WinRAR7.23.0
Compress, Encrypt, Package and Backup with only one utility.
v7.23.0
3.6 MB
This title isn't mirrored on MirrorNest — see how we source software for why. The button above goes straight to the official publisher.
Verify your download
Select the file you downloaded to check it against the hash we published — the check runs in your browser, nothing is uploaded.
About
WinRAR compresses files into archives, extracts their contents, and combines packaging with backup work in one Windows utility. It opens RAR and ZIP archives as well as many other formats, giving users one place to manage files kept or transferred together. Large archive collections can be divided into multiple volumes that remain parts of the same archive, making storage or transfer in separate pieces practical.
AES 256-bit encryption protects confidential archive data, while authenticated signatures help verify archive contents, including material sent over the web. WinRAR supports efficient email transmission and organized data storage for personal backups, business archives, and file transfers across many industries. It handles Unicode, is available in more than 40 languages, and is described as the only compression software with Unicode support.
Published by win.rar GmbH, WinRAR 7.23.0 is a System Tools program for Windows on x64 architecture and uses a demo trial license. It suits people who need to compress, encrypt, preserve, or distribute structured collections, from personal files to business records.
The current release fixes a heap-overflow vulnerability in RAR5 recovery-volume reconstruction code affecting WinRAR, RAR, and UnRAR; UnRAR.dll is unaffected because it does not process recovery volumes. It also blocks specially crafted RAR archives from placing files through symbolic links outside the destination during repeated extraction commands, closing that path-traversal route for WinRAR-, RAR-, and UnRAR-based extraction while leaving a potential risk only when another tool uses such a link to store files.
Architecture: x64
What's new in v7.23.0
1. Heap overflow vulnerability is fixed in RAR5 recovery volume data reconstruction code. It affects WinRAR, RAR and UnRAR. UnRAR.dll library doesn't include recovery volume processing, so it is not affected.
We are thankful to Arjun Basnet from Securin Labs for letting us know about this security issue.
2. Symbolic link pointing outside of destination folder could be created even without -ola switch, when extracting a specially crafted RAR archive by WinRAR, RAR, UnRAR or UnRAR.dll library.
Further check in extraction code prevents placing files to such folder even in case of multiple extraction commands, excluding the possibility of path traversal attack for WinRAR, RAR or UnRAR based extraction. It limits the potential threat to a case where another tool uses this symbolic link to store files.
We are thankful to scofaild23-bnomran for letting us know about this security issue.
3. 7zxa.dll 7z extraction library is updated to version 26.02 to include bug and vulnerability fixes by the library developer.
4. Switch -iver prints RAR version even if -idc is specified in the command line, configuration file or RARINISWITCHES environment variable. Previously -idc blocked -iver action.
Also a new line character is added to -iver output.
Details
SHA-256
Does this still work for you?
Reviews
No reviews yet — be the first.
WinRAR alternatives
dotMemory Unit Standalone Launcher
Effective memory usage in .NET applications with dotMemory Unit
GamebarHandler
Gets rid of those pesky 'open ms-gamebar' and 'open ms-gamingoverlay' popups.
ShareX
ShareX is a free and open-source application that enables users to capture or record any area of their screen with a single keystroke. It also supports uploading images, text, and various file types to a wide range of destinations.
cerebro-es (Install)
elasticsearch web admin tool
CPUID CPU-Z
System information software
Vantage
Vantage