Rarlab vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Exploited Rarlab flaws

These are on CISA’s Known Exploited Vulnerabilities list, newest first. If you run any of these products, these come before everything else.

• CVE-2025-6218 RARLAB WinRAR Path TraversalExploited since Dec 9, 2025 · CVSS 7.8
• CVE-2025-8088 RARLAB WinRAR Path TraversalExploited since Aug 12, 2025 · ransomware · CVSS 8.4
• CVE-2023-38831 RARLAB WinRAR Code ExecutionExploited since Aug 24, 2023 · ransomware · CVSS 7.8
• CVE-2022-30333 RARLAB UnRAR Directory TraversalExploited since Aug 9, 2022 · ransomware · CVSS 7.5
• CVE-2018-20250 WinRAR Absolute Path TraversalExploited since Feb 15, 2022 · ransomware · CVSS 7.8

Latest high and critical flaws

• CVE-2026-14191 An out-of-bounds heap write exists in the RAR5 recovery-volume (.rev) parser in WinRAR and UnRAR (RecVolumes5::ReadHeader in recvol5.cpp).High 7.8 · Jul 1, 2026
• CVE-2025-8088 RARLAB WinRAR Path TraversalExploited · High 8.4 · Aug 8, 2025
• CVE-2014-125119 A filename spoofing vulnerability exists in WinRAR when opening specially crafted ZIP archives.High 8.4 · Jul 25, 2025
• CVE-2025-6218 RARLAB WinRAR Path TraversalExploited · High 7.8 · Jun 20, 2025
• CVE-2024-36052 RARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI escape sequences, a different issue than CVE-2024-33899.High 7.5 · May 21, 2024
• CVE-2023-40477 RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability.High 7.8 · May 2, 2024
• CVE-2024-33899 RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences.High 7.1 · Apr 28, 2024
• CVE-2023-38831 RARLAB WinRAR Code ExecutionExploited · High 7.8 · Aug 23, 2023
• CVE-2022-48579 UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains.High 7.5 · Aug 7, 2023
• CVE-2022-43650 This vulnerability allows remote attackers to disclose sensitive information on affected installations of RARLAB WinRAR 6.11.0.0.High 7.1 · Mar 29, 2023
• CVE-2022-30333 RARLAB UnRAR Directory TraversalExploited · High 7.5 · May 9, 2022
• CVE-2018-25018 UnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen::ReadRaw when called from QuickOpen::ReadNext.High 7.8 · Jun 30, 2021
• CVE-2017-20006 UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from Unpack::Unpack5 and CmdExtract::ExtractCurrentFile).High 7.8 · Jun 30, 2021
• CVE-2018-20250 WinRAR Absolute Path TraversalExploited · High 7.8 · Feb 5, 2019
• CVE-2017-14122 unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a stack-based buffer over-read in unrarlib.c, related to ExtrFile and stricomp.Critical 9.1 · Sep 3, 2017
• CVE-2017-14120 unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a directory traversal vulnerability for RAR v2 archives: pathnames of the form ../[filename] are unpackedHigh 7.5 · Sep 3, 2017
• CVE-2017-12942 libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function.Critical 9.8 · Aug 18, 2017
• CVE-2017-12941 libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function.Critical 9.8 · Aug 18, 2017
• CVE-2017-12940 libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function.Critical 9.8 · Aug 18, 2017
• CVE-2017-12938 UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the .High 7.5 · Aug 18, 2017
• CVE-2015-5663 The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extensionlHigh 7.4 · Dec 30, 2015
• CVE-2008-7144 Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted (1) ACE, (2) ARJ, (3) BZ2, (4) CAB, High 10 · Sep 1, 2009
• CVE-2006-3845 Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long filename in a LHA archiveHigh 9.3 · Jul 25, 2006
• CVE-2005-3262 Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file,High 7.5 · Oct 20, 2005
• CVE-2005-3263 Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via an ACE archive containing aHigh 7.5 · Oct 20, 2005