{"items":[{"id":"CVE-2026-14191","published":"2026-07-01T02:41:39.316Z","updated":"2026-07-09T04:47:54.319Z","title":"WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader","severity":"HIGH","score":7.8,"vendor":"RARLAB","product":"WinRAR","kev":false,"epss":0.00437,"kevAdded":null},{"id":"CVE-2025-14111","published":"2025-12-05T22:32:05.019Z","updated":"2025-12-08T17:14:47.769Z","title":"Rarlab RAR App com.rarlab.rar path traversal","severity":"LOW","score":2.3,"vendor":"Rarlab","product":"RAR App","kev":false,"epss":0.00698,"kevAdded":null},{"id":"CVE-2014-125119","published":"2025-07-25T15:59:39.205Z","updated":"2026-05-14T02:06:24.876Z","title":"WinRAR < 5.00 Filename Spoofing RCE","severity":"HIGH","score":8.4,"vendor":"RARLab","product":"WinRAR","kev":false,"epss":0.01984,"kevAdded":null},{"id":"CVE-2025-6218","published":"2025-06-21T00:09:02.884Z","updated":"2026-02-26T17:50:27.554Z","title":"RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"RARLAB","product":"WinRAR","kev":true,"epss":0.90479,"kevAdded":"2025-12-09"},{"id":"CVE-2025-31334","published":"2025-04-03T05:27:32.538Z","updated":"2025-04-03T13:52:45.659Z","title":"Issue that bypasses the \"Mark of the Web\" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR…","severity":"MEDIUM","score":6.8,"vendor":"RARLAB","product":"WinRAR","kev":false,"epss":0.01286,"kevAdded":null},{"id":"CVE-2023-40477","published":"2024-05-03T02:11:12.905Z","updated":"2025-11-04T19:20:10.675Z","title":"RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"RARLAB","product":"WinRAR","kev":false,"epss":0.1138,"kevAdded":null},{"id":"CVE-2024-30370","published":"2024-04-02T20:28:47.578Z","updated":"2024-08-02T01:32:07.042Z","title":"RARLAB WinRAR Mark-Of-The-Web Bypass Vulnerability","severity":"MEDIUM","score":4.3,"vendor":"RARLAB","product":"WinRAR","kev":false,"epss":0.01154,"kevAdded":null},{"id":"CVE-2022-43650","published":"2023-03-29T00:00:00.000Z","updated":"2025-02-12T16:57:11.609Z","title":"This vulnerability allows remote attackers to disclose sensitive information on affected installations of RARLAB WinRAR 6.11.0.0. User interaction is required…","severity":"LOW","score":2.5,"vendor":"RARLAB","product":"WinRAR","kev":false,"epss":0.23218,"kevAdded":null}]}