Rarlab

    Dashboard / Vendors

    Products: 4
    Vulnerabilities: 46
    Known Exploited: 5
    9
    Critical Level Threats
    19
    High Level Threats
    14
    Medium Level Threats
    3
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2019-25677

    WinRAR 5.61 Denial of Service via Malformed Language File

    Last Modified: Jul 15, 2026
    Published: Apr 05, 2026

    CVE-2025-14111

    Rarlab RAR App com.rarlab.rar path traversal

    Last Modified: Dec 12, 2025
    Published: Dec 05, 2025

    CVE-2025-52331

    Cross-site scripting (XSS) vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes archived file names without validation in the HTML report, which allows potentially malicious HTML tags to be injected into the report. User interaction is required. User must use the "generate report" functionality and open the report.

    Last Modified: Dec 31, 2025
    Published: Nov 12, 2025

    CVE-2025-8088

    Path traversal vulnerability in WinRAR

    Last Modified: Feb 26, 2026
    Published: Aug 08, 2025

    CVE-2014-125119

    WinRAR < 5.00 Filename Spoofing RCE

    Last Modified: Apr 15, 2026
    Published: Jul 25, 2025
    Items Per Page