7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the…

Description

7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area. This is caused by misconfiguration of 7z.dll and a heap overflow. The command runs in a child process under the 7zFM.exe process. NOTE: multiple third parties have reported that no privilege escalation can occur

Scores

EPSS (exploitation in 30 days)

1.5% · top 25% of all CVEs (6 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Weakness

• n/a
• CWE-787 (opens in a new tab)All about CWE-787 and its CVEs

Affected products

• n/a

  • affected n/a

References (5)

• https://sourceforge.net/p/sevenzip/bugs/2337/ (opens in a new tab)x_refsource_MISCx_transferred
• https://www.youtube.com/watch?v=sT1cvbu7ZTA (opens in a new tab)x_refsource_MISCx_transferred
• https://github.com/kagancapar/CVE-2022-29072 (opens in a new tab)x_refsource_MISCx_transferred
• https://news.ycombinator.com/item?id=31070256 (opens in a new tab)x_refsource_MISCx_transferred
• http://packetstormsecurity.com/files/166763/7-Zip-21.07-Code-Execution-Privilege-Escalation.html (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2022-29072](https://trackcve.app/badge/CVE-2022-29072.svg)](https://trackcve.app/cve/CVE-2022-29072)

Record last updated 9 Jun 2025, 14:47 UTC.