[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxJtfbsKCwwbW2LKRZflveVOWNe6CtLbSSDTLNk5Ao0M":3,"g5a-family:rarlab\u002Funrar":132,"g5a-ex:rarlab\u002Funrar@*":133},{"success":4,"data":5},true,{"product":6,"versions":36,"topVulnerabilitiesByEpss":46,"kevVulnerabilities":104,"seoMetadata":110,"meta":129},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":35},"rarlab","unrar",9,14,1,"2023-08-07",[14,19,21,23,25,27,29,31,33],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"0.0.1",3,0,false,{"version":20,"cve_count":11,"kev_count":17,"has_kev":18},"3.60",{"version":22,"cve_count":11,"kev_count":17,"has_kev":18},"3.61",{"version":24,"cve_count":11,"kev_count":17,"has_kev":18},"3.70_beta_3",{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},"5.5.4",{"version":28,"cve_count":17,"kev_count":17,"has_kev":18},"5.5.6",{"version":30,"cve_count":11,"kev_count":17,"has_kev":18},"5.6.1.2",{"version":32,"cve_count":11,"kev_count":17,"has_kev":18},"5.6.1.3",{"version":34,"cve_count":11,"kev_count":17,"has_kev":18},"6.0.3","Unrar by Rarlab is a technology product with 9 tracked versions and 14 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[37,38,39,40,41,42,43,44,45],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":11,"kev_count":17,"has_kev":18},{"version":22,"cve_count":11,"kev_count":17,"has_kev":18},{"version":24,"cve_count":11,"kev_count":17,"has_kev":18},{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},{"version":28,"cve_count":17,"kev_count":17,"has_kev":18},{"version":30,"cve_count":11,"kev_count":17,"has_kev":18},{"version":32,"cve_count":11,"kev_count":17,"has_kev":18},{"version":34,"cve_count":11,"kev_count":17,"has_kev":18},[47,55,63,71,76,80,84,88,94,99],{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":52,"severity":53,"isKev":4,"epssScore":54},"CVE-2022-30333","RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~\u002F.ssh\u002Fauthorized_keys file. NOTE: WinRAR and Android RAR are unaffected.","2022-05-09",7.5,"v3.1","High",0.99233,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":18,"epssScore":62},"CVE-2012-6706","A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the \"DestPos\" variable, which allows the attacker to write out of bounds when setting Mem[DestPos].","2017-06-22",9.8,"v3.0","Critical",0.10108,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"cvssVersion":68,"severity":69,"isKev":18,"epssScore":70},"CVE-2007-0855","Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive.","2007-02-08",6.8,"v2","Medium",0.03983,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":51,"cvssVersion":60,"severity":53,"isKev":18,"epssScore":75},"CVE-2017-12938","UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file.","2017-08-18",0.03048,{"cveId":77,"description":78,"publishedDate":74,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":18,"epssScore":79},"CVE-2017-12942","libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function.",0.02304,{"cveId":81,"description":82,"publishedDate":74,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":18,"epssScore":83},"CVE-2017-12941","libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function.",0.02216,{"cveId":85,"description":86,"publishedDate":74,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":18,"epssScore":87},"CVE-2017-12940","libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function.",0.02197,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":92,"cvssVersion":68,"severity":69,"isKev":18,"epssScore":93},"CVE-2007-3726","Integer signedness error in the SET_VALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote attackers to cause a denial of service (crash) via a crafted RAR archive that causes a negative signed number to be cast to a large unsigned number.","2007-07-12",4.3,0.0213,{"cveId":95,"description":96,"publishedDate":97,"cvssScore":51,"cvssVersion":52,"severity":53,"isKev":18,"epssScore":98},"CVE-2017-14120","unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a directory traversal vulnerability for RAR v2 archives: pathnames of the form ..\u002F[filename] are unpacked into the upper directory.","2017-09-03",0.0211,{"cveId":100,"description":101,"publishedDate":97,"cvssScore":102,"cvssVersion":52,"severity":61,"isKev":18,"epssScore":103},"CVE-2017-14122","unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a stack-based buffer over-read in unrarlib.c, related to ExtrFile and stricomp.",9.1,0.01798,[105],{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"severity":53,"isKev":4,"epssScore":54,"cisaVulnName":106,"cisaDateAdded":107,"cisaShortDescription":108,"cisaRequiredAction":109},"RARLAB UnRAR Directory Traversal Vulnerability","2022-08-09","RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.","Apply updates per vendor instructions.",{"title":111,"metaDescription":112,"keywords":113,"structuredData":114},"Unrar by Rarlab - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Unrar by Rarlab covering 9 versions with 14 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Unrar vulnerabilities, Unrar security, Unrar CVE, Rarlab Unrar, Unrar threat intelligence, Rarlab security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Unrar KEV, Unrar exploited vulnerabilities",{"@context":115,"@type":116,"name":117,"description":112,"url":118,"manufacturer":119,"applicationCategory":123,"softwareVersion":124,"mainEntity":125},"https:\u002F\u002Fschema.org","SoftwareApplication","Unrar","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Frarlab\u002Funrar",{"@type":120,"name":121,"url":122},"Organization","Rarlab","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Frarlab","Security Software","9 versions tracked",{"@type":126,"name":127,"description":128,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Unrar Security Vulnerabilities","Security vulnerabilities affecting Unrar by Rarlab",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":130,"apiVersion":131},"2026-10-17T18:10:17.243Z","3.0",[],{"rows":134,"total":11,"capped":18,"failed":17},[135],{"cveId":48,"name":106,"severity":53,"cvss":51,"added":107,"epss":54,"published":136,"ranges":137,"checked":4,"hits":139,"covers":18},"2022-05-09T08:15:06.937",[138],"before 6.12",[]]