Winzip vulnerabilitiesNone on the known-exploited list.
Winzip has 14 published vulnerabilities across 4 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Winzip, with 14. If you run Winzip software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Winzip products have the most vulnerabilities?
Winzip leads with 14 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Winzip vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Winzip's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Winzip flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 62%CVE-2006-5198Medium
The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 allows remote attackers to execute arbitrary code via unspecified "unsafe methods."
- 43%CVE-2002-0370High
Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft...
- 24%CVE-2004-0333Critical
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.
- 15%CVE-2006-3890Critical
Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows remote attackers to execute arbitrary code via a long...
- 10%CVE-2025-1240High
WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
- 10%CVE-2004-0234Critical
Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long...
- 4.7%CVE-2006-6884Critical
Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 Build 6667 allows remote attackers to execute arbitrary code via a long argument to the...
- 4.1%CVE-2004-0235Medium
Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) ..
- 3.8%CVE-2008-3442High
WinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.
- 1.1%
Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line.
All Winzip products we track.
4 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
Running Winzip? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 allows remote attackers to execute arbitrary code via unspecified "unsafe methods."
- Matched to
- Winzip on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 14 published vulnerabilities across 4 products and 81 versions from Winzip.
None of Winzip's vulnerabilities is on the list of flaws known to be exploited today.
Winzip, with 14 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Winzip products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.