Search: CVE-2023-38831

CVE-2023-38831 is a high-severity remote code execution vulnerability affecting WinRAR versions prior to 6.23. The flaw allows an attacker to execute malicious code when a user opens a specially crafted ZIP archive containing a benign file and a folder with the same name. Exploitation requires user interaction but no privileges or authentication. This vulnerability was actively exploited in the wild from April to October 2023. The CVSS score of 7.8 reflects significant impact on confidentiality, integrity, and availability. European organizations using vulnerable WinRAR versions, especially those processing ZIP files from untrusted sources, are at risk. Mitigation involves updating WinRAR to version 6.23 or later and implementing strict archive handling policies.

KEVEPSS 99%VulnerabilityRARLABGermanyFrance+8