- How many CVEs does Rarlab have?
- Rarlab has 47 published CVE records since 2004, including 8 in the last two years.
- How many Rarlab CVEs are in CISA KEV?
- Yes — 5 of Rarlab's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which Rarlab products have the most CVEs?
- The Rarlab products with the most published CVEs are WinRAR, UnRAR, RAR, far manager, RAR App.
- What are the most common weakness types in Rarlab CVEs?
- Rarlab's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-150 (Improper Neutralization of Escape, Meta, or Control Sequences), CWE-693 (Protection Mechanism Failure), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
- Are there public exploits for Rarlab vulnerabilities?
- Yes — 16 of Rarlab's CVEs have a known public exploit.
- How many critical Rarlab vulnerabilities are there?
- Rarlab has 9 critical and 21 high-severity CVEs.
- What is the average severity of Rarlab CVEs?
- The average CVSS base score across Rarlab's scored CVEs is 7.1.