WinRAR flaw could allow attackers to take control of your computer

WinRAR 7.23 patches CVE-2026-14191, a memory-corruption flaw in RAR5 recovery-volume (.rev) processing that can lead to out-of-bounds writes and may allow attackers to execute code. Users must manually install the update (no automatic updates), and administrators are advised to remove or closely manage WinRAR to reduce attack surface; the report also notes previous post-patch exploitation of a WinRAR flaw by Russia-aligned groups.