Summary
RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.
- Vendor
- RARLAB
- Product
- WinRAR
- Added to KEV
- Aug 12, 2025
- Remediation due
- Sep 2, 2025 (US federal deadline)
- Ransomware use
- Known
- Weakness
- CWE-35
- EPSS
- 94.3% as of Nov 10
In the news · last mention Oct 19
References