RARLAB: exploited vulnerabilities
- 5exploited vulnerabilities
- 4used by ransomware
- Dec 9, 2025latest one added
- WinRAR 4
- UnRAR 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Dec 9, 2025 | Path Traversal | WinRAR | High 7.8 | 90% |
| Aug 12, 2025 | Path Traversal | WinRAR | High 8.4 | 95% |
| Aug 24, 2023 | Code Execution | WinRAR | High 7.8 | 99.8% |
| Aug 9, 2022 | Directory Traversal | UnRAR | Critical 9.8 | 99.2% |
| Feb 15, 2022 | Absolute Path Traversal | WinRAR | High 7.8 | 96% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.