Skip to content
NewA calmer, faster ZeroHour

WinRAR CVE-2018-20250 flaw exploited in multiple campaigns

Security Affairsby @securityaffairs ()4 min read3 · 1 read
Analyze CVE-2018-20250 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2018-20250
Absolute Path Traversal in RARLAB WinRAR ACE Extraction (UNACEV2.dll)
7.896%KEVRansomwarePoC ×5
KEV

From the original article

4 min read at securityaffairs.com

The recently patched vulnerability affecting the popular archiver utility WinRAR has been exploited to deliver new malware to targeted users. A recently patched vulnerability affecting the popular archiver utility WinRAR it becoming a commodity in the cybercrime underground, experts reported it has been exploited to deliver new malware in targeted attacks.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.