Google TAG Detects State-Backed Threat Actors Exploiting WinRAR Flaw

A number of state-back threat actors from Russia and China have been observed exploiting a recent security flaw in the WinRAR archiver tool for Windows as part of their operations.
The vulnerability in question is CVE-2023-38831 (CVSS score: 7.8), which allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The shortcoming has been actively

arbitrary code attackers back china code cve cve-2023-38831 cvss exploiting flaw google google tag operations question russia score security security flaw state tag threat threat actors tool vulnerability windows winrar winrar flaw