What happened
RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file within a ZIP archive.
Affected versions
WinRAR: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
SploitusWinRAR code execution vulnerability CVE-2023-38831.KitPloit2026-09-22T07:08:35Candidatekitploit.comWinRAR code execution vulnerability CVE-2023-38831.ru2026-09-22T07:08:35CandidateSploitusExploit for CVE-2023-38831. CVSS 7.8.Sploitus index2026-10-10T13:48:20+00:00CandidatePoC-in-GitHub · BoredHackerBlog/winrar_CVE-2023-38831_lazy_poclazy way to create CVE-2023-38831 winrar file for testing★ 91BoredHackerBlog2023-08-24CandidatePoC-in-GitHub · b1tg/CVE-2023-38831-winrar-exploitCVE-2023-38831 winrar exploit generator★ 783b1tg2023-08-25CandidatePoC-in-GitHub · IR-HuntGuardians/CVE-2023-38831-HUNT★ 2IR-HuntGuardians2023-08-27CandidatePoC-in-GitHub · Garck3h/cve-2023-38831一款用于生成winrar程序RCE（即cve-2023-38831）的POC的工具。★ 126Garck3h2023-08-27CandidatePoC-in-GitHub · ignis-sec/CVE-2023-38831-RaRCEAn easy to install and easy to run tool for generating exploit payloads for CVE-2023-38831, WinRAR RCE before versions 6.23★ 113ignis-sec2023-08-27CandidatePoC-in-GitHub · HDCE-inc/CVE-2023-38831CVE-2023-38831 PoC (Proof Of Concept)★ 89HDCE-inc2023-08-28CandidatePoC-in-GitHub · Maalfer/CVE-2023-38831_ReverseShell_Winrar-RCEPasos necesarios para obtener una reverse shell explotando la vulnerabilidad de winrar CVE-2023-38831 en versiones anteriores a 6.23.★ 22Maalfer2023-08-28CandidatePoC-in-GitHub · knight0x07/WinRAR-Code-Execution-Vulnerability-CVE-2023-38831Understanding WinRAR Code Execution Vulnerability (CVE-2023-38831)★ 40knight0x072023-08-28CandidatePoC-in-GitHub · akhomlyuk/cve-2023-38831CVE-2023-38831 WinRAR★ 3akhomlyuk2023-08-28CandidatePoC-in-GitHub · PascalAsch/CVE-2023-38831-KQLKQL Hunting for WinRAR CVE-2023-38831★ 4PascalAsch2023-08-28CandidatePoC-in-GitHub · ahmed-fa7im/CVE-2023-38831-winrar-expoit-simple-PocCVE-2023-38831 winrar exploit generator and get reverse shell★ 11ahmed-fa7im2023-08-28CandidatePoC-in-GitHub · thegr1ffyn/CVE-2023-38831Proof of Concept (POC) for CVE-2023-38831 WinRAR★ 1thegr1ffyn2023-08-29CandidatePoC-in-GitHub · ML-K-eng/CVE-2023-38831-Exploit-and-DetectionThis repository has both an attack detection tool and a Proof-of-Concept (PoC) Python script for the WinRAR CVE-2023-38831 vulnerability.★ 0ML-K-eng2023-08-29CandidatePoC-in-GitHub · sudo-py-dev/CVE-2023-38831winrar exploit 6.22 <=★ 0sudo-py-dev2023-08-30CandidatePoC-in-GitHub · z3r0sw0rd/CVE-2023-38831-PoCProof-of-Concept for CVE-2023-38831 Zero-Day vulnerability in WinRAR★ 6z3r0sw0rd2023-08-30CandidatePoC-in-GitHub · sh770/CVE-2023-38831winrar exploit 6.22 <=★ 0sh7702023-08-30CandidatePoC-in-GitHub · Ben1B3astt/CVE-2023-38831_ReverseShell_Winrar★ 1Ben1B3astt2023-08-30CandidatePoC-in-GitHub · MorDavid/CVE-2023-38831-Winrar-Exploit-Generator-POCThis is a POC for the CVE-2023-3883 exploit targeting WinRAR up to 6.22. Modified some existing internet-sourced POCs by introducing greater dynamism and incorporated additional try-except blocks within the code.★ 13MorDavid2023-08-30CandidatePoC-in-GitHub · Mich-ele/CVE-2023-38831-winrarCVE-2023-38831 winrar exploit builder★ 3Mich-ele2023-09-01CandidatePoC-in-GitHub · asepsaepdin/CVE-2023-38831★ 0asepsaepdin2023-09-03CandidatePoC-in-GitHub · Fa1c0n35/CVE-2023-38831-winrar-exploit★ 0Fa1c0n352023-09-03CandidatePoC-in-GitHub · xaitax/WinRAR-CVE-2023-38831This module exploits a vulnerability in WinRAR (CVE-2023-38831). When a user opens a crafted RAR file and its embedded document, a script is executed, leading to code execution.★ 17xaitax2023-09-03CandidatePoC-in-GitHub · GOTonyGO/CVE-2023-38831-winrarQuick exploit builder for CVE-2023-38831, a vulnerability that affects WinRAR versions before 6.23.★ 0GOTonyGO2023-09-07CandidatePoC-in-GitHub · Malwareman007/CVE-2023-38831CVE-2023-38831 WinRaR Exploit Generator★ 9Malwareman0072023-09-12CandidatePoC-in-GitHub · ameerpornillos/CVE-2023-38831-WinRAR-ExploitProof of concept (PoC) exploit for WinRAR vulnerability (CVE-2023-38831) vulnerability★ 3ameerpornillos2023-09-12CandidatePoC-in-GitHub · ngothienan/CVE-2023-38831★ 0ngothienan2023-09-17CandidatePoC-in-GitHub · malvika-thakur/CVE-2023-38831Proof-of-Concept (POC) of CVE-2023-38831 Zero-Day vulnerability in WinRAR★ 4malvika-thakur2023-09-21CandidatePoC-in-GitHub · ruycr4ft/CVE-2023-38831★ 1ruycr4ft2023-10-12CandidatePoC-in-GitHub · Nielk74/CVE-2023-38831★ 0Nielk742023-10-21CandidatePoC-in-GitHub · kehrijksen/CVE-2023-38831CVE-2023-38831 is an RCE in WinRAR (<6.23)★ 0kehrijksen2023-10-24CandidatePoC-in-GitHub · h3xecute/SideCopy-Exploits-CVE-2023-38831SideCopy APT Group exploits CVE-2023-38831★ 0h3xecute2023-11-01CandidatePoC-in-GitHub · s4m98/winrar-cve-2023-38831-poc-genWinRAR cve-2023-38831-poc-generator★ 1s4m982023-11-07CandidatePoC-in-GitHub · xk-mt/WinRAR-Vulnerability-recurrence-tutorialWinRAR-6.22、CVE-2023-38831、CNNVD-202308-1943、DM-202307-003730、QVD-2023-19572漏洞复现★ 4xk-mt2023-11-15CandidatePoC-in-GitHub · MyStuffYT/CVE-2023-38831-POCProof-of-concept of CVE-2023-38831★ 0MyStuffYT2023-12-04CandidatePoC-in-GitHub · SpamixOfficial/CVE-2023-38831CVE-2023-38831 Proof-of-concept code★ 1SpamixOfficial2023-12-12CandidatePoC-in-GitHub · r1yaz/winDEDExploit Development using python for CVE-2023-38831 (POC)★ 2r1yaz2023-12-26CandidatePoC-in-GitHub · youmulijiang/evil-winrarevil-winrar,CVE-2023-38831漏洞利用和社会工程学攻击框架 (evil-winrar, CVE-2023-38831 Vulnerability Exploitation and Social Engineering Attack Framework)★ 11youmulijiang2024-03-25CandidatePoC-in-GitHub · solomon12354/VolleyballSquid-----CVE-2023-38831-and-Bypass-UACThis is my malware★ 0solomon123542024-04-01CandidatePoC-in-GitHub · RomainBayle08/CVE-2023-38831★ 0RomainBayle082024-04-06CandidatePoC-in-GitHub · imbyter/imbyter-WinRAR_CVE-2023-38831WinRAR漏洞测试复现。详参：https://flowus.cn/share/a3b35db0-ab5e-4abc-b8d3-5ff284e82e7b★ 0imbyter2024-06-17CandidatePoC-in-GitHub · UnHackerEnCapital/PDFernetRemoteloPoC - Prueba de Concepto de CVE-2024-4367 en conjunto al CVE-2023-38831 en un solo Script★ 6UnHackerEnCapital2024-06-19CandidatePoC-in-GitHub · Hirusha-N/CVE-2021-34527-CVE-2023-38831-and-CVE-2023-32784★ 0Hirusha-N2024-06-25CandidatePoC-in-GitHub · khanhtranngoccva/cve-2023-38831-poc★ 0khanhtranngoccva2024-07-16CandidatePoC-in-GitHub · MaorBuskila/Windows-X64-RATRemote Access Trojan (RAT) for Windows x64 using a combination of vulnerability CVE-2023-38831 (WinRAR < 6.23 vulnerability) and Shellcode exploitation technique.★ 2MaorBuskila2024-07-23CandidatePoC-in-GitHub · yezzfusl/cve_2023_38831_scannerThis Python application scans for the CVE-2023-38831 vulnerability in WinRAR.★ 1yezzfusl2024-08-06CandidatePoC-in-GitHub · FirFirdaus/CVE-2023-38831A POC demo on CVE-2023-38831★ 0FirFirdaus2024-08-30CandidatePoC-in-GitHub · ra3edAJ/LAB-DFIR-cve-2023-38831d★ 0ra3edAJ2024-09-26CandidatePoC-in-GitHub · technicalcorp0/CVE-2023-38831-ExploitThis project contains a Python script that exploits **CVE-2023-38831**, a vulnerability in **WinRAR** versions prior to 6.23. The exploit generates a **malicious RAR archive** that triggers the execution of arbitrary code when the victim opens a benign-looking file within the archive (such as a PDF).★ 1technicalcorp02024-09-27CandidatePoC-in-GitHub · idkwastaken/CVE-2023-38831★ 0idkwastaken2024-10-15CandidatePoC-in-GitHub · VictoriousKnight/CVE-2023-38831_Exploit★ 0VictoriousKnight2024-12-03CandidatePoC-in-GitHub · kuyrathdaro/cve-2023-38831CVE-2023-38831 (PoC) - WinRAR Exploit★ 3kuyrathdaro2024-12-30CandidatePoC-in-GitHub · Tolu12wani/Demonstration-of-CVE-2023-38831-via-Reverse-Shell-ExecutionThis project demonstrates a simulated exploitation of the WinRAR vulnerability CVE-2023-38831 to execute a reverse shell. The purpose of this task was to showcase how attackers can weaponize compressed archive files to gain remote access to a target machine.★ 0Tolu12wani2025-08-03CandidatePoC-in-GitHub · anelya0333/Exploiting-CVE-2023-38831★ 0anelya03332025-11-20CandidatePoC-in-GitHub · mishra0230/CVE-2023-38831CVE-2023-38831 - WinRAR★ 0mishra02302026-01-09CandidatePoC-in-GitHub · RonF98/CVE-2023-38831-POCCVE-2023-38831 is a Zero-day WinRAR vulnerability that lets attackers disguise malicious files in archives, tricking users into executing harmful content.★ 3RonF982026-03-08CandidatePoC-in-GitHub · lightningspeed221/Winrar-Exploit-CVE-2023-38831Winrar Exploit CVE-2023-38831★ 0lightningspeed2212026-04-30CandidatePoC-in-GitHub · olowostandard1/CVE-2023-38831-WinRAR-Vulnerability-AnalysisThis project is a cybersecurity research and analysis project focused on CVE-2023-38831, a critical WinRAR vulnerability that allows attackers to execute malicious code through specially crafted archive files. The project was conducted in a controlled lab environment for educational and defensive security purposes only.★ 1olowostandard12026-05-11CandidatePoC-in-GitHub · cristhiansm0/TXDXCristhian_2023-CVE-38831CVE-2023-38831 WinRAR lab: detection with Sysmon/Wazuh, reverse engineering with Ghidra, patch analysis, and remediation.★ 0cristhiansm02026-08-05CandidatePoC-in-GitHub · Dnyaneshwari-123/DFIR-Capstone-InvestigationsThree DFIR investigations: memory forensics (Volatility), disk/malware analysis (Silent Breach), and attack-chain reconstruction (CVE-2023-38831). Reports, timelines, IOCs and MITRE ATT&CK mapping.★ 0Dnyaneshwari-1232026-09-29CandidatePoC-in-GitHub · KrioSocial/defender-bypass-winrar-cve-2023-38831The purpose of this lab is to empirically demonstrate that relying solely on the free, built-in Microsoft Defender Antivirus is insufficient for small businesses. While free Defender provides baseline endpoint protection, it lacks the operational capabilities, patching, and 24/7 monitoring required to stop modern, multi-stage attacks.★ 0KrioSocial2026-09-30CandidateSource timeline
Discovered through CISA Known Exploited VulnerabilitiesView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.