Vulnerabilities in RARLAB's WinRAR, the ubiquitous Windows archive utility — bugs here are attractive to attackers because a single malicious archive can compromise any of WinRAR's hundreds of millions of installs. Combined article + CVE feed for the RARLAB / WinRAR beat.https://0daynews.com/en-ushttps://0daynews.com/cve/cve-2018-20250/https://0daynews.com/cve/cve-2018-20250/WinRAR Absolute Path Traversal vulnerability leads to Remote Code ExecutionFri, 14 Aug 2026 00:00:00 GMTRARLAB / WinRARhighcvehttps://0daynews.com/cve/cve-2022-30333/https://0daynews.com/cve/cve-2022-30333/RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.Fri, 14 Aug 2026 00:00:00 GMTRARLAB / WinRARhighcvehttps://0daynews.com/cve/cve-2023-38831/https://0daynews.com/cve/cve-2023-38831/A vulnerability in RARLAB's WinRAR allows a crafted archive to execute arbitrary code when a user attempts to view what appears to be an innocuous file (e.g. a .jpg) inside the archive — a decoy folder with a matching name masks a malicious script that runs instead.Fri, 14 Aug 2026 00:00:00 GMTRARLAB / WinRARhighcvehttps://0daynews.com/cve/cve-2025-6218/https://0daynews.com/cve/cve-2025-6218/RARLAB WinRAR contains a path traversal vulnerability allowing an attacker to execute code in the context of the current user.Fri, 14 Aug 2026 00:00:00 GMTRARLAB / WinRARhighcvehttps://0daynews.com/cve/cve-2025-8088/https://0daynews.com/cve/cve-2025-8088/RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.Fri, 14 Aug 2026 00:00:00 GMTRARLAB / WinRARhighcvehttps://0daynews.com/articles/2026-07-05-winrar-path-traversal-cve-2023-38831/https://0daynews.com/articles/2026-07-05-winrar-path-traversal-cve-2023-38831/CVE-2023-38831 let a booby-trapped archive execute code when a user clicked what looked like a harmless image file — exploited against trading forums before the technical details were widely known.Sun, 05 Jul 2026 13:00:00 GMTRARLAB / WinRARarticle