https://exploit-radar.com/en/flux/marques/rarlab.xml Exploit Radar: exploited RARLAB vulnerabilities The latest additions to CISA’s catalog of exploited vulnerabilities for RARLAB products. 2025-12-09T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2025-6218/ CVE-2025-6218 — RARLAB WinRAR 2025-12-09T00:00:00Z Apply the patches or mitigations from RARLAB; if none are available, stop using the product. For cloud services, follow the guidance from RARLAB. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on December 9, 2025. https://exploit-radar.com/en/cve/CVE-2025-8088/ CVE-2025-8088 — RARLAB WinRAR 2025-08-12T00:00:00Z Apply the patches or mitigations from RARLAB; if none are available, stop using the product. For cloud services, follow the guidance from RARLAB. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on August 12, 2025. https://exploit-radar.com/en/cve/CVE-2023-38831/ CVE-2023-38831 — RARLAB WinRAR 2023-08-24T00:00:00Z Apply the patches or mitigations from RARLAB; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on August 24, 2023. https://exploit-radar.com/en/cve/CVE-2022-30333/ CVE-2022-30333 — RARLAB UnRAR 2022-08-09T00:00:00Z Apply the security update from RARLAB. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on August 9, 2022. https://exploit-radar.com/en/cve/CVE-2018-20250/ CVE-2018-20250 — RARLAB WinRAR 2022-02-15T00:00:00Z Apply the security update from RARLAB. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on February 15, 2022.