A vulnerability in B1 Free Archiver v1.5.86 allows files extracted from downloaded archives to bypass Windows Mark of the Web (MotW) protections. When an archive is downloaded from the internet and extracted using B1 Free Archiver, the software fails to propagate the 'Zone.Identifier' alternate data stream to the extracted files. As a result, these files can be executed without triggering Windows Defender SmartScreen warnings or security prompts, enabling untrusted code execution without standard security restrictions.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| B1 |
|
No data.
No data.
References
History
Thu, 30 Apr 2026 08:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
B1
B1 free Archiver |
|
| Vendors & Products |
B1
B1 free Archiver |
Thu, 30 Apr 2026 04:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Bypass of Windows Mark of the Web in B1 Free Archiver enabling untrusted code execution | |
| Weaknesses | CWE-284 |
Wed, 29 Apr 2026 20:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A vulnerability in B1 Free Archiver v1.5.86 allows files extracted from downloaded archives to bypass Windows Mark of the Web (MotW) protections. When an archive is downloaded from the internet and extracted using B1 Free Archiver, the software fails to propagate the 'Zone.Identifier' alternate data stream to the extracted files. As a result, these files can be executed without triggering Windows Defender SmartScreen warnings or security prompts, enabling untrusted code execution without standard security restrictions. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-04-29T20:02:30.158Z
Reserved: 2025-06-16T00:00:00.000Z
Link: CVE-2025-50328
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-04-29T21:16:19.600
Modified: 2026-04-29T21:16:19.600
Link: CVE-2025-50328
Redhat
No data.