Skip to contentRarlab Rar vulnerabilities
- rarlab rar, unrar, winrar +1 more +3 moreWinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeaderCVE-2026-14191Public exploitFix available7.8 High
- rarlab winrarWinRAR 5.61 Denial of Service via Malformed Language FileCVE-2019-256776.9 Medium
- rarlab rar, rar app +1 moreRarlab RAR App com.rarlab.rar path traversalCVE-2025-141112.3 Low
- rarlab winrarCross-site scripting (XSS) vulnerability in the generate report functionality in Rarlab WinRAR 7...CVE-2025-523316.1 Medium
- rarlab winrar, dtsearch +1 morePath traversal vulnerability in WinRARCVE-2025-8088In KEVPublic exploitFix availableEPSS 94.3%8.4 High
- rarlab winrarWinRAR < 5.00 Filename Spoofing RCECVE-2014-125119Public exploit8.4 High
- rarlab winrarRARLAB WinRAR Directory Traversal Remote Code Execution VulnerabilityCVE-2025-6218In KEVPublic exploitEPSS 90.5%7.8 High
- rarlab winrarIssue that bypasses the "Mark of the Web" security warning function for files when opening a...CVE-2025-313346.8 Medium
- rarlab winrarRARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI...CVE-2024-360527.5 High
- rarlab winrar, unrar +1 moreRARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen...CVE-2024-33899Fix available7.1 High
- rarlab winrarRARLAB WinRAR Mark-Of-The-Web Bypass VulnerabilityCVE-2024-303704.3 Medium
- rarlab winrarRARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution VulnerabilityCVE-2023-40477Public exploitFix availableEPSS 10.6%7.8 High
- rarlab winrarRARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to...CVE-2023-38831In KEVPublic exploitEPSS 99.8%7.8 High
- rarlab unrarUnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains.CVE-2022-48579Fix available7.5 High
- rarlab winrarThis vulnerability allows remote attackers to disclose sensitive information on affected...CVE-2022-43650EPSS 23.2%2.5 Low
- debian linux, rarlab unrar +1 moreRARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an...CVE-2022-30333In KEVPublic exploitFix availableEPSS 99.2%7.5 High
- rarlab unrarUnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from...CVE-2017-20006Fix available7.8 High
- rarlab unrarUnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen:...CVE-2018-25018Fix available7.8 High
- check point software technologies ltd. winrarIn WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability...CVE-2018-202537.8 High
- check point software technologies ltd. winrarIn WinRAR versions prior to and including 5.60, there is an out-of-bounds write vulnerability...CVE-2018-202527.8 High
- check point software technologies ltd. winrarIn WinRAR versions prior to and including 5.61, there is path traversal vulnerability when...CVE-2018-20251EPSS 31.4%5.5 Medium
- check point software technologies ltd. winrarIn WinRAR versions prior to and including 5.61, There is path traversal vulnerability when...CVE-2018-20250In KEVPublic exploitEPSS 96.0%7.8 High
- rarlab unrar, debian linux +1 moreunrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a stack-based buffer over-read in unrarlib...CVE-2017-14122Fix available9.1 Critical
- rarlab unrar, debian linux +1 moreThe DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from...CVE-2017-14121Fix available5.5 Medium
- rarlab unrar, debian linux +1 moreunrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a directory traversal vulnerability for...CVE-2017-14120Fix available7.5 High
- rarlab unrarlibunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function.CVE-2017-12942Fix available9.8 Critical
- rarlab unrarlibunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function.CVE-2017-12941Fix available9.8 Critical
- rarlab unrarlibunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call...CVE-2017-12940Fix available9.8 Critical
- rarlab unrarUnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism...CVE-2017-12938Fix available7.5 High
- rarlab unrar, sophos threat detection engine +1 moreA VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus...CVE-2012-6706Fix availableEPSS 10.1%9.8 Critical
- rarlab rarDirectory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks,...CVE-2014-9983Fix available5.5 Medium
- rarlab winrarThe file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain...CVE-2015-56637.4 High
- rarlab winrarMultiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack...CVE-2008-714410.0 High
- rarlab unrarInteger signedness error in the SET_VALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in...CVE-2007-3726Fix available4.3 Medium
- rarlab unrarStack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products,...CVE-2007-0855Fix available6.8 Medium
- rarlab winrarStack-based buffer overflow in the SFX module in WinRAR before 3.60 beta 8 has unspecified...CVE-2006-3912Public exploit2.1 Low
- rarlab winrarStack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers...CVE-2006-3845Public exploit9.3 High
- rarlab winrarBuffer overflow in WinRAR 3.50 and earlier allows local users to execute arbitrary code via a...CVE-2005-4620Public exploit4.6 Medium
- rarlab winrarBuffer overflow in the "Add to archive" command in WinRAR 3.51 allows user-assisted attackers to...CVE-2005-44745.1 Medium
- rarlab winrarStack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote...CVE-2005-32637.5 High
- rarlab winrarFormat string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute...CVE-2005-3262Public exploit7.5 High
- rarlab winrarDirectory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP...CVE-2005-03312.6 Low
- rarlab winrarThe Repair Archive command in WinRAR 3.40 allows remote attackers to cause a denial of service ...CVE-2004-14952.6 Low
- rarlab winrarWinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via...CVE-2004-1254Public exploitEPSS 10.4%10.0 High
- redhat lha, clearswift mailsweeper, f-secure anti-virus +9 more +11 moreMultiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to...CVE-2004-02356.4 Medium
- redhat lha, clearswift mailsweeper, f-secure anti-virus +9 more +11 moreMultiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as...CVE-2004-0234EPSS 10.3%10.0 High