Skip to contentRarlab Unrar vulnerabilities
- rarlab rar, unrar, winrar +1 more +3 moreWinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeaderCVE-2026-14191Public exploitFix available7.8 High
- rarlab winrar, unrar +1 moreRARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen...CVE-2024-33899Fix available7.1 High
- rarlab unrarUnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains.CVE-2022-48579Fix available7.5 High
- debian linux, rarlab unrar +1 moreRARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an...CVE-2022-30333In KEVPublic exploitFix availableEPSS 99.2%7.5 High
- rarlab unrarUnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from...CVE-2017-20006Fix available7.8 High
- rarlab unrarUnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen:...CVE-2018-25018Fix available7.8 High
- rarlab unrar, debian linux +1 moreunrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a stack-based buffer over-read in unrarlib...CVE-2017-14122Fix available9.1 Critical
- rarlab unrar, debian linux +1 moreThe DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from...CVE-2017-14121Fix available5.5 Medium
- rarlab unrar, debian linux +1 moreunrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a directory traversal vulnerability for...CVE-2017-14120Fix available7.5 High
- rarlab unrarlibunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function.CVE-2017-12942Fix available9.8 Critical
- rarlab unrarlibunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function.CVE-2017-12941Fix available9.8 Critical
- rarlab unrarlibunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call...CVE-2017-12940Fix available9.8 Critical
- rarlab unrarUnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism...CVE-2017-12938Fix available7.5 High
- rarlab unrar, sophos threat detection engine +1 moreA VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus...CVE-2012-6706Fix availableEPSS 10.1%9.8 Critical
- rarlab unrarInteger signedness error in the SET_VALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in...CVE-2007-3726Fix available4.3 Medium
- rarlab unrarStack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products,...CVE-2007-0855Fix available6.8 Medium