RARLAB known exploited vulnerabilities
CISA's Known Exploited Vulnerabilities catalog lists 5 RARLAB vulnerabilities: 1 added in the last 365 days, 0 rated critical (CVSS 9 or higher), and 4 with known ransomware use. The most recent was added Dec 9, 2025.
RSS feed for RARLAB exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant
| Added to KEV | CVE | Vulnerability | CVSS | EPSS | Federal due date | Ransomware use |
|---|---|---|---|---|---|---|
| 2025-12-09 | CVE-2025-6218 | RARLAB WinRAR Path Traversal Vulnerability | 7.8 (v3.0) | 90.5% | 2025-12-30 | Unknown |
| 2025-08-12 | CVE-2025-8088 | RARLAB WinRAR Path Traversal Vulnerability | 8.4 (v4.0) | 94.5% | 2025-09-02 | Known |
| 2023-08-24 | CVE-2023-38831 | RARLAB WinRAR Code Execution Vulnerability | 7.8 (v3.1) | 99.8% | 2023-09-14 | Known |
| 2022-08-09 | CVE-2022-30333 | RARLAB UnRAR Directory Traversal Vulnerability | 7.5 (v3.1) | 99.2% | 2022-08-30 | Known |
| 2022-02-15 | CVE-2018-20250 | WinRAR Absolute Path Traversal Vulnerability | 7.8 (v3.1) | 96.0% | 2022-08-15 | Known |