{"meta":{"title":"KEV entries: RARLAB","description":"All KEV entries for vendor RARLAB.","source":"CISA Known Exploited Vulnerabilities catalog (https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json)","catalogVersion":"2026.09.23","catalogDateReleased":"2026-09-23T12:51:35.821Z","referenceDate":"2026-09-23","publisher":"Telemetry","license":"https://creativecommons.org/licenses/by/4.0/","documentation":"https://glide-telemetry.pages.dev/api/","records":5,"vendor":"RARLAB","entries":5,"shareOfCatalogPercent":0.3,"ransomwareKnown":4,"firstDateAdded":"2022-02-15","latestDateAdded":"2025-12-09","rank":50},"data":[{"cveID":"CVE-2025-6218","vendorProject":"RARLAB","product":"WinRAR","vulnerabilityName":"RARLAB WinRAR Path Traversal Vulnerability","dateAdded":"2025-12-09","dueDate":"2025-12-30","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-22"],"shortDescription":"RARLAB WinRAR contains a path traversal vulnerability allowing an attacker to execute code in the context of the current user.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=276&cHash=b5165454d983fc9717bc8748901a64f9 ; https://nvd.nist.gov/vuln/detail/CVE-2025-6218","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2025-6218"},{"cveID":"CVE-2025-8088","vendorProject":"RARLAB","product":"WinRAR","vulnerabilityName":"RARLAB WinRAR Path Traversal Vulnerability","dateAdded":"2025-08-12","dueDate":"2025-09-02","knownRansomwareCampaignUse":"Known","cwes":["CWE-35"],"shortDescription":"RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5 ; https://nvd.nist.gov/vuln/detail/CVE-2025-8088","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2025-8088"},{"cveID":"CVE-2023-38831","vendorProject":"RARLAB","product":"WinRAR","vulnerabilityName":"RARLAB WinRAR Code Execution Vulnerability","dateAdded":"2023-08-24","dueDate":"2023-09-14","knownRansomwareCampaignUse":"Known","cwes":["CWE-351"],"shortDescription":"RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file within a ZIP archive.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"http://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=232&cHash=c5bf79590657e32554c6683296a8e8aa;  https://nvd.nist.gov/vuln/detail/CVE-2023-38831","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2023-38831"},{"cveID":"CVE-2022-30333","vendorProject":"RARLAB","product":"UnRAR","vulnerabilityName":"RARLAB UnRAR Directory Traversal Vulnerability","dateAdded":"2022-08-09","dueDate":"2022-08-30","knownRansomwareCampaignUse":"Known","cwes":["CWE-22","CWE-59"],"shortDescription":"RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.","requiredAction":"Apply updates per vendor instructions.","notes":"Vulnerability updated with version 6.12. Accessing link will download update information: https://www.rarlab.com/rar/rarlinux-x32-612.tar.gz;  https://nvd.nist.gov/vuln/detail/CVE-2022-30333","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2022-30333"},{"cveID":"CVE-2018-20250","vendorProject":"RARLAB","product":"WinRAR","vulnerabilityName":"WinRAR Absolute Path Traversal Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-08-15","knownRansomwareCampaignUse":"Known","cwes":["CWE-36"],"shortDescription":"WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-20250","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-20250"}]}