WinRAR RCE exploited by multiple APT groups to deliver malware via crafted archives. Update WinRAR to 6.23+. Educate users about archive-based delivery. Consider blocking password-protected archives at the email gateway.
WinRAR Remote Code Execution Vulnerability allows execution of arbitrary code when a user opens a specially crafted archive containing a benign-looking document.
Exploit-DB.ai delivers real-time AI-triaged zero-day alerts directly to your inbox.
Activate Supernova →