Product by Cthackers
Adm-zip
9 known vulnerabilities in Adm-zip (Cthackers), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-92000 | adm-zip 0.5.14 through 0.6.0 Denial of Service via Zero Declared Uncompressed Size | 7.5 | |
| High | CVE-2026-114102 | adm-zip before 0.6.1 Denial of Service via inflateAsync Unhandled Error Event | 7.5 | |
| High | CVE-2026-77301 | adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS) | 7.5 | |
| High | CVE-2026-114104 | adm-zip before 0.6.1 Duplicate ZIP Entry Name Validation Bypass | 5.9 | |
| Medium | CVE-2026-114103 | adm-zip 0.6.0 Decompression Bomb Guard Bypass via getDataAsync() | 5.3 | |
| High | CVE-2026-102282 | adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation | 7.1 | |
| Medium | CVE-2026-114105 | Adm-zip before 0.6.1 Privilege Escalation via keepOriginalPermission Setuid Bits | 6.2 | |
| Medium | CVE-2026-116137 | adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names | 3.7 | |
| Medium | CVE-2026-76845 | adm-zip 0.5.9 through 0.6.0 Arbitrary File Overwrite via Symlink Following on Extraction | 6.5 |