGH 8.8 UPGRADE WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• CVE-2024-8811 HIGH 7.8 UPGRADE WinZip Mark-of-the-Web Bypass Vulnerability

FAQ

How do I fix winzip vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is winzip being exploited right now?

None of the tracked winzip CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which winzip CVE should I patch first?

CVE-2025-1240 currently ranks highest (55/100): WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

← Back to latest CVEs