7-Zip up to 21.07 on Windows allows privilege escalation and command execution
You need to drag the malicious .7z-file onto the 7Zip Help window. I don't know who is at fault, but that's a pretty weird intrusion vector.