Skip to content

RARLAB

In 1 brief, most recently 10 June 2026. RSS for this tag

Learn more: Vulnerabilities (NVD) ↗

Known exploited (CISA KEV)

5 RARLAB vulnerabilities are on CISA's list of vulnerabilities exploited in the wild, 4 of them used in ransomware campaigns. Most recent:

CVE-2025-6218 RARLAB WinRAR Path Traversal Vulnerability added 2025-12-09
CVE-2025-8088 RARLAB WinRAR Path Traversal Vulnerability added 2025-08-12
CVE-2023-38831 RARLAB WinRAR Code Execution Vulnerability added 2023-08-24
CVE-2022-30333 RARLAB UnRAR Directory Traversal Vulnerability added 2022-08-09
CVE-2018-20250 WinRAR Absolute Path Traversal Vulnerability added 2022-02-15

Coverage in DanSec Daily

Wed 10 Jun Microsoft GitHub repos hijacked in Miasma worm supply chain attack, ServiceNow API breach, Russia-aligned WinRAR espionage, record 206 Patch Tuesday fixes.