RAR vulnerabilities

2 known vulnerabilities in RAR from Rarlab. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  WinRAR: Improper Validation of Array Index

  CVE-2026-14191Jul 1, 2026Rarlab

  An out-of-bounds heap write exists in the RAR5 recovery-volume (.rev) parser in WinRAR and UnRAR (RecVolumes5::ReadHeader in recvol5.cpp). The RecItems vector is sized only when the first .rev file in a set is processed; subsequent .rev files supply an indepen

• 8.1 High severity

  RAR App: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-14111Dec 5, 2025Rarlab

  A security vulnerability has been detected in Rarlab RAR App up to 7.11 Build 127 on Android. This affects an unknown part of the component com.rarlab.rar. Such manipulation leads to path traversal. It is possible to launch the attack remotely. Attacks of this