Vulnerabilidades do Win-Rar WinRAR
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Win-Rar WinRAR: 2 registro(s), com versões afetadas e correções.
CVE-2019-25677
Média · 5.5
CWE-379 05/04/2026
WinRAR 5.61 Denial of Service via Malformed Language File
WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the test button, causing an access violation at memory address 004F1DB8 when the application attempts to read invalid data.
CVE-2025-8088
Alta · 8.8
KEV Urgente · 72 Exploit público Ransomware CWE-35 08/08/2025
RARLAB WinRAR Path Traversal Vulnerability
A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček
from ESET.