37 CVEs affecting 7-Zip products, 1 known to be exploited (CISA KEV), with EPSS scores. Most affected: 7-Zip, p7zip, 7zip.