Exploited: 178
LatestCVE-2022-29966 — Emerson Ovation Missing Authentication for Critical Functionality
VulnFeed.org
AREN

zip vulnerabilities and fixes

Exploited and high-severity zip vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 7.5CVE-2026-115907zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed sizeFix availablezip
    2 min read
  2. 7.4CVE-2026-115908zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically.Fix availablezip
    2 min read
  3. 7.5CVE-2026-115909zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During ExtractionFix availablezip
    2 min read
Esc