WinRAR
- Known vulnerabilities
- 28
- Still open
- 0
- KEV open
- 0
- Max CVSS (historical)
- 8.8
4 total (history)
Cumulative exposure
Low
Aggregates open CVEs (40%) + KEV (30%) + critical shared permissions (15%) + trackers (10%) + OS EOL (5%). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Known vulnerabilities (CVE)
Latest matched CVE: 2026
Test a different version
| CVE |
|---|
|
CVE-2019-25677
Fixed
MEDIUM 6.2
Local Fixed in: > 5.61
|
|
CVE-2025-8088
Fixed
HIGH 8.8
KEV
Network Fixed in: 7.13
|
|
CVE-2025-6218
Fixed
HIGH 7.8
KEV
Local Fixed in: 7.12
|
|
CVE-2025-31334
Fixed
MEDIUM 6.8
Network Fixed in: 7.11
|
|
CVE-2024-36052
Fixed
HIGH 7.5
Network Fixed in: 7.00
|
|
CVE-2023-40477
Fixed
HIGH 7.8
Local Fixed in: 6.23
|
|
CVE-2024-33899
Fixed
HIGH 7.1
Network Fixed in: 7.00
|
|
CVE-2023-38831
Fixed
HIGH 7.8
KEV
Local Fixed in: 6.23
|
|
CVE-2018-20253
Fixed
HIGH 7.8
Local Fixed in: > 5.60
|
|
CVE-2018-20252
Fixed
HIGH 7.8
Local Fixed in: > 5.60
|
|
CVE-2018-20251
Fixed
MEDIUM 5.5
Local Fixed in: > 5.61
|
|
CVE-2018-20250
Fixed
HIGH 7.8
KEV
Local Fixed in: > 5.61
|
|
CVE-2015-5663
Fixed
HIGH 7.4
Local Fixed in: > 5.30
|
15 indeterminable CVE(s) hidden (missing current version or incompatible version schemes). · Show
Context
Context
Description
Compress, Encrypt, Package and Backup with only one utility.
FAQ
FAQ: WinRAR
Does WinRAR have known security vulnerabilities?
WinRAR (winget:RARLab.WinRAR) on Windows has 28 CVE referenced in NVD, 0 still open on the current version and 0 listed in the CISA KEV catalog. Absence of a CVE is not a security guarantee.
Is the current version of WinRAR affected by any open CVE?
Version 7.23.0 of WinRAR on Windows has no open CVE referenced in NVD. Absence of a CVE is not a security guarantee.
Is WinRAR affected by an actively exploited vulnerability (CISA KEV)?
No CVE affecting WinRAR (winget:RARLab.WinRAR) is currently in the CISA KEV catalog.
What is the latest known version of WinRAR?
The most recent version of WinRAR (winget:RARLab.WinRAR) tracked by Appaloosa Scout is 7.23.0, published by win.rar GmbH.