CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
WinRAR Windows Path Traversal Remote Code Execution Vulnerability (CVE-2025-8088) Urgent Security Advisory
[Affected Scope] WinRAR for Windows (versions prior to 7.02)
[Impact] Attackers can execute arbitrary code (RCE) by tricking users into extracting a specially crafted malicious archive file, which drops payloads into arbitrary system directories
[Mitigation] Immediately upgrade WinRAR to the latest secure version (7.02 or higher) and avoid extracting archives from untrusted sources
RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability (CVE-2025-6218) Urgent Security Advisory
[Affected Scope] Users of unpatched RARLAB WinRAR installations
[Impact] Remote attackers can execute arbitrary code in the context of the current user by tricking them into opening a crafted archive file, leading to directory traversal and unauthorized file creation
[Mitigation] Immediately upgrade WinRAR to the latest secure version and avoid extracting archives from untrusted sources
WinRAR Arbitrary Code Execution Vulnerability (CVE-2023-38831) Security Advisory
[Affected Scope] All Windows endpoint environments running RARLAB WinRAR versions prior to 6.23.
[Impact] Attackers can execute arbitrary code in the background when a user attempts to open a seemingly benign file within a crafted ZIP archive, leading to full system compromise.
[Mitigation] Immediately upgrade WinRAR to version 6.23 or higher, and restrict execution of untrusted archive files.
WinRAR UNACEV2.dll Path Traversal and Remote Code Execution Vulnerability (CVE-2018-20250)
[Affected Scope] WinRAR versions 5.61 and prior (including UNACEV2.dll library)
[Impact] Attackers can bypass extraction path restrictions to drop malicious executables into arbitrary directories, such as the Windows Startup folder, leading to system compromise [1, 2, https://research.checkpoint.com/extracting-code-execution-from-winrar/]
[Mitigation] Immediately upgrade WinRAR to version 5.70 or later, or manually delete the vulnerable UNACEV2.dll file [1, https://research.checkpoint.com/extracting-code-execution-from-winrar/]