Winrar-gmbh
4 CVEs tracked since 2019. Since Feb 2019, 1 of them reached CISA KEV.
Winrar-gmbh CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2019-02 | 4 | 1 |
Products
The products that kept showing up in Winrar-gmbh's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 14 most recently published vulnerabilities affecting Winrar-gmbh.
- CVE-2025-8088Path traversal vulnerability in WinRAR8.8
- CVE-2025-6218RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability7.8
- CVE-2025-31334Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic l...6.8
- CVE-2024-36052RARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI escape sequences, a different issue than CVE-2024-33899.7.5
- CVE-2023-40477RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability7.8
- CVE-2024-33899RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences.7.1
- CVE-2024-30370RARLAB WinRAR Mark-Of-The-Web Bypass Vulnerability4.3
- CVE-2023-38831RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may include a benign fil...7.8
- CVE-2022-43650This vulnerability allows remote attackers to disclose sensitive information on affected installations of RARLAB WinRAR 6.11.0.0. User interaction is required to exploit this vulnerability in that ...7.1
- BDU:2021-05327Уязвимость файлового архиватора WinRAR, связанная с ретрансляцией запросов на вредоносный домен, позволяющая нарушителю реализовать атаку типа «ARP-спуфинг»3.4
- CVE-2018-20253In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability during parsing of a crafted LHA / LZH archive formats. Successful exploitation could lead to arbitrary ...7.8
- CVE-2018-20252In WinRAR versions prior to and including 5.60, there is an out-of-bounds write vulnerability during parsing of crafted ACE and RAR archive formats. Successful exploitation could lead to arbitrary ...7.8
- CVE-2018-20250In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated wit...7.8
- CVE-2018-20251In WinRAR versions prior to and including 5.61, there is path traversal vulnerability when crafting the filename field of the ACE format. The UNACE module (UNACEV2.dll) creates files and folders as...5.5
The record
- Peak rank
- #83 in Feb 2019
- Busiest month shown
- Feb 2019, 4 CVEs
- Months with a KEV entry
- 1 since Feb 2019
- Monthly snapshots
- 1 since 2019