Izarc is a focused archival and compression utility with a narrow, stable product portfolio centered on its namesake application for file extraction and decompression. The durable vulnerability signal centers on code-injection weaknesses arising from the application's processing of untrusted archive formats, a class of flaw endemic to tools that parse complex binary structures. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Izarc over time
Signals from CVEs in this vendor scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-2720MEDIUM IZArc 4.1.8 displays a file's name on the basis of a ZIP archive's Central Directory entry, but launches this file on the basis of a ZIP archive's local file header, which allows u | May 27, 2014 | 6.8 | 23 | NO | NO |
CVE-2010-5235MEDIUM Untrusted search path vulnerability in IZArc Archiver 4.1.2 allows local users to gain privileges via a Trojan horse ztv7z.dll file in the current working directory, as demonstrate | Sep 7, 2012 | 6.9 | 20 | NO | NO |
CVE-2025-46652MEDIUM In IZArc through 4.5, there is a Mark-of-the-Web Bypass Vulnerability. When a user performs an extraction from an archive file that bears Mark-of-the-Web, Mark-of-the-Web is not pr | Apr 26, 2025 | 6.1 | 18 | NO | NO |
Signals from CVEs in this vendor scope (3 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Izarc.
Media articles that mention a CVE ID that affects a product developed by Izarc — matched by CVE ID, not by vendor name.