Live › vulnerability › CVE-2023-38831
Go to dashboardWinRAR, a Windows archive tool, has a flaw that lets an attacker run code when a user opens a harmless-looking file inside a ZIP archive. CISA lists it as actively exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| rarlab winrar | vendor | < 6.23 | 6.23 |
| RARLAB WinRAR | vendor | – | – |
Check the installed WinRAR version (Help > About WinRAR) against the vendor's fixed release.
Update WinRAR to the vendors patched release; if no mitigation is available, stop using WinRAR per CISAs required action.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may include a benign file (such as an ordinary .JPG file) and also a folder that has the same name as the benign file, and the contents of the folder (which may include executable content) are processed during an attempt to access only the benign file. This was exploited in the wild in April through October 2023.
This page as .md · .json · in your agent: get_signal("CVE-2023-38831")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.