WINRAR FLAW ENABLES REMOTE CODE EXECUTION

Summary from the TLDR Cybersecurity newsletter

A security flaw in the popular Windows file archiver WinRAR has been fixed after being reported by a researcher to RARLAB. The vulnerability, tracked as CVE-2023-40477, allowed attackers to execute arbitrary code on a computer by opening a specially crafted RAR archive. This was due to a lack of proper validation of user-supplied data. Users are advised to update their installations to version 6.23 to address the flaw before it is exploited by attackers.