WinRAR
cpe:2.3:a:rarlab:winrar:*:*:*:*:*:*:*
- < 7.13
This vulnerability is being actively exploited in the wild.
A path traversal vulnerability has been identified in the Windows version of WinRAR. This vulnerability allows attackers to execute arbitrary code by crafting malicious archive files. It affects several different versions of WinRAR, with the vulnerability being exploited in the wild.
Exploitation of this vulnerability allows for arbitrary code execution on the affected system.
Users can upgrade to WinRAR 7.13 Final, released on July 30, 2025, to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.