CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
WinRAR Windows Path Traversal Remote Code Execution Vulnerability (CVE-2025-8088) Urgent Security Advisory
[Affected Scope] WinRAR for Windows (versions prior to 7.02)
[Impact] Attackers can execute arbitrary code (RCE) by tricking users into extracting a specially crafted malicious archive file, which drops payloads into arbitrary system directories
[Mitigation] Immediately upgrade WinRAR to the latest secure version (7.02 or higher) and avoid extracting archives from untrusted sources
RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability (CVE-2025-6218) Urgent Security Advisory
[Affected Scope] Users of unpatched RARLAB WinRAR installations
[Impact] Remote attackers can execute arbitrary code in the context of the current user by tricking them into opening a crafted archive file, leading to directory traversal and unauthorized file creation
[Mitigation] Immediately upgrade WinRAR to the latest secure version and avoid extracting archives from untrusted sources
WinRAR Arbitrary Code Execution Vulnerability (CVE-2023-38831) Security Advisory
[Affected Scope] All Windows endpoint environments running RARLAB WinRAR versions prior to 6.23.
[Impact] Attackers can execute arbitrary code in the background when a user attempts to open a seemingly benign file within a crafted ZIP archive, leading to full system compromise.
[Mitigation] Immediately upgrade WinRAR to version 6.23 or higher, and restrict execution of untrusted archive files.