[ Vendor · 7 CVEs ]
RARLAB
CVEs affecting RARLAB published in the last 30 days, plus any RARLAB CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2025-8088 | 8 Aug 2025 | CVSS 8.8 | RARLAB WinRAR Path TraversalA path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive… | Exploited |
| CVE-2025-6218 | 21 Jun 2025 | CVSS 7.8 | RARLAB WinRAR Path TraversalRARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… | Exploited |
| CVE-2023-38831 | 23 Aug 2023 | CVSS 7.8 | RARLAB WinRAR Code ExecutionRARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue… | Exploited |
| CVE-2023-38831 | 23 Aug 2023 | CVSS 7.8 | RARLAB WinRAR Code ExecutionRARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue… | Exploited |
| CVE-2022-30333 | 9 May 2022 | CVSS 7.5 | RARLAB UnRAR Directory TraversalRARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by… | ExploitedFix |
| CVE-2022-30333 | 9 May 2022 | CVSS 7.5 | RARLAB UnRAR Directory TraversalRARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by… | ExploitedFix |
| CVE-2018-20250 | 5 Feb 2019 | CVSS 7.8 | WinRAR Absolute Path TraversalIn WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in… | Exploited |