RARLAB (WinRAR)
Security incidents tagged RARLAB (WinRAR). Newest first.
1 RARLAB (WinRAR) incident in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 3
- Live
- 0
- Patched
- 3
- Days without an incident
- 317
- Longest quiet run: 663 days (Oct 19–Aug 11)
Show 3 older incidents3 older incidents
December 2025 1
PatchedRARLAB WinRAR: WinRAR Path Traversal Vulnerability
RARLAB WinRAR
RARLAB WinRAR contains a path traversal vulnerability allowing an attacker to execute code in the context of the current user. Added to CISA KEV on 2025-12-09.
Open incident →CVE-2025-6218
August 2025 1
PatchedRARLAB WinRAR: WinRAR Path Traversal Vulnerability
RARLAB WinRAR
RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files. Added to CISA KEV on 2025-08-12.
Open incident →CVE-2025-8088
August 2023 1
PatchedWinRAR zero-day used against traders, then state hackers (CVE-2023-38831)
RARLAB WinRAR
WinRAR before 6.23 would run hidden code when a user opened what looked like a harmless file inside a ZIP. Group-IB found it exploited since April 2023 to target traders. After the fix, Google TAG saw Russian and Chinese government-backed groups pile on.
Open incident →CVE-2023-38831
