Back to the CVE list
CVE-2023-38831 CISA KEV · Actively exploitedLinked to ransomware

Vulnerability in N/a

CVSS score

7.8

EPSS probability

%99.8

Risk score

15.6

Published

3 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

The purpose of this lab is to empirically demonstrate that relying solely on the free, built-in Microsoft Defender Antivirus is insufficient for small businesses. While free Defender provides baseline endpoint protection, it lacks the operational capabilities, patching, and 24/7 monitoring required to stop modern, multi-stage attacks.

Public PoCSource updated: 30.09.2026 21:17:06

This project is a cybersecurity research and analysis project focused on CVE-2023-38831, a critical WinRAR vulnerability that allows attackers to execute malicious code through specially crafted archive files. The project was conducted in a controlled lab environment for educational and defensive security purposes only.

Public PoCSource updated: 30.05.2026 21:24:53

Winrar Exploit CVE-2023-38831

Public PoCSource updated: 30.04.2026 12:05:09

CVE-2023-38831 is a Zero-day WinRAR vulnerability that lets attackers disguise malicious files in archives, tricking users into executing harmful content.

Public PoCSource updated: 19.05.2026 08:23:59

CVE-2023-38831 - WinRAR

Public PoCSource updated: 22.01.2026 02:10:03

anelya0333/Exploiting-CVE-2023-38831

Public PoCSource updated: 20.11.2025 17:52:45

ict519 assignment

Public PoCSource updated: 28.10.2025 12:10:48

This project demonstrates a simulated exploitation of the WinRAR vulnerability CVE-2023-38831 to execute a reverse shell. The purpose of this task was to showcase how attackers can weaponize compressed archive files to gain remote access to a target machine.

Public PoCSource updated: 03.08.2025 22:15:55

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-38831"