Skip to main content
A Singapore Government Agency Website How to identify
Official website links end with .gov.sg
Secure websites use HTTPS
Look for a lock () or https:// as an added precaution. Share sensitive information only on official, secure websites.
Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

Call the 24/7 ScamShield Helpline at 1799 if you are unsure if something is a scam.

Cyber Security Agency of Singapore
Alerts

Vulnerabilities in 7-Zip

21 January 2025

7-Zip has released security updates addressing vulnerabilities (CVE-2025-0411 & CVE-2024-11477) in their software.

Successful exploitation of these vulnerabilities could allow a remote attacker to execute malicious code through specially crafted archive files that were opened.

These vulnerabilities have been fixed in 7-Zip version 24.09.

Users and administrators are advised to update to the latest version.

More information is available here:

https://www.zerodayinitiative.com/advisories/ZDI-25-045/ (opens in new tab)

https://www.zerodayinitiative.com/advisories/ZDI-24-1532/ (opens in new tab)

https://nvd.nist.gov/vuln/detail/CVE-2024-11477 (opens in new tab)