Critical 7-Zip Vulnerabilities Put Windows PCsโ at Risk โ- Update Now!
October 11, 2023 – Millionsโ of Windows users are unknowingly vulnerable to โpotential cyberattacks due to recently disclosed โsecurity flaws in the popular file compression utility, 7-Zip.Two high-severity vulnerabilities, scoring a 7 out of 10 โขon theโฃ CVSS scale, could allow โฃmalicious archives to “escape” โฃdesignated recovery folders and write โfiles toโฃ sensitive system locations, potentially compromising systemโ functionality.
Theโ vulnerabilities were initially patched by 7-Zip developer โ Igor Pavlov onโค July 5th, 2023, with the release of version 25.00. However, the public disclosure of the issue didn’t occurโ until October 7th, 2023, leaving aโค notable window of chance for attackers. Aโ key factor exacerbating the risk is 7-Zip’s lack of an automatic update mechanism, meaning many installations remain unprotected.
The vulnerabilities exploit how 7-zip handles symbolic links (also known as symlinks), special files thatโค act asโ shortcuts.A crafted archive can leverage these links toโ bypass securityโ measures and gain unauthorized access.โ
“A malicious archive can thus ‘escape’ theโฃ recovery folder and write files to sensitive โฃsystem roads, with the โpossibility of changing and compromising theโข window’s function, at least potentially,”โ theโค security advisory explains.
This isn’t the frist timeโข 7-zipโ has faced security scrutiny.Earlier in 2023,โข another vulnerability, CVE-2023-0411, was discovered thatโ allowed bypassing Windows’โข Mark-of-the-Web security feature, which flags downloaded files as potentially hazardous. That issue was also resolved โwith a subsequent โversion update (24.09).
How to Protect Your windows PC: Update 7-Zip Instantly
Users running versions of 7-Zip prior โขto 25.00 are urged to update immediately. Here’s how:
- Close 7-Zip: Ensure the application is not running to avoid conflicts during the update process.
- Visit the Officialโค Download Page: Goโฃ to https://www.7-zip.org/.
- download the Correct Version: Click the Download link corresponding to your operating โฃsystem: 64-bit Windows X64 โfor most modern systems, โข 32-bit Windows X86,โข etc.
- Scan the Downloaded File: For added security, perform a fast antivirus scan of the downloaded installation file.
- Run the Installer: Double-click the โข .exe file and grant administrator permissions when prompted.
- Install and Close: The setup programโ will โdetect the previous version โคandโ offer to update while preserving existing โsettings.โ Click Install > Close.
- Verify the Update: Restart 7-zip and โฃconfirm the update by navigating to โ Helpโ > โAbout 7-Zip. the version number should now โขdisplay 25.01.
While โขversion 25.01 also includes bug fixes and improvements related to โคarchive handling, the primary reason to update is โคto mitigate these critical security vulnerabilities. โฃGiven the potential for exploitation, promptโค action is essential โto safeguard your โขWindows PC.





