COOEY // HUBcompliance · community · intelligence

FAIL › dossier

RARLAB vendor

5
failure events
0
zero-days
3
RCEs
5
on KEV
3
critical
95
worst shame

Dossier not yet built — the RAG curator builds one for players with ≥2 failure events (factory/dossier.py). The failure history and sentiment below are live.

Failure history 5 events

DateEventSevFlagsShameSummary
2023-08-24 CVE-2023-38831 critical ⚡RCE ⌖KEV 95 RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file within a ZIP archive.
2022-02-15 CVE-2018-20250 critical ⚡RCE ⌖KEV 95 WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution
2022-08-09 CVE-2022-30333 critical ⌖KEV 80 RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.
2025-08-12 CVE-2025-8088 high ⚡RCE ⌖KEV 65 RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.
2025-12-09 CVE-2025-6218 high ⌖KEV 50 RARLAB WinRAR contains a path traversal vulnerability allowing an attacker to execute code in the context of the current user.