Windows winget win.rar GmbH
WinRAR
Current version
7.23.0
winget:RARLab.WinRAR
Version 7.23.0 of WinRAR on Windows has no known open CVE (28 referenced, fixed or indeterminable).
- Known vulnerabilities
- 28
- Still open
- 0
- KEV open
- 0
- Max CVSS (open)
- -
4 total (history)
8.8 historical
Known vulnerabilities (CVE)
Latest matched CVE: 2026
Test a different version
7.23.0 closes no known CVE
No CVE is open on this version, and none was fixed by it. 14 were fixed in earlier versions, listed below.
Show 14 CVEs fixed in earlier versions Hide the 14 CVEs fixed earlier
| CVE |
|---|
|
CVE-2019-25677
Fixed
MEDIUM 6.2
Local Fixed in: > 5.61
|
|
CVE-2025-8088
Fixed
HIGH 8.8
KEV
Network Fixed in: 7.13
|
|
CVE-2025-6218
Fixed
HIGH 7.8
KEV
Local Fixed in: 7.12
|
|
CVE-2025-31334
Fixed
MEDIUM 6.8
Network Fixed in: 7.11
|
|
CVE-2024-36052
Fixed
HIGH 7.5
Network Fixed in: 7.00
|
|
CVE-2023-40477
Fixed
HIGH 7.8
Local Fixed in: 6.23
|
|
CVE-2024-33899
Fixed
HIGH 7.1
Network Fixed in: 7.00
|
|
CVE-2023-38831
Fixed
HIGH 7.8
KEV
Local Fixed in: 6.23
|
|
CVE-2018-20253
Fixed
HIGH 7.8
Local Fixed in: > 5.60
|
|
CVE-2018-20252
Fixed
HIGH 7.8
Local Fixed in: > 5.60
|
|
CVE-2018-20251
Fixed
MEDIUM 5.5
Local Fixed in: > 5.61
|
|
CVE-2018-20250
Fixed
HIGH 7.8
KEV
Local Fixed in: > 5.61
|
|
CVE-2015-5663
Fixed
HIGH 7.4
Local Fixed in: > 5.30
|
|
CVE-2008-7144
Fixed
N/A
Fixed in: > 3.70
|
14 indeterminable CVE(s) hidden (missing current version or incompatible version schemes). · Show
Cumulative exposure
Low
Weighted sum capped at 100: open CVEs (max 50 pts) + KEV (max 35) + critical shared permissions (max 10) + trackers (max 8) + OS EOL (max 5). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Context
Context
Description
Compress, Encrypt, Package and Backup with only one utility.
Technical details
- Publisher
- win.rar GmbH
- Distribution channel
- winget
- Identifier
- winget:RARLab.WinRAR
FAQ
FAQ: WinRAR
Does WinRAR have known security vulnerabilities?
WinRAR (winget:RARLab.WinRAR) on Windows has 28 CVE referenced in NVD, 0 still open on the current version and 0 listed in the CISA KEV catalog. Absence of a CVE is not a security guarantee.
Is the current version of WinRAR affected by any open CVE?
Version 7.23.0 of WinRAR on Windows has no open CVE referenced in NVD. Absence of a CVE is not a security guarantee.
Is WinRAR affected by an actively exploited vulnerability (CISA KEV)?
No CVE affecting WinRAR (winget:RARLab.WinRAR) is currently in the CISA KEV catalog.
What is the latest known version of WinRAR?
The most recent version of WinRAR (winget:RARLab.WinRAR) tracked by Appaloosa Scout is 7.23.0, published by win.rar GmbH.
Deploy this app across your fleet
Appaloosa distributes and updates your Android and iOS apps from an enterprise store.