Known vulnerabilities in WinRAR 6.22 beta 1

Vendor: RARLAB
Software: WinRAR
Version: 6.22 beta 1
Software CPE: cpe:2.3:a:rarlab:winrar:*:*:*:*:*:*:*:*
Website: https://www.rarlab.com/
Total vulnerabilities: 6
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting WinRAR version 6.22 beta 1 WinRAR 6.22 beta 1 is affected by 6 vulnerabilities: 2 critical, 1 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113784 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-8088		 CWE-22 Critical
Public exploit available
Exploited
 7.13 09.08.2025 SB2025080901
SB2025100738
SB2026080781
#VU106931 - Product UI does not Warn User of Unsafe Actions
CVE-2025-31334		 CWE-356 Medium
No
No
 7.11 03.04.2025 SB2025040328
#VU92078 - Improper input validation
CVE-2024–36052		 CWE-20 Low
No
No
 7.00 13.06.2024 SB2024040145
SB2024061396
#VU87965 - Security Features
CVE-2024-30370		 CWE-254 Medium
No
No
 7.00 01.04.2024 SB2024040145
#VU79925 - Improper input validation
CVE-2023-38831		 CWE-20 Critical
Public exploit available
Exploited
 6.23 23.08.2023 SB2023082350
#VU79711 - Improper Validation of Array Index
CVE-2023-40477		 CWE-129 High
Public exploit available
No
 6.23 19.08.2023 SB2023081901
SB2023083134
SB2023083135
and 11 more