Back to Database
Status published
Medium
CVE-2025-31334
Issue that bypasses the "Mark of the Web" security warning...
Vulnerability Description
Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic link specially crafted by an attacker is opened on the affected product, arbitrary code may be executed.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-31334
Credits & Attribution
No credits recorded in the NVD database.
More from RARLAB
View All →CVE-2025-6218
RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability
High
7.8
CVE-2024-30370
RARLAB WinRAR Mark-Of-The-Web Bypass Vulnerability
Medium
4.3
CVE-2023-40477
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability
High
7.8
CVE-2022-43650
This vulnerability allows remote attackers to disclose sensitive information on...
Low
2.5
Affected Vendor
RARLAB
View all reports →Affected Software
WinRAR
Vulnerable Versions:
prior to 7.11
Timeline
Official Publish:
April 3rd, 2025
Last Modified:
April 3rd, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.