CVE-2023-38831

RARLAB WinRAR contained an unpatched code execution vulnerability exploited in the wild by ransomware actors.

An unspecified vulnerability in WinRAR allowed attackers to execute code when users opened benign files within ZIP archives. This unpatched flaw was actively exploited in the wild and linked to ransomware campaigns, demonstrating the severe risk of relying on widely distributed software with known, unaddressed vulnerabilities. DIB organizations must rigorously patch all software, especially common utilities, and monitor for KEV-listed exploits to prevent similar compromises.

Shame score — RARLAB failed to patch a known, actively exploited vulnerability in a widely used product, directly enabling ransomware attacks and showing severe negligence in maintaining software security.