{"id":"CVE-2025-31334","aliases":["EUVD-2025-9627","GHSA-2mpw-8427-rgcw"],"status":"published","title":"Issue that bypasses the \"Mark of the Web\" security warning function for files when opening a...","description":"Issue that bypasses the \"Mark of the Web\" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic link specially crafted by an attacker is opened on the affected product, arbitrary code may be executed.","severity":{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.01286,"percentile":0.70341,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-356"],"published":"2025-04-03T05:27:32Z","modified":"2026-06-17T09:10:15Z","products":[{"vendor":"rarlab","product":"winrar"},{"vendor":"win-rar","product":"winrar"}],"references":[{"url":"https://www.win-rar.com/start.html?\u0026L=0","tags":["Release Notes"]},{"url":"https://jvn.jp/en/jp/JVN59547048/","tags":["Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31334"},{"url":"https://jvn.jp/en/jp/JVN59547048"},{"url":"https://github.com/advisories/GHSA-2mpw-8427-rgcw"}],"sources":{"cve":[{"id":"CVE-2025-31334","description":"Issue that bypasses the \"Mark of the Web\" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic link specially crafted by an attacker is opened on the affected product, arbitrary code may be executed.","status":"published","published":"2025-04-03T05:27:32.538Z","modified":"2025-04-03T13:52:45.659Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-356"],"updated_at":"2026-11-02T14:32:44.424933Z"}],"euvd":[{"id":"EUVD-2025-9627","description":"Issue that bypasses the \"Mark of the Web\" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic link specially crafted by an attacker is opened on the affected product, arbitrary code may be executed.","status":"published","published":"2025-04-03T05:27:32Z","modified":"2025-04-03T13:52:45Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T20:52:43.853284Z"}],"ghsa":[{"id":"GHSA-2mpw-8427-rgcw","title":"Issue that bypasses the \"Mark of the Web\" security warning function for files when opening a...","description":"Issue that bypasses the \"Mark of the Web\" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic link specially crafted by an attacker is opened on the affected product, arbitrary code may be executed.","status":"published","published":"2025-04-03T06:30:23Z","modified":"2025-04-03T06:30:29Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-356"],"updated_at":"2026-11-02T15:00:46.592062Z"}],"nvd":[{"id":"CVE-2025-31334","description":"Issue that bypasses the \"Mark of the Web\" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic link specially crafted by an attacker is opened on the affected product, arbitrary code may be executed.","status":"published","published":"2025-04-03T06:15:42.903Z","modified":"2026-06-17T09:10:15.343Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-356"],"updated_at":"2026-11-02T14:10:58.094557Z"}]}}