CVE-2023-38831Vulnerability

1. “"Two years ago, DarkMe developed a reputation by leveraging two separate zero days to deliver its malware: WinRAR (CVE-2023-38831) and Windows Defender SmartScreen (CVE-2024-21412)," Huntress said.”

   The Hacker NewsNews24 Sep 2026
   ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories

2. “Two years ago, DarkMe developed a reputation by leveraging two separate zero days to deliver its malware: WinRAR (CVE-2023-38831) and Windows Defender SmartScreen (CVE-2024-21412).”

   HuntressVendor22 Sep 2026
   DarkMe RAT: A VB6 APT Trojan Turned Conventional Infostealer

3. “CVE-2023-38831: a vulnerability in WinRAR that involves improper handling of objects within an archive”

   Kaspersky SecurelistVendor26 Aug 2026
   Exploits and vulnerabilities in Q2 2026

4. “… de documentos señuelo para comprometer a sus objetivos, como CHM, XLS, PPT o DOC, y ha explotado la vulnerabilidad de WinRAR CVE-2023-38831.”

   ESET WeLiveSecurity (ES)Vendor18 May 2026
   FrostyNeighbor intensifica ataques en Ucrania con validación selectiva de víctimas

5. “CVE-2023-38831”

   GreyNoiseVendor26 Feb 2025
   GreyNoise Detects Active Exploitation of CVEs Mentioned in Black Basta’s Leaked Chat Logs

6. “Traders’ dollars in danger: CVE-2023-38831 zero-day vulnerability in WinRAR exploited by cybercriminals to target traders”

   Group-IBVendor23 Aug 2023
   Traders’ dollars in danger: CVE-2023-38831 zero-day vulnerability in WinRAR exploited by cybercriminals to target traders

Also named with it: CVE-2017-11882, CVE-2023-36884, CVE-2024-21412, CVE-2024-42009, CVE-2026-43284, CVE-2025-8088, CVE-2018-0802, CVE-2017-0199, CVE-2025-6218, CVE-2026-31431, CVE-2026-43500, CVE-2026-46300, CVE-2026-31635, CVE-2026-43494, CVE-2026-46331, CVE-2022-0847, CVE-2019-13272, CVE-2021-22555, CVE-2023-32233, CVE-2026-35273