CVE Watch—

CVE-2023-38831

RARLAB WinRAR Code Execution Vulnerability

CVSS

—

No CVSS

EPSS

97.8%

p100

KEV

YES

Aug 24, 2023

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

97.8%EPSS · 30 days97.8%

2026-06-302026-07-16

KEV catalog record

Product

RARLAB / WinRAR

Vulnerability

RARLAB WinRAR Code Execution Vulnerability

Added to KEV

Aug 24, 2023

Remediate by

Sep 14, 2023

Known ransomware use

Yes

Summary description

RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file within a ZIP archive.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

http://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=232&cHash=c5bf79590657e32554c6683296a8e8aa; https://nvd.nist.gov/vuln/detail/CVE-2023-38831

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2018-20250—

99.9%

KEV—80WinRAR Absolute Path Traversal Vulnerability—CVE-2025-6218—

99.7%

KEV—80RARLAB WinRAR Path Traversal Vulnerability—CVE-2025-8088—

99.6%

KEV—80RARLAB WinRAR Path Traversal Vulnerability—