Bandisoft Bandizip
3 CVEs affecting Bandisoft Bandizip. Latest disclosed: 2025-04-15. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-26623 | High | 7.8 | 2022-04-01 | A remote code execution vulnerability due to incomplete check for 'xheader_decode_path_record' function's parameter length value in the ark library. Remote att… |
CVE-2025-33027 | Medium | 6.1 | 2025-04-15 | In Bandisoft Bandizip through 7.37, there is a Mark-of-the-Web Bypass Vulnerability. This vulnerability allows attackers to bypass the Mark-of-the-Web protecti… |
CVE-2014-1680 | | 2014-02-14 | Untrusted search path vulnerability in Bandisoft Bandizip before 3.10 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current w… |