What’s Vulnerable › Products

WinRAR vulnerabilities

30 known vulnerabilities, 4 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your WinRAR version is affected

Exploited WinRAR vulnerabilities

• CVE-2025-6218 — RARLAB WinRAR Path Traversal Vulnerability
• CVE-2025-8088 — RARLAB WinRAR Path Traversal Vulnerability
• CVE-2023-38831 — RARLAB WinRAR Code Execution Vulnerability
• CVE-2018-20250 — WinRAR Absolute Path Traversal Vulnerability

Latest WinRAR vulnerabilities

• CVE-2026-14191 — WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader (CVSS 7.8)
• CVE-2019-25677 — WinRAR 5.61 Denial of Service via Malformed Language File (CVSS 5.5)
• CVE-2025-52331 — (CVSS 6.1)
• CVE-2025-8088 — RARLAB WinRAR Path Traversal Vulnerability (CVSS 8.8) — exploited
• CVE-2014-125119 — WinRAR < 5.00 Filename Spoofing RCE (CVSS 8.4)
• CVE-2025-6218 — RARLAB WinRAR Path Traversal Vulnerability (CVSS 7.8) — exploited
• CVE-2025-31334 — (CVSS 6.8)
• CVE-2024-36052 — (CVSS 7.5)
• CVE-2023-40477 — RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2024-33899 — (CVSS 7.1)
• CVE-2024-30370 — RARLAB WinRAR Mark-Of-The-Web Bypass Vulnerability (CVSS 4.3)
• CVE-2023-38831 — RARLAB WinRAR Code Execution Vulnerability (CVSS 7.8) — exploited
• CVE-2022-43650 — (CVSS 7.1)
• CVE-2018-20253 — (CVSS 7.8)
• CVE-2018-20252 — (CVSS 7.8)
• CVE-2018-20251 — (CVSS 5.5)
• CVE-2018-20250 — WinRAR Absolute Path Traversal Vulnerability (CVSS 7.8) — exploited
• CVE-2015-5663 — (CVSS 7.4)
• CVE-2008-7144 — (CVSS 10.0)
• CVE-2006-3912 — (CVSS 2.1)
• CVE-2006-3845 — (CVSS 9.3)
• CVE-2005-4620 — (CVSS 4.6)
• CVE-2005-4474 — (CVSS 5.1)
• CVE-2005-3263 — (CVSS 7.5)
• CVE-2005-3262 — (CVSS 7.5)