7Z
7-Zip
Security Research · Victor Zurck
ValidationConfirmed
Vendor StatusOpen-Accepted
ResolutionFix Scheduled for Next Version
“I’ll fix it in next version of 7-Zip. Thanks for report!”
Vendor acknowledgment · Technical details intentionally redactedContinental Case Register
Case IDTarget VendorCurrent MilestoneDisclosure State
CASE-001MicrosoftSubmitted to MSRC · Fully Weaponized RCE · Active Review / ReproductionEmbargoed / CVD
CASE-002MicrosoftSubmitted to MSRC · Denial of Service · Active Review / ReproductionEmbargoed / CVD
CASE-003AppleSubmitted to Apple · Denial of Service · Active TriageEmbargoed / CVD
CASE-004AppleSubmitted to Apple · Denial of Service · Vendor Assessment PendingEmbargoed / CVD
CASE-005AppleSubmitted to Apple · Denial of Service · Vendor Assessment PendingEmbargoed / CVD
CASE-006TrellixVendor Triage · Security Bypass · Updated-Build Validation RequestedEmbargoed / CVD
Technical details withheld during coordinated disclosure