WinRAR Vulnerability Causes Heap Overflow in RAR5 Recovery Volumes

**CVE-2026-14191 — WinRAR RAR5 recovery-volume heap overflow**: A high-severity (CVSS 7.8) heap overflow in the RAR5 .rev parser can write an attacker-controlled 32-bit value past an internal buffer, corrupting heap objects and potentially enabling crashes or further exploitation; it affects WinRAR/RAR/UnRAR before 7.23, was patched in 7.23, and has no confirmed in-the-wild exploitation—update to 7.23 and avoid running repair/test on untrusted .rev archives.