WinRAR vulnerabilities and fixes

CVEs that mention WinRAR, ranked by priority. 1 tracked.

WinRAR has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-07-01. Highest priority: CVE-2026-14191 (score 37/100).

• CVE-2026-14191 HIGH 7.8 An out-of-bounds heap write exists in the RAR5 recovery-volume (.rev) parser in WinRAR and UnRAR (RecVolumes5:

FAQ

How do I fix WinRAR vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is WinRAR being exploited right now?

None of the tracked WinRAR CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which WinRAR CVE should I patch first?

CVE-2026-14191 currently ranks highest (37/100): An out-of-bounds heap write exists in the RAR5 recovery-volume (.rev) parser in WinRAR and UnRAR (RecVolumes5:.

← Back to latest CVEs