CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–4 of 4 records

CVE Vendor Product Added Due Status
CVE-2025-6218 — RARLAB WinRAR Path Traversal Vulnerability
RARLAB WinRAR contains a path traversal vulnerability allowing an attacker to execute code in the context of the current user.
 RARLAB WinRAR Dec 9, 2025 Dec 30, 2025
CVE-2025-8088 — RARLAB WinRAR Path Traversal Vulnerability
RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.
 RARLAB WinRAR Aug 12, 2025 Sep 2, 2025 Ransomware
CVE-2023-38831 — RARLAB WinRAR Code Execution Vulnerability
RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file within a ZIP archive.
 RARLAB WinRAR Aug 24, 2023 Sep 14, 2023 Ransomware
CVE-2018-20250 — WinRAR Absolute Path Traversal Vulnerability
WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution
 RARLAB WinRAR Feb 15, 2022 Aug 15, 2022 Ransomware