CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–5 of 5 records

CVE Vendor Product Added Due Status
CVE-2025-6218 — RARLAB WinRAR Path Traversal Vulnerability
RARLAB WinRAR contains a path traversal vulnerability allowing an attacker to execute code in the context of the current user.
RARLAB WinRAR Dec 9, 2025 Dec 30, 2025
CVE-2025-8088 — RARLAB WinRAR Path Traversal Vulnerability
RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.
RARLAB WinRAR Aug 12, 2025 Sep 2, 2025 Ransomware
CVE-2023-38831 — RARLAB WinRAR Code Execution Vulnerability
RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file within a ZIP archive.
RARLAB WinRAR Aug 24, 2023 Sep 14, 2023 Ransomware
CVE-2022-30333 — RARLAB UnRAR Directory Traversal Vulnerability
RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.
RARLAB UnRAR Aug 9, 2022 Aug 30, 2022 Ransomware
CVE-2018-20250 — WinRAR Absolute Path Traversal Vulnerability
WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution
RARLAB WinRAR Feb 15, 2022 Aug 15, 2022 Ransomware