CVE-2025-6218 — RARLAB WinRAR Path Traversal Vulnerability
RARLAB WinRAR contains a path traversal vulnerability allowing an attacker to execute code in the context of the current user.
WinRAR · Dec 9, 2025
Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2025-6218 — RARLAB WinRAR Path Traversal Vulnerability
RARLAB WinRAR contains a path traversal vulnerability allowing an attacker to execute code in the context of the current user.
|
RARLAB | WinRAR | Dec 9, 2025 | Dec 30, 2025 | |
|
CVE-2025-8088 — RARLAB WinRAR Path Traversal Vulnerability
RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.
|
RARLAB | WinRAR | Aug 12, 2025 | Sep 2, 2025 | Ransomware |
|
CVE-2023-38831 — RARLAB WinRAR Code Execution Vulnerability
RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file within a ZIP archive.
|
RARLAB | WinRAR | Aug 24, 2023 | Sep 14, 2023 | Ransomware |
|
CVE-2022-30333 — RARLAB UnRAR Directory Traversal Vulnerability
RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.
|
RARLAB | UnRAR | Aug 9, 2022 | Aug 30, 2022 | Ransomware |
|
CVE-2018-20250 — WinRAR Absolute Path Traversal Vulnerability
WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution
|
RARLAB | WinRAR | Feb 15, 2022 | Aug 15, 2022 | Ransomware |
RARLAB WinRAR contains a path traversal vulnerability allowing an attacker to execute code in the context of the current user.
WinRAR · Dec 9, 2025
RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.
WinRAR · Aug 12, 2025
RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file within a ZIP archive.
WinRAR · Aug 24, 2023
RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.
UnRAR · Aug 9, 2022
WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution
WinRAR · Feb 15, 2022