Brand
RARLAB: actively exploited vulnerabilities
5 vulnerabilities in RARLAB products (WinRAR, UnRAR) are in CISA’s catalog of exploited vulnerabilities. Last added: December 9, 2025.
-
1 vulnerability added in the last 12 months
-
5 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one RARLAB category to your radar, or open its page.
- Office, PDF and utilities 5 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
Follow a single RARLAB product (WinRAR, UnRAR…) rather than the whole brand.
- WinRAR4 vulnerabilities, Office and PDF
- UnRAR1 vulnerability, Office and PDF
Name used by CISA: RARLAB. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this RARLAB list.
- Rank 1
RARLAB WinRARCVE-2025-6218
RARLAB WinRAR Path Traversal Vulnerability
CVSS severity 7.8high
Added Dec 9, 2025
- Rank 2
RARLAB WinRARCVE-2025-8088
RARLAB WinRAR Path Traversal Vulnerability
Ransomware
CVSS severity 8.8high
Added Aug 12, 2025
- Rank 3
RARLAB WinRARCVE-2023-38831
RARLAB WinRAR Code Execution Vulnerability
Ransomware
CVSS severity 7.8high
Added Aug 24, 2023
- Rank 4
RARLAB WinRARCVE-2018-20250
WinRAR Absolute Path Traversal Vulnerability
RansomwareCVE from 2018, added in 2022
CVSS severity 7.8high
Added Feb 15, 2022
- Rank 5
RARLAB UnRARCVE-2022-30333
RARLAB UnRAR Directory Traversal Vulnerability
Ransomware
CVSS severity 7.5high
Added Aug 9, 2022
Follow and verify
Get new RARLAB vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).
Indicative classification, based on the vendor and product names given by CISA. How products are classified.