Skip to content

CVE · Exploited · On CISA KEV

CVE-2023-38831

RARLAB WinRAR Code Execution Vulnerability

7.8
CVSS 3.1
1
story
AUG 24
added to KEV
Severity
7.8 High · NVD score
Vendor
RARLAB
Product
WinRAR
Published
Aug 23, 2023
Added to KEV
Aug 24, 2023
KEV deadline
Sep 14, 2023
Ransomware use
Known
Weakness
CWE-345, CWE-351

What it is

RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file within a ZIP archive.

From CISA's Known Exploited Vulnerabilities catalog

Decipher coverage · 1 story

Newest first ↑
  1. IntrusionsCybercrime and APT Groups Exploiting WinRAR BugExploitation of CVE-2025-8088 in the wild began before disclosure, with attacks confirmed as early as July 18, 2025.DENNIS FISHER · 4 MIN

Official references

7 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE recordRegistryCISA KEVKnown exploited, with the federal deadline

Advisories, fixes & analysis

Exploitpacketstormsecurity.com/files/174573/WinRAR-Remote-Code-Execution.htmlExploitblog.google/threat-analysis-group/government-backed-actors-exploiting-winrar-vulnerabilityExploitbleepingcomputer.com/news/security/winrar-zero-day-exploited-since-april-to-hack-trading-accountsExploitgroup-ib.com/blog/cve-2023-38831-winrar-zero-day