CVE-2025-33026 is a Mark-of-the-Web bypass vulnerability in PeaZip through version 10.4.0. It allows attackers to bypass the Mark-of-the-Web protection mechanism when extracting files from a crafted archive, failing to propagate the security zone information to the extracted content. This vulnerability has a CVSS score of 7.8 (High), indicating a significant risk, as it can lead to arbitrary code execution in the context of the current user, requiring user interaction to exploit. There is currently no public exploit intelligence, such as Metasploit modules or ExploitDB entries, and it has not garnered significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 10.4.0CPE matchmatch criteria | cpe:2.3:a:peazip:peazip:*:*:*:*:*:*:*:* | ||
>= 0, <= 10.4.0CPE match | cpe:2.3:a:peazip:peazip:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.