Known vulnerabilities in WinRAR 6.24 beta 1

Vendor: RARLAB
Software: WinRAR
Version: 6.24 beta 1
Software CPE: cpe:2.3:a:rarlab:winrar:*:*:*:*:*:*:*:*
Website: https://www.rarlab.com/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting WinRAR version 6.24 beta 1 WinRAR 6.24 beta 1 is affected by 4 vulnerabilities: 1 critical, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113784 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-8088		 CWE-22 Critical
Public exploit available
Exploited
 7.13 09.08.2025 SB2025080901
SB2025100738
SB2026080781
#VU106931 - Product UI does not Warn User of Unsafe Actions
CVE-2025-31334		 CWE-356 Medium
No
No
 7.11 03.04.2025 SB2025040328
#VU92078 - Improper input validation
CVE-2024–36052		 CWE-20 Low
No
No
 7.00 13.06.2024 SB2024040145
SB2024061396
#VU87965 - Security Features
CVE-2024-30370		 CWE-254 Medium
No
No
 7.00 01.04.2024 SB2024040145