coldbraid

CVE-2018-20250 RARLAB WinRAR

WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution

CVSS
not scored

CWE-36

On CISA’s exploited list

WinRAR Absolute Path Traversal Vulnerability

Added
2022-02-15
Federal patch deadline
2022-08-15
Ransomware use
known

Actors known to use it (MITRE ATT&CK)

NVDCVE.orgAll exploited vulnerabilities