Interface themes were applied to archive icons, even if “Apply to archive icons” option in “Organize themes” dialog was turned off. If both NTFS and Unix time extra fields were available for a file in a ZIP archive, the extraction command ignored the second extra field even if it provided more time fields than the first one We would like to thank Andrey Polovinkin of Group-IB Threat Intelligence for reporting this bug. User interaction is required to exploit this vulnerability. Attackers could utilize affected archives to distribute malware. A vulnerability was discovered in the processing of ZIP format. We would like to thank goodbyeselene in collaboration with Trend Micro Zero Day Initiative for reporting this bug.įixed in new WinRAR Beta Version 6.23, released: Ĭritical Bug: CVE-2023-38831.

This is fixed in the RAR4 recovery volume processing code. The vulnerability allows remote attackers to execute arbitrary code on affected installations.

Previously, they were deleted only on next WinRAR runs and only if they were at least 1 hour old.Ĭritical Bug: CVE-2023-40477. Rar$LS* temporary files, created when extracting or testing multiple archives from the Windows context menu, are now deleted immediately.

Endpoint Detection & Response for ServersĪdded extraction of XZ archives utilizing ARM64 filter.

For ios download WinRAR 6.24