WinRAR
RARLAB (win.rar GmbH) · current 7.23.0
The current version of WinRAR is 7.23.0 (as of 18/08/2026). patchletter checks the official source daily and emails you every new release.
Actively exploited vulnerabilities
The US cybersecurity agency CISA lists these vulnerabilities in its catalog of Known Exploited Vulnerabilities. Check your version and patch or mitigate promptly.
8.8 high · over the network, without login, needs user action · CISA deadline was 2 Sept 25
7.8 high · locally only, without login, needs user action · CISA deadline was 15 Aug 22
7.8 high · locally only, without login, needs user action · CISA deadline was 14 Sept 23
- CVE-2025-6218RARLAB WinRAR Path Traversal Vulnerability
7.8 high · locally only, without login, needs user action · CISA deadline was 30 Dec 25
Source: CISA KEV. The CVE is matched to the product automatically — when in doubt, the linked NVD entry applies.
BSI security advisories
Advisories the German BSI (CERT-Bund) published for this product. Whether your version is affected is stated in the advisory itself.
- win.rar WinRAR: Schwachstelle ermöglicht Codeausführung
WID-SEC-W-2026-2152 · 15 Jul
WinRAR at a glance
WinRAR from RARLAB, distributed by win.rar GmbH, is a Windows archiver that creates RAR and ZIP archives and extracts many further formats. It handles multi-volume archives, recovery records and encrypted archives, which is why it is found on workstations and servers alike. Administrators also use the command-line build to script backups and packaging steps.
New versions appear at irregular intervals; besides feature work they regularly carry corrections to the extraction routines. Because WinRAR opens archives from untrusted sources — typically mail attachments — such flaws have been actively exploited in the past. The bundled library used to extract 7z archives is refreshed along with them.
When updating, note that WinRAR has no automatic updater: without software distribution, old installations simply stay behind. Licences carry across versions, so moving up costs nothing. Take installers only from the vendor, as counterfeit packages circulate; in fleets, deploy through package management and inventory which builds are actually present.
Version history & changelog · as detected by patchletter
| Version | Channel | Date | Notes |
|---|---|---|---|
| 7.23.0 | STABLE | 18/08/2026 | Release notes → |
Frequently asked questions
- What is the latest version of WinRAR?
- WinRAR 7.23.0, released 18/08/2026. patchletter checks the vendor's official source daily for new releases.
- Where can I find the WinRAR release notes?
- The version history above links to the vendor's official release notes where the vendor publishes them. patchletter deliberately stores no vendor full texts.
- How do I get notified about new WinRAR updates?
- Free by email: patchletter reports every new release — instantly or bundled as a digest. Unsubscribe anytime with one click.
Never miss a WinRAR update
We check the source daily and email you — instantly or as a digest. Free, one-click unsubscribe.
Watch WinRAREmbed this badge
Shows the current WinRAR version and updates itself. Free to use, no account needed.
[](https://patchletter.com/en/software/winrar)https://patchletter.com/badge/winrar.svgAlso available: ?v=eol (end of support) and ?v=cve (actively exploited).
