AI description
CVE-2025-31334 is a vulnerability affecting WinRAR versions prior to 7.11. It involves a bypass of the "Mark of the Web" (MotW) security warning. This function typically alerts users when opening files from untrusted sources, such as the internet. The vulnerability stems from how WinRAR handles symbolic links. An attacker can create a malicious .rar archive containing a specially crafted symbolic link that points to an executable file. When a user extracts and opens this symbolic link, the executable file runs without displaying the usual MotW warning, potentially leading to arbitrary code execution.
- Description
- Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic link specially crafted by an attacker is opened on the affected product, arbitrary code may be executed.
- Source
- vultures@jpcert.or.jp
- NVD status
- Awaiting Analysis
CVSS 3.0
- Type
- Secondary
- Base score
- 6.8
- Impact score
- 5.9
- Exploitability score
- 0.9
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
- Severity
- MEDIUM
- vultures@jpcert.or.jp
- CWE-356
- Hype score
- Not currently trending
Actively exploited CVE : CVE-2025-31334
@transilienceai
16 Apr 2025
24 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
🚨 La vulnerabilidad CVE-2025-31334 en WinRAR permite a atacantes eludir la Marca de la Web (MotW) y ejecutar código arbitrario. Los emails maliciosos con adjuntos .rar son especialmente peligrosos, ya que pueden comprometer tu sistema. https://t.co/cZX8k6HsaJ
@AlfonsoBalcells
15 Apr 2025
57 Impressions
0 Retweets
3 Likes
0 Bookmarks
1 Reply
1 Quote
Actively exploited CVE : CVE-2025-31334
@transilienceai
12 Apr 2025
11 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
2. WinRAR Güvenlik Açığı (CVE-2025-31334) WinRAR’da tespit edilen bu açık, sembolik bağlantılar kullanılarak Windows’un internetten indirilen dosyalara uyguladığı güvenlik etiketlerinin (MotW) atlatılmasına olanak tanıyor. Bu durum, kullanıcıların zararlı dosyaları farkında
@MuratDemirtas
12 Apr 2025
20 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🛡️ ¿Usas WinRAR? Cuidado con esta falla crítica que podría infectar tus dispositivos. Una nueva vulnerabilidad permite burlar la alerta de seguridad de Windows, conocida como Mark of the Web (MotW). 📎 Es la falla CVE-2025-31334. Afecta todas las versiones de WinRAR anteriore
@CycuraMX
11 Apr 2025
654 Impressions
9 Retweets
23 Likes
1 Bookmark
0 Replies
0 Quotes
Vuln en WinRAR 2025 Una vulnerabilidad 🤏🏼 identificada como CVE-2025-31334 afecta a WinRAR y permite a los atacantes eludir las advertencias de seguridad de Windows y ejecutar código malicioso sin generar alarmas. https://t.co/VNNb3bnzSE #autonomihacker #ciberseguridad #winrar
@R4ptor01
11 Apr 2025
25 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
لطفا Winrar را update کنید. به تازگی برای برنامه پرکاربرد winrar آسیب پذیری با کد شناسایی CVE-2025-31334 و از نوع RCE منتشر شده است. نسخه های قبل از 7.11 مربوط به این برنامه دارای این آسیب پذیری هستند. https://t.co/Poz3aKY03t https://t.co/cfCXEgrhDW
@AmirHossein_sec
11 Apr 2025
12 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
#CybersecurityNEWS🔴👨💻👾 Una nueva vulnerabilidad identificada como CVE-2025-31334 ha puesto en riesgo a los usuarios de WinRAR, permitiendo a los atacantes evadir el mecanismo de seguridad Mark of the Web (MotW) Ver más: https://t.co/y9sOZmzdaU #ciberseguridad #DevelNews htt
@develsecurity
11 Apr 2025
8 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
A vulnerability in WinRAR file archiver solution could be exploited to bypass the Mark of the Web (MotW) security warning and execute arbitrary code on a Windows machine. CVE-2025-31334 affects all WinRAR versions except the most recent release 7.11. https://t.co/xeDmHRXNYw https
@riskigy
7 Apr 2025
47 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Falha no WinRAR: A vulnerabilidade CVE-2025-31334, presente em versões anteriores à 7.11 do WinRAR, possibilita o bypass da segurança Mark of the Web do Windows, permitindo executar códigos maliciosos sem alertas de segurança. https://t.co/3orB2zC9mI
@caveiratech
7 Apr 2025
14 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Ojo! actualicen #WinRAR La vulnerabilidad CVE-2025-31334 puede ayudar a un atacante a eludir la advertencia de seguridad de MotW en #Windows al abrir un enlace simbólico que apunta a un archivo ejecutable en cualquier versión de WinRAR anterior a la 7.11. https://t.co/wAPd28SsC
@SoyITPro
7 Apr 2025
1486 Impressions
15 Retweets
43 Likes
5 Bookmarks
2 Replies
1 Quote
พบช่องโหว่ร้ายแรงใน WinRAR เสี่ยงให้แฮกเกอร์รันโค้ดแฝงที่เป็นอันตราย https://t.co/e702ZpOAoX CVE-2025-31334
@ohmohm
7 Apr 2025
7 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
New WinRAR flaw (CVE-2025-31334) lets attackers bypass Windows security alerts using crafted symlinks—no MotW warning! Fixed in v7.11. Update NOW & avoid sketchy archives. https://t.co/pThMc7Z23V #CyberSecurity #WinRAR #UpdateNow https://t.co/J32tqGbeAa
@dCypherIO
7 Apr 2025
47 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
WinRAR MotW bypass flaw fixed, update ASAP (CVE-2025-31334) https://t.co/8Ra9frn7EL https://t.co/iHPzHYd3a3
@secharvesterx
7 Apr 2025
44 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
EncryptHub e CVE-2025-31334: AI, frodi cyber con ChatGPT e falle WinRAR Sicurezza Informatica, BOT, bypass MotW, chatgpt, CVE-2025-31334, EncryptHub, malware, Mark of the Web Windows, opsec, Telegram, vulnerabilità, winrar https://t.co/cwsxHnxC46 https://t.co/l3kfOPZRrU
@matricedigitale
7 Apr 2025
38 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
WinRARの脆弱性（CVE-2025-31334）により、WindowsのMotWセキュリティ警告を回避し、任意コード実行が可能に。特定のシンボリックリンクを用いることで、攻撃者は警告なしにコードを実行できる。この問題はバージョン7.11で修正済み。 https://t.co/jb289gwZUu
@01ra66it
6 Apr 2025
410 Impressions
0 Retweets
6 Likes
2 Bookmarks
0 Replies
0 Quotes
اكتشف كيف تتجاوز ثغرة WinRAR تنبيهات أمان Windows Mark of the Web (CVE-2025-31334) وكيف تحمي نفسك منها. تعرف على التفاصيل الآن! للمزيد ابحث في Google عن موقعي [سايبرو بلس سكيورتي] #WinRAR https://t.co/R5IYbOu4C0
@CyberOPlus
5 Apr 2025
25 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 ¡Alerta de seguridad! Se ha detectado la vulnerabilidad WinRAR CVE-2025-31334. Descubre los riesgos, detalles y cómo protegerte en nuestro análisis completo 👉 https://t.co/aj5ZNJOfu5 #Seguridad #Cybersecurity #WinRAR
@Tecnohack_ES
4 Apr 2025
9 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
اكتشاف ثغرة جديدة على WinRar CVE-2025-31334 الثغره موجودة من اصدار 7.11 وقبل الثغره تسمح للمهاجم بتشغيل اوامر خبيثه على مستعمل البرنامج كل الي عليك تحدث البرنامج لاخر نسخه 👍🏽 https://t.co/zwdaTLOEaK
@HereHuss
4 Apr 2025
69 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
WinRAR MotW Vulnerability CVE-2025-31334 Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic link specially crafted by an attacker is ht
@CareWeDoNot
4 Apr 2025
18 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
La vulnerabilidad de WinRAR permite la elusión de la marca de la Web y la ejecución de código arbitrario CVE-2025-31334 https://t.co/UtvJ63pEZo https://t.co/IvW4emINMO
@elhackernet
4 Apr 2025
5559 Impressions
46 Retweets
111 Likes
22 Bookmarks
1 Reply
1 Quote
CVE-2025-31334: ข้อบกพร่องของ WinRAR ช่วยให้ Mark-of-the-Web Bypass และการประมวลผลรหัสโดยพลการ https://t.co/dbBJsZGSEM
@freedomhack101
4 Apr 2025
14 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-31334 Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions… https://t.co/BB91ICBZAM
@CVEnew
3 Apr 2025
0 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Critical WinRAR flaw (CVE-2025-31334) bypasses Mark-of-the-Web protections, enabling arbitrary code execution via malicious archives. Patch immediately: https://t.co/eYj4qiZJoi #CyberSecurity #Vulnerability
@adriananglin
3 Apr 2025
11 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-31334: WinRAR Flaw Enables Mark-of-the-Web Bypass and Arbitrary Code Execution https://t.co/Nmu2a7ERrG
@Dinosn
3 Apr 2025
9742 Impressions
64 Retweets
156 Likes
43 Bookmarks
2 Replies
1 Quote
CVE-2025-31334: WinRAR Flaw Enables Mark-of-the-Web Bypass and Arbitrary Code Execution Learn about CVE-2025-31334, a new vulnerability in #WinRAR that can bypass Windows security and execute malicious code. https://t.co/bQjOjXeKXX
@the_yellow_fall
3 Apr 2025
30 Impressions
0 Retweets
2 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-31334 WinRAR Symbolic Link Security Bypass Enabling Arbitrary Code Execution Prior to 7.11 https://t.co/oMrDCe5Oyr
@VulmonFeeds
3 Apr 2025
21 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes