CVE Watch—

CVE-2023-38831

RARLAB WinRAR Code Execution Vulnerability

CVSS

—

Sin CVSS

EPSS

97.8%

p100

KEV

SÍ

24 ago 2023

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

97.8%EPSS · 30 días97.8%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

RARLAB / WinRAR

Vulnerabilidad

RARLAB WinRAR Code Execution Vulnerability

Añadido a KEV

24 ago 2023

Remediar antes de

14 sept 2023

Uso conocido en ransomware

Sí

Descripción resumida

RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file within a ZIP archive.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

http://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=232&cHash=c5bf79590657e32554c6683296a8e8aa; https://nvd.nist.gov/vuln/detail/CVE-2023-38831

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2018-20250—

99.9%

KEV—80WinRAR Absolute Path Traversal Vulnerability—CVE-2025-6218—

99.7%

KEV—80RARLAB WinRAR Path Traversal Vulnerability—CVE-2025-8088—

99.6%

KEV—80RARLAB WinRAR Path Traversal Vulnerability—