Older WinRAR versions let malicious archives override the user-specified path via crafted archives, enabling stealthy system ...

ESET warns that at least two Russian hacking groups are using the zero-day flaw in WinRAR for cyberespionage purposes.

ESET Research discover a zero-day vulnerability in WinRAR being exploited in the wild in the guise of job application ...

The popular file archiving tool WinRAR had a serious zero-day vulnerability threatening systems with code execution attacks. While WinRAR has now addressed the flaw, it turns out that the zero-day sti ...

Plus, RomCom isn't the only Russia-linked crew to abuse WinRAR holes. Fancy Bear, the GRU cyber-espionage crew, previously exploited CVE-2023-38831 for large-scale phishing campaigns against ...

Researchers have released a report detailing how a recent WinRAR path traversal vulnerability tracked as CVE-2025-8088 was ...

A newly discovered vulnerability in WinRAR has been exploited in the wild by the Russia-aligned cyber group RomCom. According ...

If you use WinRAR or other affected components such as the Windows versions of its command line utilities, UnRAR.dll, or the ...

Home » Security Boulevard (Original) » News » ANOTHER WinRAR 0-Day: Don’t Patch Now — Uninstall It!

Iconic archiving platform WinRAR carried a dangerous zero-day vulnerability which could have let hackers plant malware on ...

A recently fixed WinRAR vulnerability tracked as CVE-2025-8088 was exploited as a zero-day in phishing attacks to install the RomCom malware.

The maintainers of the WinRAR file archiving utility have released an update to address an actively exploited zero-day ...