Are WinRAR & 7-Zip safe right now?
No WinRAR & 7-Zip flaws have been added to CISA's exploited list in the last 90 days (the most recent was Dec 9, 2025). Keep automatic updates on: that can change any day.
Earlier exploited flaws
- RARLAB WinRAR Path Traversal Vulnerability
- RARLAB WinRAR Path Traversal Vulnerability Zero-day
- 7-Zip Mark of the Web Bypass Vulnerability
- RARLAB WinRAR Code Execution Vulnerability Zero-day
- RARLAB UnRAR Directory Traversal Vulnerability
- WinRAR Absolute Path Traversal Vulnerability
By year
| Year | Exploited flaws added | Zero-days |
|---|---|---|
| 2026 (so far) | 0 | 0 |
| 2025 | 3 | 1 |
| 2024 | 0 | 0 |
| 2023 | 1 | 1 |
| 2022 | 2 | 0 |
Questions
Are WinRAR & 7-Zip safe right now?
No WinRAR & 7-Zip flaws have been added to CISA's exploited list in the last 90 days (the most recent was Dec 9, 2025). Keep automatic updates on: that can change any day. Confirm with the vendor's own advisories and install updates as soon as they're available.
How many WinRAR & 7-Zip vulnerabilities have been exploited?
6 flaws are on CISA's list of vulnerabilities known to be exploited in real attacks, 4 of them used by ransomware.
Covers products matching winrar, rarlab, 7-zip. Sources: CISA's Known Exploited Vulnerabilities catalog and the vendors' own advisories. Updated every hour. General information only; confirm details with the vendor.