7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area.

Related CVEs

CVE-2022-29072

Key Information

GHSA ID

GHSA-37mw-x654-r2j8

Published

April 16, 2022 12:00 AM

Last Modified

March 21, 2024 3:34 AM

CVSS Score

7.5 /10

Primary Ecosystem

Unknown

Primary Package

Unknown

GitHub Reviewed

✗ No

Dataset

Last updated: August 24, 2025 6:28 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.