A security vulnerability in the WinRAR compression program, present until version 7.12 Beta 1, allows attackers to inject malicious code. Attacks exploiting this vulnerability have now been observed.

Earlier this week, it became known that WinRAR version 7.13 closes a high-risk vulnerability that allows malicious code to be injected and executed. The gap has already been abused by two different ...

WinRAR Zero-Day Exploited by Russian-Linked Hackers RomCom and Paper Werewolf Your email has been sent Cybersecurity researchers have identified an actively exploited flaw in WinRAR that attackers are ...

Everyone's favorite file archiving utility isn't often in the news, but today is an exception. The WinRAR archiving utility has been the target of a couple of large-scale attacks that leverage a 0-day ...

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works. There's something about the WinRAR stacked-book logo that makes me all nostalgic, giving me a ...

One incredibly popular Windows tools has recently been updated to address a zero-day exploit that could give bad actors a chance to install malware on devices running older versions of the app. The ...

A high-severity zero-day in the widely used WinRAR file compressor is under active exploitation by two Russian cybercrime groups. The attacks backdoor computers that open malicious archives attached ...

ESET found a high-severity bug in WinRAR being used by RomCom, a known Russian hacking collective The bug was being used to deploy backdoors allowing full access to compromised computers WinRAR says ...

ESET Research discovered a zero-day vulnerability in WinRAR being exploited in the wild in the guise of job application documents; the weaponized archives exploited a path traversal flaw to compromise ...

A newly discovered vulnerability in WinRAR has been exploited in the wild by the Russia-aligned cyber group RomCom. According to an advisory published by ESET researchers earlier today, the flaw, ...

Security researchers have discovered a new flaw in WinRAR that was recently exploited to spread malware through phishing emails. The flaw, CVE-2025-8088, can be harnessed through maliciously crafted ...