WI
Product
WinRAR
On CISA KEVExploited in the wildRansomware-linked
30
CVEs
4
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 13Medium 5Low 0
Watch
Add WinRAR to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-31334 | 6.8 | Apr 3 | Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to… Affected: prior to 7.11 |
| CVE-2025-52331 | 6.1 | Nov 12 | Cross-site scripting (XSS) vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username,… Affected: 7.11 |
| CVE-2019-25677 | 5.5 | Apr 5 | WinRAR 5.61 Denial of Service via Malformed Language File Affected: through 5.61 |
| CVE-2018-20251 | 5.5 | Feb 5 | In WinRAR versions prior to and including 5.61, there is path traversal vulnerability when crafting the filename field of the ACE format Affected: through 5.61 |
| CVE-2024-30370 | 4.3 | Apr 2 | RARLAB WinRAR Mark-Of-The-Web Bypass Vulnerability Affected: 7.00 |
Showing 5