Year/Release Date : 06.2026
Version : 7.23
Developer : RARLAB
Developer’s Website : RARLAB
Bit depth : 64bit
Interface language : Russian, English
Tablet : present
Advertising : none
System requirements :
- Windows 7 / 8 / 8.1 / 10 / 11
Description :
WinRAR is one of the most well-known archivers. It supports RAR archiving, so it goes without saying. It also supports ZIP, CAB, ARJ, LZH, TAR, GZ, BZIP, JAR, UUE, GZIP, BZIP2, and 7-Zip archives. It also offers numerous useful features, including encryption, support for solid archives, which can achieve 10-50% higher compression than conventional methods, a special algorithm for compressing multimedia files, support for multi-volume archives, and much more.
WinRAR Features:
- Full support for RAR and ZIP archives
- Using an original, highly efficient data compression algorithm
- Availability of a graphical shell with support for drag & drop technology
- Ability to use command line interface
- Managing archives of other formats (CAB, ARJ, LZH, TAR, GZ, TAR.GZ, BZ2, TAR.BZ2, UUE, JAR, ISO, 7Z, Z)
- Support continuous archiving method for better compression
- Support for multi-volume archives
- Create self-extracting (SFX) archives and multi-volume archives using standard or additional SFX modules
- Possibility of recovery of physically damaged archives
- The ability to create and use recovery volumes, allowing you to recreate missing parts of multi-volume archives.
- Support for Unicode encoding in file names
- Additional functions (encryption of data and file names in the archive, adding archive comments, error logging)
- Using third-party design of the program interface in the form of separate themes
What’s new in this version: Version 7.23
1. Heap overflow vulnerability is fixed in RAR5 recovery volume
data reconstruction code. It affects WinRAR, RAR and UnRAR.
UnRAR.dll library doesn’t include recovery volume processing,
so it is not affected.
We are grateful to Arjun Basnet from Securin Labs for letting us know
about this security issue.
2. Symbolic link pointing outside of destination folder could be created
even without -ola switch, when extracting a specially crafted
RAR archive by WinRAR, RAR, UnRAR or UnRAR.dll library.
Further check in extraction code prevents placing files to such folder
even in case of multiple extraction commands, excluding the possibility
of path traversal attack for WinRAR, RAR or UnRAR based extraction.
It limits the potential threat to a case where another tool uses this
symbolic link to store files.
We are grateful to scofaild23-bnomran for letting us know about this
security issue.
3. 7zxa.dll 7z extraction library is updated to version 26.02 to include
bug and vulnerability fixes by the library developer.
4. Switch -iver prints RAR version even if -idc is specified
in the command line, configuration file or RARINISWITCHES environment
variable. Previously -idc blocked -iver action.
Also a new line character is added to -iver output.
1. Heap overflow vulnerability is fixed in RAR5 recovery volume
data reconstruction code. It affects WinRAR, RAR and UnRAR.
UnRAR.dll library doesn’t include recovery volume processing,
so it is not affected.
We are grateful to Arjun Basnet from Securin Labs for letting us know
about this security issue.
2. Symbolic link pointing outside of destination folder could be created
even without -ola switch, when extracting a specially crafted
RAR archive by WinRAR, RAR, UnRAR or UnRAR.dll library.
Further check in extraction code prevents placing files to such folder
even in case of multiple extraction commands, excluding the possibility
of path traversal attack for WinRAR, RAR or UnRAR based extraction.
It limits the potential threat to a case where another tool uses this
symbolic link to store files.
We are grateful to scofaild23-bnomran for letting us know about this
security issue.
3. 7zxa.dll 7z extraction library is updated to version 26.02 to include
bug and vulnerability fixes by the library developer.
4. Switch -iver prints RAR version even if -idc is specified
in the command line, configuration file or RARINISWITCHES environment
variable. Previously -idc blocked -iver action.
Also a new line character is added to -iver output.
Installation:
- The license file is picked up during program installation.
If this doesn’t happen, copy the license file rarreg.key to the program’s installation folder.
- Installers in other languages can be downloaded from the official website. The medicine is suitable.
