RARLAB
CVEs currently on EVULNABLE's Priority Feed for RARLAB, and this vendor's own CISA KEV history.
In EVULNABLE's ranked feed
Showing all 5 RARLAB CVEs in EVULNABLE's ranked feed.
#1 91 Immediate CVE-2023-38831 KEV since 2023 · listed over a yearRansomwareCISA KEV RARLAB — RARLAB WinRAR Code Execution Vulnerability KEV + ransomware, EPSS 99.8%
EVRS 91/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#2 91 Immediate CVE-2025-8088 KEV since 2025 · listed over a yearRansomwareCISA KEV RARLAB — RARLAB WinRAR Path Traversal Vulnerability KEV + ransomware, EPSS 94.5%
EVRS 91/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#3 90 Immediate CVE-2022-30333 KEV since 2022 · listed over a yearRansomwareCISA KEV RARLAB — RARLAB UnRAR Directory Traversal Vulnerability KEV + ransomware, EPSS 99.2%
EVRS 90/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#4 90 Immediate CVE-2018-20250 KEV since 2022 · listed over a yearRansomwareCISA KEV RARLAB — WinRAR Absolute Path Traversal Vulnerability KEV + ransomware, EPSS 96.0%
EVRS 90/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#5 85 Immediate CVE-2025-6218 CISA federal deadline · Overdue by 10 monthsCISA KEV RARLAB — RARLAB WinRAR Path Traversal Vulnerability KEV, EPSS 90.5%
EVRS 85/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.905.