7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area. This is caused by misconfiguration of 7z.dll and a heap overflow. The command runs in a child process under the 7zFM.exe process. NOTE: multiple third parties have reported that no privilege escalation can occur

Published: 2022-04-15

CVSS: 7.8

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Download Exploit for CVE-2022-29072 here:

Use Tor Browser to access .onion links.

Check our team here:

https://tatramed.sk/exploit-401-cve-2024-3596/

https://tatramed.sk/exploit-1050-cve-2023-44221/

https://tatramed.sk/exploit-451-cve-2025-22869/