rarlab
Security Risk Profile
46
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 51 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 31, 2003 to present
51
Total CVEs
29
Critical+High
7
Exploited
18
Unpatched
Threat Assessment
Avg CVSS
6.8
Base severity
Avg EPSS
2%
Exploit probability
Unpatched
18
Critical/High
Risk Level
46/100
medium
⚠️ 7 Active Exploits⚡ 3 Zero-Days
Severity Distribution
Critical
9High
20Medium
16Low
5Exploit Likelihood
>50% chance
020-50%
05-20%
1<5%
4Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
12
2
Path Traversal
9
3
Input Validation
2
4
Integer Overflow
2
5
XSS
1
Most Affected Products
1. RARLAB WinRAR145
2. F-Secure F-Secure anti-virus36
3. Clearswift MAILsweeper28
4. RARLAB Rar19
5. RARLAB UnRAR19
Recent Vulnerabilities
See more →CVE-2019-25677
CVSS 6.9medium
WinRAR 5.61 Denial of Service via Malformed Language File
4/5/2026🔧 No Patch
CVE-2019-25477
CVSS 6.9medium
RAR Password Recovery 1.80 Denial of Service Buffer Overflow
3/11/2026🔧 No Patch
CVE-2025-14111
CVSS 8.1high
Rarlab RAR App com.rarlab.rar path traversal
12/5/2025🔧 No Patch
CVE-2025-52331
CVSS 6.1medium
11/12/2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/details-emerge-on-winrar-zero-day-attacks-that-infected-pcs-with-malware/
unknown
Details emerge on WinRAR zero-day attacks that infected PCs with malware
8/11/2025⚠ Exploited⚡ Zero-Day🔧 No Patch
CVE-2025-8088
CVSS 8.8EPSS 7%high
RARLAB WinRAR Path Traversal Vulnerability
8/8/2025⚠ Exploited🔧 No Patch
CVE-2025-6218
CVSS 7.8EPSS 1%high
RARLAB WinRAR Path Traversal Vulnerability
6/19/2025⚠ Exploited🔧 No Patch
CVE-2025-31334
CVSS 6.8EPSS 0%medium
4/3/2025🔧 No Patch
CVE-2024-36052
CVSS 7.5high
5/21/2024🔧 No Patch
CVE-2024-33899
CVSS 7.1EPSS 0%high
4/28/2024
Monitor rarlab in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.