Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Update now! WinRAR files can be abused to run malware

🗓️ 22 Aug 2023 11:30:00Reported by Malwarebytes blogType 
malwarebytes
 malwarebytes🔗 www.malwarebytes.com👁 47 Views

New WinRAR update fixes two vulnerabilities that could allow malware execution. Users should install the latest version (WinRAR 6.23 or later) to prevent attacks. Additionally, the update provides native support for RAR format on Windows 11

Related
ReporterTitlePublishedViews
Family
GithubExploit		Exploit for Improper Validation of Array Index in Rarlab Winrar
29 Aug 202316:29
–githubexploit
AstraLinux		Astra Linux – Vulnerability in unrar-nonfree
3 May 202623:59
–astralinux
Information Security Automation		August 2023: GitHub PoCs, Vulristics, Qualys First-Party, Tenable ExposureAI, SC Awards and Rapid7, Anglo-Saxon list, MS Patch Tuesday, WinRAR, Juniper
30 Aug 202316:15
–avleonov
BDU FSTEC		The vulnerability of the RAR4 file archiver WinRAR’s volume recovery processing system allows a hacker to execute arbitrary code.
21 Aug 202300:00
–bdu_fstec
Circl		CVE-2023-40477
20 Aug 202302:20
–circl
CNNVD		RAR 安全漏洞
28 Aug 202300:00
–cnnvd
CVE		CVE-2023-40477
3 May 202402:11
–cve
Cvelist		CVE-2023-40477 RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability
3 May 202402:11
–cvelist
Debian		[SECURITY] [DLA 3542-1] unrar-nonfree security update
26 Aug 202320:48
–debian
Debian		[SECURITY] [DLA 3543-1] rar security update
27 Aug 202306:29
–debian
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
22 Aug 2023 11:30Current
7.1High risk
Vulners AI Score7.1
EPSS0.1308
winrarvulnerabilitiesmalware executionupdatenative supportransomware prevention
47