WI
Product
WinRAR
On CISA KEVExploited in the wildRansomware-linked
4
CVEs
1
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add WinRAR to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-20250 RansomwareIn wildKEV | 7.8 | Feb 5 | WinRAR Absolute Path Traversal Vulnerability Affected: All versions prior and including 5.61 |
| CVE-2018-20253 | 7.8 | Feb 13 | In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability during parsing of a crafted LHA / LZH archive formats Affected: All versions prior and including 5.60 |
| CVE-2018-20252 | 7.8 | Feb 5 | In WinRAR versions prior to and including 5.60, there is an out-of-bounds write vulnerability during parsing of crafted ACE and RAR archive formats Affected: All versions prior and including 5.60 |
| CVE-2018-20251 | 5.5 | Feb 5 | In WinRAR versions prior to and including 5.61, there is path traversal vulnerability when crafting the filename field of the ACE format Affected: All versions prior and including 5.61 |
Showing 4