High 7.0
KEV-listed
CVE-2025-0411
7-Zip Vulnerabilities Bypass Windows SmartScreen
Vendor / product: 7-Zip
Public PoC: Yes
First tracked by RiskWire: 2026-07-28
CISA KEV catalog
Added to KEV
Federal remediation due
2025-02-27 (570 days overdue)
Ransomware campaign use
Unknown
CISA description
7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to execute arbitrary code in the context of the current user.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Sources & citations (1)
- 7-Zip Default Setting Lets Extracted Files Bypass Windows SmartScreen gbhackers.com · 2026-08-05
References
See CVE-2025-0411 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →