How severe is CVE-2019-25677?

CVE-2019-25677 has a CVSS 3.x base score of 6.2, rated medium severity. It is exploitable over local access with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.

Is CVE-2019-25677 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (34th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2019-25677?

CVE-2019-25677 affects Rarlab Winrar. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2019-25677?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2019-25677 have an EU (EUVD) identifier?

Yes. CVE-2019-25677 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2019-20089.

When was CVE-2019-25677 published?

CVE-2019-25677 was published on 2026-04-05 and last updated on 2026-06-17.

CVE-2019-25677

CVE-2019-25677 is a medium-severity vulnerability in Rarlab Winrar with a CVSS 3.x base score of 6.2. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-379.

Key facts

Severity: Medium (CVSS 3.x base score 6.2)
CVSS v4: 6.9
EPSS exploit prediction: 0% (34th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2019-20089
Weakness: CWE-379
Affected product: Rarlab Winrar
Published: 2026-04-05
Last modified: 2026-06-17

Description

WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the test button, causing an access violation at memory address 004F1DB8 when the application attempts to read invalid data.

Frequently asked questions

What is CVE-2019-25677?: WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the test button, causing an access violation at memory address 004F1DB8 when the application attempts to read invalid data.
How severe is CVE-2019-25677?: CVE-2019-25677 has a CVSS 3.x base score of 6.2, rated medium severity. It is exploitable over local access with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.
Is CVE-2019-25677 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (34th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2019-25677?: CVE-2019-25677 affects Rarlab Winrar. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2019-25677?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2019-25677 have an EU (EUVD) identifier?: Yes. CVE-2019-25677 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2019-20089.
When was CVE-2019-25677 published?: CVE-2019-25677 was published on 2026-04-05 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:rarlab:winrar:*:*:*:*:*:*:x86:*

More vulnerabilities in Rarlab Winrar

CVE-2008-7144 — Critical (CVSS 10.0): Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to…
CVE-2004-1254 — Critical (CVSS 10.0): WinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via a ZIP file containing…
CVE-2004-0234 — Critical (CVSS 10.0): Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as…
CVE-2006-3845 — Critical (CVSS 9.3): Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary…
CVE-2025-8088 — High (CVSS 8.8): A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code…
CVE-2025-6218 — High (CVSS 7.8): RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to…

All CVEs affecting Rarlab Winrar →

Other CWE-379 vulnerabilities

CVE-2024-9950 — High (CVSS 7.8): A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify…
CVE-2024-9500 — High (CVSS 7.8): A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer…
CVE-2023-6080 — High (CVSS 7.8): Lakeside Software’s SysTrack LsiAgent Installer version 10.7.8 for Windows contains a local privilege escalation…
CVE-2023-3181 — High (CVSS 7.8): The C:\Program Files (x86)\Splashtop\Splashtop Software Updater\uninst.exe process creates a folder at…
CVE-2023-37243 — High (CVSS 7.8): The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM…
CVE-2023-26396 — High (CVSS 7.8): Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Creation of…

Browse all CWE-379 vulnerabilities →