Sploitus

11 exploited vulnerabilities in Unrar

Vulnerabilities with publicly known exploits

Vendors
Rarlab, Alt Linux, Sophos, Suse, Unrar, Unknown
With known exploits
11
Affected Rarlab Unrar versions
≤ 5.7.4, 6.0.3, 5.5.6, 5.6.1.2, 5.6.1.3, 6.2.3, 6.12
Affected Sophos Threat Detection Engine versions
≤ 3.36.2
Affected Simsong Bulk Extractor versions
All versions

Vulnerabilities with exploits

Highest CVSS first — 3 of these already have exploit code on Sploitus

CVE-2018-25018
CVSS 10.0 HIGH 2018-08-12FIX AVAILABLE
CVE-2012-6706 3 exploits
CVSS 10.0 CRITICAL 2012-06-09FIX AVAILABLE
Microsoft Windows Defender - mpengine.dll Memory Corruption ExploitMicrosoft Windows Defender - mpengine.dll Memory Corruption
CVE-2026-24857
CVSS 9.8 CRITICAL 2026-01-28
CVE-2017-12940
CVSS 9.8 CRITICAL 2017-08-15FIX AVAILABLE
CVE-2017-12941
CVSS 9.8 CRITICAL 2017-08-15FIX AVAILABLE
CVE-2017-12942
CVSS 9.8 CRITICAL 2017-08-15FIX AVAILABLE
CVE-2017-20006
CVSS 9.3 HIGH 2017-11-22
CVE-2026-14191 1 exploit
CVSS 7.8 HIGH 2026-07-01FIX AVAILABLE
Exploit for CVE-2026-14191
CVE-2022-48579
CVSS 7.8 HIGH 2022-12-20FIX AVAILABLE
CVE-2017-12938
CVSS 7.8 HIGH 2017-08-15FIX AVAILABLE
CVE-2022-30333 11 exploits
CVSS 7.5 HIGH 2022-05-07FIX AVAILABLE
Exploit for Unrestricted Upload of File with Dangerous Type in Perfree PerfreeblogUnRAR Path Traversal