Exploited vulnerabilities
RARLAB
5 RARLAB vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue5
Last 12 months1
In ransomware campaigns4
Last addition9 December 2025
The vulnerabilities5
- 9 December 2025CVE-2025-6218WinRARRARLAB WinRAR Path Traversal Vulnerability
- 12 August 2025CVE-2025-8088WinRARRARLAB WinRAR Path Traversal VulnerabilityRansomware
- 24 August 2023CVE-2023-38831WinRARRARLAB WinRAR Code Execution VulnerabilityRansomware
- 9 August 2022CVE-2022-30333UnRARRARLAB UnRAR Directory Traversal VulnerabilityRansomware
- 15 February 2022CVE-2018-20250WinRARWinRAR Absolute Path Traversal VulnerabilityRansomware
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, RARLAB included.