WinRAR vulnerabilities

1 known vulnerability in WinRAR from Check Point Software Technologies. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  WinRAR Absolute Path Traversal Exploited

  CVE-2018-20250Feb 5, 2019Check Point Software TechnologiesEPSS 96%

  In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated with specific patterns, the destination (extraction) folder is ign