Known vulnerabilities in UnRar

Vendor: RARLAB
Software: UnRar
Software CPE: cpe:2.3:a:rarlab:unrar:*:*:*:*:*:*:*:*
Website: https://www.rarlab.com/
Total vulnerabilities: 9
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting UnRar UnRar is affected by 9 known vulnerabilities: 3 high, 2 medium, 4 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU92077 - Improper input validation
CVE-2024-33899		 CWE-20 Low
No
No
 7.00 13.06.2024 SB2024061391
SB2024061396
SB2025031282
and 1 more
#VU62908 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-30333		 CWE-22 Low
Available
Exploited
 6.12 10.05.2022 SB2022051004
SB2023091704
SB2024010819
and 3 more
#VU8604 - Out-of-bounds read
CVE-2017-12941		 CWE-125 Low
No
No
 - 26.09.2017 SB2017092610
SB2017092611
SB2018061501
#VU8602 - Integer overflow
CVE-2012-6706		 CWE-190 High
Available
No
 - 25.09.2017 SB2017092611
SB2017082105
SB2017102202
and 15 more
#VU8603 - Out-of-bounds read
CVE-2017-12940		 CWE-125 Low
No
No
 - 25.09.2017 SB2017092610
SB2017092611
SB2018061501
#VU8605 - Memory corruption
CVE-2017-12942		 CWE-119 High
No
No
 - 25.09.2017 SB2017092610
SB2017092611
SB2018061501
#VU38366 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2017-14120		 CWE-22 Medium
No
No
 - 03.09.2017 SB2017090303
#VU38367 - NULL Pointer Dereference
CVE-2017-14121		 CWE-476 Medium
No
No
 - 03.09.2017 SB2017090303
#VU38368 - Out-of-bounds read
CVE-2017-14122		 CWE-125 High
No
No
 - 03.09.2017 SB2017090303