Product by RARLAB
RARLAB WinRAR
30 known vulnerabilities in RARLAB WinRAR (RARLAB), 4 of them actively exploited (CISA KEV).
Key figures
30
Vulnerabilities
4
Actively exploited (KEV)
3
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-8088 | Path traversal vulnerability in WinRAR In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2023-38831 | RARLAB WinRAR Code Execution Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2018-20250 | WinRAR Absolute Path Traversal Vulnerability In CISA KEVRansomwarealso in 1 other product | 7.8 | |
| Critical | CVE-2025-6218 | RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability In CISA KEV | 7.8 | |
| High | CVE-2023-40477 | RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2018-20253 | Check Point Software Technologies WinRAR: Out-of-bounds Write | 7.8 | |
| Medium | CVE-2018-20251 | Check Point Software Technologies WinRAR: Protection Mechanism Failure | 5.5 | |
| High | CVE-2014-125119 | WinRAR < 5.00 Filename Spoofing RCE | — | |
| High | CVE-2018-20252 | Check Point Software Technologies WinRAR: Out-of-bounds Write | 7.8 | |
| High | CVE-2022-43650 | RARLAB WinRAR: Out-of-bounds Read | 2.5 | |
| Medium | CVE-2025-31334 | RARLAB WinRAR: Product UI does not Warn User of Unsafe Actions | 6.8 | |
| Not rated | CVE-2004-1254 | RARLAB WinRAR: Buffer Overflow | — | |
| Not rated | CVE-2004-0234 | Tsugio Okamoto Lha: Stack-Based Buffer Overflow | — | |
| Not rated | CVE-2005-3262 | RARLAB WinRAR: XML External Entity (XXE) | — | |
| Not rated | CVE-2006-3845 | RARLAB WinRAR: Stack-Based Buffer Overflow | — | |
| High | CVE-2026-14191 | WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader | 7.8 | |
| Not rated | CVE-2006-3912 | RARLAB WinRAR: Stack-Based Buffer Overflow | — | |
| High | CVE-2024-36052 | RARLAB WinRAR: security vulnerability | 7.5 | |
| High | CVE-2024-33899 | RARLAB WinRAR: Denial of Service | 7.1 | |
| Not rated | CVE-2004-0235 | Tsugio Okamoto Lha: Path Traversal | — | |
| High | CVE-2015-5663 | RARLAB WinRAR: Privilege Escalation | 7.4 | |
| Not rated | CVE-2005-3263 | RARLAB WinRAR: Stack-Based Buffer Overflow | — | |
| Medium | CVE-2024-30370 | RARLAB WinRAR Mark-Of-The-Web Bypass Vulnerability | 4.3 | |
| Medium | CVE-2019-25677 | WinRAR 5.61 Denial of Service via Malformed Language File | 6.2 | |
| Not rated | CVE-2008-7144 | RARLAB WinRAR: security vulnerability | — |