Rarlab vulnerabilities

Products

• Winrar 30
• Unrar 16
• Rar 3

Newest

• rarlab rar, unrar, winrar +1 more +3 more WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader CVE-2026-14191 Public exploitFix available 7.8 HighJuly 1, 2026
• rarlab winrar WinRAR 5.61 Denial of Service via Malformed Language File CVE-2019-25677 6.9 MediumApril 5, 2026
• rarlab rar, rar app +1 more Rarlab RAR App com.rarlab.rar path traversal CVE-2025-14111 2.3 LowDecember 5, 2025
• rarlab winrar Cross-site scripting (XSS) vulnerability in the generate report functionality in Rarlab WinRAR 7... CVE-2025-52331 6.1 MediumNovember 12, 2025
• rarlab winrar, dtsearch +1 more Path traversal vulnerability in WinRAR CVE-2025-8088 In KEVPublic exploitFix available EPSS 94.0% 8.4 HighAugust 8, 2025
• rarlab winrar WinRAR < 5.00 Filename Spoofing RCE CVE-2014-125119 Public exploit 8.4 HighJuly 25, 2025
• rarlab winrar RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability CVE-2025-6218 In KEVPublic exploit EPSS 90.5% 7.8 HighJune 21, 2025
• rarlab winrar Issue that bypasses the "Mark of the Web" security warning function for files when opening a... CVE-2025-31334 6.8 MediumApril 3, 2025
• rarlab winrar RARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI... CVE-2024-36052 7.5 HighMay 21, 2024
• rarlab winrar, unrar +1 more RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen... CVE-2024-33899 Fix available 7.1 HighApril 28, 2024
• rarlab winrar RARLAB WinRAR Mark-Of-The-Web Bypass Vulnerability CVE-2024-30370 4.3 MediumApril 2, 2024
• rarlab winrar RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability CVE-2023-40477 Public exploitFix available EPSS 11.4% 7.8 HighAugust 25, 2023
• rarlab winrar RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to... CVE-2023-38831 In KEVPublic exploit EPSS 99.8% 7.8 HighAugust 23, 2023
• rarlab unrar UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains. CVE-2022-48579 Fix available 7.5 HighAugust 7, 2023
• rarlab winrar This vulnerability allows remote attackers to disclose sensitive information on affected... CVE-2022-43650 EPSS 23.2% 2.5 LowMarch 29, 2023
• debian linux, rarlab unrar +1 more RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an... CVE-2022-30333 In KEVPublic exploitFix available EPSS 99.2% 7.5 HighMay 9, 2022
• rarlab unrar UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from... CVE-2017-20006 Fix available 7.8 HighJuly 1, 2021
• rarlab unrar UnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen:... CVE-2018-25018 Fix available 7.8 HighJuly 1, 2021
• check point software technologies ltd. winrar In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability... CVE-2018-20253 7.8 HighFebruary 13, 2019
• check point software technologies ltd. winrar In WinRAR versions prior to and including 5.60, there is an out-of-bounds write vulnerability... CVE-2018-20252 7.8 HighFebruary 5, 2019
• check point software technologies ltd. winrar In WinRAR versions prior to and including 5.61, there is path traversal vulnerability when... CVE-2018-20251 EPSS 31.4% 5.5 MediumFebruary 5, 2019
• check point software technologies ltd. winrar In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when... CVE-2018-20250 In KEVPublic exploit EPSS 96.0% 7.8 HighFebruary 5, 2019
• rarlab unrar, debian linux +1 more unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a stack-based buffer over-read in unrarlib... CVE-2017-14122 Fix available 9.1 CriticalSeptember 3, 2017
• rarlab unrar, debian linux +1 more The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from... CVE-2017-14121 Fix available 5.5 MediumSeptember 3, 2017
• rarlab unrar, debian linux +1 more unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a directory traversal vulnerability for... CVE-2017-14120 Fix available 7.5 HighSeptember 3, 2017
• rarlab unrar libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function. CVE-2017-12942 Fix available 9.8 CriticalAugust 18, 2017
• rarlab unrar libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function. CVE-2017-12941 Fix available 9.8 CriticalAugust 18, 2017
• rarlab unrar libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call... CVE-2017-12940 Fix available 9.8 CriticalAugust 18, 2017
• rarlab unrar UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism... CVE-2017-12938 Fix available 7.5 HighAugust 18, 2017
• rarlab unrar, sophos threat detection engine +1 more A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus... CVE-2012-6706 Fix available EPSS 10.1% 9.8 CriticalJune 22, 2017
• rarlab rar Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks,... CVE-2014-9983 Fix available 5.5 MediumJune 4, 2017
• rarlab winrar The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain... CVE-2015-5663 7.4 HighDecember 30, 2015
• rarlab winrar Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack... CVE-2008-7144 10.0 HighSeptember 1, 2009
• rarlab unrar Integer signedness error in the SET_VALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in... CVE-2007-3726 Fix available 4.3 MediumJuly 12, 2007
• rarlab unrar Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products,... CVE-2007-0855 Fix available 6.8 MediumFebruary 8, 2007
• rarlab winrar Stack-based buffer overflow in the SFX module in WinRAR before 3.60 beta 8 has unspecified... CVE-2006-3912 Public exploit 2.1 LowJuly 28, 2006
• rarlab winrar Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers... CVE-2006-3845 Public exploit 9.3 HighJuly 25, 2006
• rarlab winrar Buffer overflow in WinRAR 3.50 and earlier allows local users to execute arbitrary code via a... CVE-2005-4620 Public exploit 4.6 MediumDecember 31, 2005
• rarlab winrar Buffer overflow in the "Add to archive" command in WinRAR 3.51 allows user-assisted attackers to... CVE-2005-4474 5.1 MediumDecember 22, 2005
• rarlab winrar Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote... CVE-2005-3263 7.5 HighOctober 20, 2005
• rarlab winrar Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute... CVE-2005-3262 Public exploit 7.5 HighOctober 20, 2005
• rarlab winrar Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP... CVE-2005-0331 2.6 LowFebruary 10, 2005
• rarlab winrar The Repair Archive command in WinRAR 3.40 allows remote attackers to cause a denial of service ... CVE-2004-1495 2.6 LowDecember 31, 2004
• rarlab winrar WinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via... CVE-2004-1254 Public exploit EPSS 10.4% 10.0 HighDecember 22, 2004
• redhat lha, clearswift mailsweeper, f-secure anti-virus +9 more +11 more Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to... CVE-2004-0235 6.4 MediumMay 5, 2004
• redhat lha, clearswift mailsweeper, f-secure anti-virus +9 more +11 more Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as... CVE-2004-0234 EPSS 10.3% 10.0 HighMay 5, 2004
• rarlab far manager Stack-based buffer overflow in Far Manager 1.70beta1 and earlier allows local users to cause a... CVE-2003-1445 Public exploit 4.6 MediumDecember 31, 2003