CVE-2025-33027

Summary

CVE-2025-33027 is a Mark-of-the-Web Bypass vulnerability affecting Bandisoft Bandizip versions up to 7.37. This issue enables attackers to bypass the Mark-of-the-Web protection mechanism, allowing them to execute arbitrary code in the context of the current user. The vulnerability is triggered when users extract files from a maliciously crafted archive that carries the Mark-of-the-Web. User interaction is necessary for exploitation as the target needs to either visit a malicious webpage or open a malicious file. The flaw resides in Bandizip's handling of archived files, which fails to propagate the Mark-of-the-Web to extracted files, leaving them vulnerable to attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.