Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA52366
HistoryAug 17, 2023 - 12:00 a.m.

KLA52366 Multiple vulnerabilities in WinRAR

2023-08-1700:00:00
Kaspersky Lab
threats.kaspersky.com
48

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.326 Low

EPSS

Percentile

96.9%

JSON

Detect date:

08/17/2023

Severity:

High

Description:

Multiple vulnerabilities were found in WinRAR. Malicious users can exploit these vulnerabilities to execute arbitrary code.

Exploitation:

Public exploits exist for this vulnerability.

Affected products:

WinRAR 6.x earlier than 6.23

Solution:

Update to the latest version
WinRAR and RAR archiver downloads

Original advisories:

WinRAR 6.23 final released

Impacts:

ACE

Related products:

WinRAR

CVE-IDS:

CVE-2023-38831

Related

thn 16
hivepro 3
githubexploit 34
zdt 2
prion 1
debiancve 1
exploitdb 1
openvas 1
metasploit 1
cisa_kev 2
packetstorm 2
cnvd 1
attackerkb 1
cve 3
trellix 4
nessus 1
rapid7blog 1
securelist 2
avleonov 1
thn
thn
Operation RusticWeb: Rust-Based Malware Targets Indian Government Entities
2023-12-22 13:19:00
UAC-0099 Using WinRAR Exploit to Target Ukrainian Firms with LONEPAGE Malware
2023-12-22 07:46:00
Experts Uncover DarkCasino: New Emerging APT Threat Exploiting WinRAR Flaw
2023-11-16 13:51:00
hivepro
hivepro
The Rise of DarkCasino APT Group Exploiting WinRAR 0-Day
2023-11-27 12:47:11
WinRAR Zero-Day Exploit Targeting Traders Since April
2023-08-25 08:16:29
SideCopy Leverages Multi-platform RAT, Assaults Indian Government Entities
2023-11-09 05:00:36
githubexploit
githubexploit
Exploit for Vulnerability in Rarlab Winrar
2024-04-01 15:59:34
Exploit for Vulnerability in Rarlab Winrar
2023-08-28 15:26:14
Exploit for Vulnerability in Rarlab Winrar
2023-08-27 21:49:37
zdt
zdt
WinRAR version 6.22 - Remote Code Execution via ZIP archive Exploit
2024-03-29 00:00:00
WinRAR Remote Code Execution Exploit
2023-09-11 00:00:00
prion
prion
Design/Logic Flaw
2023-08-23 17:15:00
debiancve
debiancve
CVE-2023-38831
2023-08-23 17:15:00
exploitdb
exploitdb
WinRAR version 6.22 - Remote Code Execution via ZIP archive
2024-03-28 00:00:00
openvas
openvas
RARLabs WinRAR Code Execution Vulnerability - Windows
2023-08-31 00:00:00
metasploit
metasploit
WinRAR CVE-2023-38831 Exploit
2023-09-04 16:56:22
cisa_kev
cisa_kev
RARLAB WinRAR Code Execution Vulnerability
2023-08-24 00:00:00
Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
2024-04-30 00:00:00
packetstorm
packetstorm
WinRAR Remote Code Execution
2023-09-08 00:00:00
WinRAR 6.22 Remote Code Execution
2024-03-28 00:00:00
cnvd
cnvd
WinRAR Code Execution Vulnerability
2023-08-25 00:00:00
attackerkb
attackerkb
CVE-2023-38831
2023-08-23 00:00:00
cve
cve
CVE-2023-38831
2023-08-23 17:15:43
CVE-2023-40270
2023-08-23 18:15:08
CVE-2023-39583
2023-08-23 17:15:44
trellix
trellix
CVE-2023-38831: Navigating the Threat Landscape of the Latest Security Vulnerability
2023-11-09 00:00:00
CVE-2023-38831: Navigating the Threat Landscape of the Latest Security Vulnerability
2023-11-09 00:00:00
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
nessus
nessus
WinRAR < 6.23 RCE
2023-08-24 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-09-15 18:54:45
securelist
securelist
Exploits and vulnerabilities in Q1 2024
2024-05-07 10:00:39
IT threat evolution in Q3 2023. Non-mobile statistics
2023-12-01 10:00:03
avleonov
avleonov
August 2023: GitHub PoCs, Vulristics, Qualys First-Party, Tenable ExposureAI, SC Awards and Rapid7, Anglo-Saxon list, MS Patch Tuesday, WinRAR, Juniper
2023-08-30 16:15:31

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.326 Low

EPSS

Percentile

96.9%

JSON
Related for KLA52366
thn16hivepro3githubexploit34zdt2prion1debiancve1exploitdb1openvas1metasploit1cisa_kev2packetstorm2cnvd1attackerkb1cve3trellix4nessus1rapid7blog1securelist2avleonov1