CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-08-23
WinRAR Arbitrary Code Execution Vulnerability (CVE-2023-38831) Security Advisory
[Affected Scope] All Windows endpoint environments running RARLAB WinRAR versions prior to 6.23.
[Impact] Attackers can execute arbitrary code in the background when a user attempts to open a seemingly benign file within a crafted ZIP archive, leading to full system compromise.
[Mitigation] Immediately upgrade WinRAR to version 6.23 or higher, and restrict execution of untrusted archive files.