RRARLAB

Products

Exploited and recent CVEs

• CVE-2025-6218 High 7.8 Exploited RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability 90.5%
• CVE-2026-14191 High 7.8 WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader 0.4%
• CVE-2026-14191 High 7.8 WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader 0.4%
• CVE-2026-14191 High 7.8 WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader 0.4%
• CVE-2026-14191 High 7.8 WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader 0.4%
• CVE-2025-14111 Medium 5.0 Rarlab RAR App com.rarlab.rar path traversal 0.7%
• CVE-2025-31334 Medium 6.8 Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic link 1.3%
• CVE-2023-40477 High 7.8 RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability 11.4%
• CVE-2024-30370 Medium 4.3 RARLAB WinRAR Mark-Of-The-Web Bypass Vulnerability 1.2%
• CVE-2022-43650 Low 2.5 This vulnerability allows remote attackers to disclose sensitive information on affected installations of RARLAB WinRAR 6.11.0.0. User interaction is required to exploit this vulnerability in that the 23.2%