Skip to contentRarlab Winrar vulnerabilities
- rarlab rar, unrar, winrar +1 more +3 moreWinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeaderCVE-2026-14191Public exploitFix available7.8 High
- rarlab winrarWinRAR 5.61 Denial of Service via Malformed Language FileCVE-2019-256776.9 Medium
- rarlab winrarCross-site scripting (XSS) vulnerability in the generate report functionality in Rarlab WinRAR 7...CVE-2025-523316.1 Medium
- rarlab winrar, dtsearch +1 morePath traversal vulnerability in WinRARCVE-2025-8088In KEVPublic exploitFix availableEPSS 94.3%8.4 High
- rarlab winrarWinRAR < 5.00 Filename Spoofing RCECVE-2014-125119Public exploit8.4 High
- rarlab winrarRARLAB WinRAR Directory Traversal Remote Code Execution VulnerabilityCVE-2025-6218In KEVPublic exploitEPSS 90.5%7.8 High
- rarlab winrarIssue that bypasses the "Mark of the Web" security warning function for files when opening a...CVE-2025-313346.8 Medium
- rarlab winrarRARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI...CVE-2024-360527.5 High
- rarlab winrar, unrar +1 moreRARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen...CVE-2024-33899Fix available7.1 High
- rarlab winrarRARLAB WinRAR Mark-Of-The-Web Bypass VulnerabilityCVE-2024-303704.3 Medium
- rarlab winrarRARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution VulnerabilityCVE-2023-40477Public exploitFix availableEPSS 10.0%7.8 High
- rarlab winrarRARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to...CVE-2023-38831In KEVPublic exploitEPSS 99.8%7.8 High
- rarlab winrarThis vulnerability allows remote attackers to disclose sensitive information on affected...CVE-2022-43650EPSS 23.2%2.5 Low
- check point software technologies ltd. winrarIn WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability...CVE-2018-202537.8 High
- check point software technologies ltd. winrarIn WinRAR versions prior to and including 5.60, there is an out-of-bounds write vulnerability...CVE-2018-202527.8 High
- check point software technologies ltd. winrarIn WinRAR versions prior to and including 5.61, there is path traversal vulnerability when...CVE-2018-20251EPSS 31.4%5.5 Medium
- check point software technologies ltd. winrarIn WinRAR versions prior to and including 5.61, There is path traversal vulnerability when...CVE-2018-20250In KEVPublic exploitEPSS 96.0%7.8 High
- rarlab winrarThe file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain...CVE-2015-56637.4 High
- rarlab winrarMultiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack...CVE-2008-714410.0 High
- rarlab winrarStack-based buffer overflow in the SFX module in WinRAR before 3.60 beta 8 has unspecified...CVE-2006-3912Public exploit2.1 Low
- rarlab winrarStack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers...CVE-2006-3845Public exploit9.3 High
- rarlab winrarBuffer overflow in WinRAR 3.50 and earlier allows local users to execute arbitrary code via a...CVE-2005-4620Public exploit4.6 Medium
- rarlab winrarBuffer overflow in the "Add to archive" command in WinRAR 3.51 allows user-assisted attackers to...CVE-2005-44745.1 Medium
- rarlab winrarStack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote...CVE-2005-32637.5 High
- rarlab winrarFormat string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute...CVE-2005-3262Public exploit7.5 High
- rarlab winrarDirectory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP...CVE-2005-03312.6 Low
- rarlab winrarThe Repair Archive command in WinRAR 3.40 allows remote attackers to cause a denial of service ...CVE-2004-14952.6 Low
- rarlab winrarWinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via...CVE-2004-1254Public exploitEPSS 10.4%10.0 High
- redhat lha, clearswift mailsweeper, f-secure anti-virus +9 more +11 moreMultiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to...CVE-2004-02356.4 Medium
- redhat lha, clearswift mailsweeper, f-secure anti-virus +9 more +11 moreMultiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as...CVE-2004-0234EPSS 10.3%10.0 High