BA
Product
Bandizip
4
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 1Medium 0Low 1
Watch
Add Bandizip to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-26623 | 9.8 | Apr 1 | A remote code execution vulnerability due to incomplete check for 'xheader_decode_path_record' function's parameter length value in the ark library Affected: before 7.19 |
| CVE-2025-33027 | 7.8 | Apr 15 | In Bandisoft Bandizip through 7.37, there is a Mark-of-the-Web Bypass Vulnerability Affected: through 7.37 |
| CVE-2026-113609 | 3.3 | Oct 20 | Bandisoft Bandizip before 7.47 Mark-of-the-Web Bypass for PowerShell Scripts Affected: before 7.47 |
| CVE-2014-1680 | – | Feb 14 | Untrusted search path vulnerability in Bandisoft Bandizip before 3.10 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory Affected: through 3.09; 3.00; 3.01; 3.02; 3.03; 3.04; +4 more |
Showing 4