CVE-2025-50328

{
  "id": "CVE-2025-50328",
  "sourceIdentifier": "[email protected]",
  "published": "2026-04-29T21:16:19.600",
  "lastModified": "2026-11-04T20:10:00.263",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in B1 Free Archiver v1.5.86 allows files extracted from downloaded archives to bypass Windows Mark of the Web (MotW) protections. When an archive is downloaded from the internet and extracted using B1 Free Archiver, the software fails to propagate the 'Zone.Identifier' alternate data stream to the extracted files. As a result, these files can be executed without triggering Windows Defender SmartScreen warnings or security prompts, enabling untrusted code execution without standard security restrictions."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en B1 Free Archiver v1.5.86 permite que los archivos extraídos de archivos descargados eludan las protecciones de la Marca de la Web (MotW) de Windows. Cuando se descarga un archivo de internet y se extrae usando B1 Free Archiver, el software no propaga el flujo de datos alternativo ’Zone.Identifier’ a los archivos extraídos. Como resultado, estos archivos pueden ejecutarse sin activar las advertencias de Windows Defender SmartScreen o las solicitudes de seguridad, lo que permite la ejecución de código no confiable sin las restricciones de seguridad estándar."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "baseScore": 7.3,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "availabilityImpact": "LOW"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-04-30T13:19:36.083420Z",
          "id": "CVE-2025-50328",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-290"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://b1.org/",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/math69b/B1FREE/blob/main/B1%20Free%20Archiver%20version",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/math69b/B1FREE/blob/main/B1%20Free%20Archiver%20version",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}