CVE-2024-33899: RARLAB WinRAR

High severity, CVSS 7.1. EPSS: 0.8% chance of exploitation in the next 30 days.

RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences.

Affected products

• RARLAB WinRAR: before 7.00 (fixed in 7.00)

Published 2024-04-29. Last modified 2026-06-17.