Windows winget win.rar GmbH
WinRAR
Current version
7.23.0
winget:RARLab.WinRAR
Version 7.23.0 of WinRAR on Windows has no known open CVE (28 referenced, fixed or indeterminable).
- Known vulnerabilities
- 28
- Still open
- 0
- KEV open
- 0
- Max CVSS (open)
- -
4 total (history)
8.8 historical
Known vulnerabilities (CVE)
Latest matched CVE: 2026
Test a different version
| CVE |
|---|
|
CVE-2025-52331
Unknown
MEDIUM 6.1
Network
|
|
CVE-2024-30370
Unknown
MEDIUM 4.3
Network
|
|
CVE-2022-43650
Unknown
HIGH 7.1
Local
|
|
CVE-2006-3912
Unknown
N/A
|
|
CVE-2006-3845
Unknown
N/A
|
|
CVE-2005-4620
Unknown
N/A
|
|
CVE-2005-4474
Unknown
N/A
|
|
CVE-2005-3263
Unknown
N/A
|
|
CVE-2005-3262
Unknown
N/A
|
|
CVE-2005-0331
Unknown
N/A
|
|
CVE-2004-1254
Unknown
N/A
|
|
CVE-2004-1495
Unknown
N/A
|
|
CVE-2004-0235
Unknown
N/A
|
|
CVE-2004-0234
Unknown
N/A
|
Show 14 CVEs fixed in earlier versions Hide the 14 CVEs fixed earlier
| CVE |
|---|
|
CVE-2019-25677
Fixed
MEDIUM 6.2
Local Fixed in: > 5.61
|
|
CVE-2025-8088
Fixed
HIGH 8.8
KEV
Network Fixed in: 7.13
|
|
CVE-2025-6218
Fixed
HIGH 7.8
KEV
Local Fixed in: 7.12
|
|
CVE-2025-31334
Fixed
MEDIUM 6.8
Network Fixed in: 7.11
|
|
CVE-2024-36052
Fixed
HIGH 7.5
Network Fixed in: 7.00
|
|
CVE-2023-40477
Fixed
HIGH 7.8
Local Fixed in: 6.23
|
|
CVE-2024-33899
Fixed
HIGH 7.1
Network Fixed in: 7.00
|
|
CVE-2023-38831
Fixed
HIGH 7.8
KEV
Local Fixed in: 6.23
|
|
CVE-2018-20253
Fixed
HIGH 7.8
Local Fixed in: > 5.60
|
|
CVE-2018-20252
Fixed
HIGH 7.8
Local Fixed in: > 5.60
|
|
CVE-2018-20251
Fixed
MEDIUM 5.5
Local Fixed in: > 5.61
|
|
CVE-2018-20250
Fixed
HIGH 7.8
KEV
Local Fixed in: > 5.61
|
|
CVE-2015-5663
Fixed
HIGH 7.4
Local Fixed in: > 5.30
|
|
CVE-2008-7144
Fixed
N/A
Fixed in: > 3.70
|
14 indeterminable CVE(s) shown above. · Hide
Cumulative exposure
Low
Weighted sum capped at 100: open CVEs (max 50 pts) + KEV (max 35) + critical shared permissions (max 10) + trackers (max 8) + OS EOL (max 5). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Context
Context
Description
Compress, Encrypt, Package and Backup with only one utility.
Technical details
- Publisher
- win.rar GmbH
- Distribution channel
- winget
- Identifier
- winget:RARLab.WinRAR
FAQ
FAQ: WinRAR
Does WinRAR have known security vulnerabilities?
WinRAR (winget:RARLab.WinRAR) on Windows has 28 CVE referenced in NVD, 0 still open on the current version and 0 listed in the CISA KEV catalog. Absence of a CVE is not a security guarantee.
Is the current version of WinRAR affected by any open CVE?
Version 7.23.0 of WinRAR on Windows has no open CVE referenced in NVD. Absence of a CVE is not a security guarantee.
Is WinRAR affected by an actively exploited vulnerability (CISA KEV)?
No CVE affecting WinRAR (winget:RARLab.WinRAR) is currently in the CISA KEV catalog.
What is the latest known version of WinRAR?
The most recent version of WinRAR (winget:RARLab.WinRAR) tracked by Appaloosa Scout is 7.23.0, published by win.rar GmbH.
Deploy this app across your fleet
Appaloosa distributes and updates your Android and iOS apps from an enterprise store.