RARLab WinRAR vulnerabilities
7 published CVEs name RARLab WinRAR among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 7
- Last 12 months
- 1
- Critical
- 0
- Known exploited
- 1
Critical 0High 4Medium 2Low 1Not scored 0
CVEs per yearBy the year they were published
- 20231
- 20242
- 20253
- 20261
Known exploitedNewest addition to KEV first
- CVE-2025-6218
RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability
RARLAB · WinRAR
ExploitedHigh7.8
Newest CVEs
- CVE-2026-14191
WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader
RARLAB · WinRAR
High7.8 - CVE-2014-125119
WinRAR < 5.00 Filename Spoofing RCE
RARLab · WinRAR
High8.4 - CVE-2025-6218
RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability
RARLAB · WinRAR
ExploitedHigh7.8 - CVE-2025-31334
Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR…
RARLAB · WinRAR
Medium6.8 - CVE-2023-40477
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability
RARLAB · WinRAR
High7.8 - CVE-2024-30370
RARLAB WinRAR Mark-Of-The-Web Bypass Vulnerability
RARLAB · WinRAR
Medium4.3 - CVE-2022-43650
This vulnerability allows remote attackers to disclose sensitive information on affected installations of RARLAB WinRAR 6.11.0.0. User interaction is required…
RARLAB · WinRAR
Low2.5