CVE-2018-20250: WinRAR Absolute Path Traversal Vulnerability. WinRAR

WinRAR Absolute Path Traversal Vulnerability. WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution

• CISA KEV-listed (remediation due 2022-08-15)
• used in ransomware campaigns
• EPSS 96.3% (99.9% percentile)
• CVSS 7.8 high

Related briefings

• APT33: Iran's IRGC-Linked Espionage Group Targets Aviation, Energy, and Defense Across Three Continents 2026-02-16

Linked threat actors

• APT33 machine-inferred link
• APT-C-27 machine-inferred link

Browse the CVE database

Read the full analysis on IntelFusions