Exploit / PoCcritical

WinRAR Security Flaw Exploited in Zero

The Hacker Newsby @TheHackersNewsAug 24, 2023 · 11:12 UTC (Aug 24, 2023)2 min read3

Read at thehackernews.com

Analyze CVE-2023-38831 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-38831 CVE-2023-40477

Tags: cve-2023-38831 cve-2023-40477 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-38831	Code Execution in RARLAB WinRAR via Crafted ZIP File/Folder Name Confusion	7.8	100%	KEVRansomwarePoC ×4	Aug 23, 2023 KEV Aug 24, 2023
CVE-2023-40477	RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability	7.8	11%		May 3, 2024

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Aug 24, 2023 Endpoint Security / Zero-Day A recently patched security flaw in the popular WinRAR archiving software has been exploited as a zero-day since April 2023, new findings from Group-IB reveal.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.