CVE-2018-10172: High severity 7-zip vulnerability
7-Zip through 18.01 on Windows implements the "Large memory pages" option by calling the LsaAddAccountRights function to add the SeLockMemoryPrivilege privilege to the user's account, which makes it easier for attackers to bypass intended access restrictions by using this privilege in the context of a sandboxed process.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-10172?
CVE-2018-10172 is a vulnerability in 7-Zip through version 18.01 on Windows that allows attackers to bypass access restrictions.
What is the severity of CVE-2018-10172?
CVE-2018-10172 has a severity rating of 8.8 (high).
How does CVE-2018-10172 affect 7-Zip on Windows?
CVE-2018-10172 affects 7-Zip through version 18.01 on Windows by allowing attackers to bypass access restrictions.
How can I fix CVE-2018-10172 in 7-Zip?
To fix CVE-2018-10172 in 7-Zip, update to a version beyond 18.01.
Where can I find more information about CVE-2018-10172?
You can find more information about CVE-2018-10172 at the following link: https://sourceforge.net/p/sevenzip/discussion/45797/thread/e730c709/?limit=25&page=1#b240