WinRAR is a Free Windows program in the Compression & Archiving category, developed by win.rar GmbH. The current version is 7.23.0; you can download it safely from its official source with the download button above.
- WinRAR is a powerful compression tool with many integrated additional functions to help you organize your compressed archives.
- WinRAR puts you ahead of the crowd when it comes to compression. By consistently creating smaller archives, WinRAR is often faster than the competition. This will save you disk space, transmission costs AND valuable working time as well.
- WinRAR supports all popular compression formats (RAR, ZIP, CAB, ARJ, LZH, TAR, GZip, UUE, ISO, BZIP2, Z and 7-Zip).
- WinRAR is ideal for multimedia files. WinRAR automatically recognizes and selects the best compression method. The special compression algorithm compresses multimedia files, executables and object libraries particularly well.
- WinRAR allows you to split archives into separate volumes easily, making it possible to save them on several disks.
- WinRAR is also ideal if you are sending data through the web. Its AES 256-bit encryption and its authenticated signature technology will give you the peace of mind you have been looking for.
- WinRAR is a trial product, meaning you have the chance to thoroughly test it. The program can be used absolutely free of charge for 40 days!
- WinRAR licenses are valid for all available language and platform versions. If you have purchased several licenses, you can even mix versions to meet your own personal needs.
✨ Features
archivearchivercompresscompressiondecompressdecompressionextractextractorrarunarchiveunarchiverunzipzip
📝 Release notes (7.23.0)
1. Heap overflow vulnerability is fixed in RAR5 recovery volume
data reconstruction code. It affects WinRAR, RAR and UnRAR.
UnRAR.dll library doesn't include recovery volume processing,
so it is not affected.
We are thankful to Arjun Basnet from Securin Labs for letting us know
about this security issue.
2. Symbolic link pointing outside of destination folder could be created
even without -ola switch, when extracting a specially crafted
RAR archive by WinRAR, RAR, UnRAR or UnRAR.dll library.
Further check in extraction code prevents placing files to such folder
even in case of multiple extraction commands, excluding the possibility
of path traversal attack for WinRAR, RAR or UnRAR based extraction.
It limits the potential threat to a case where another tool uses this
symbolic link to store files.
We are thankful to scofaild23-bnomran for letting us know about this
security issue.
3. 7zxa.dll 7z extraction library is updated to version 26.02 to include
bug and vulnerability fixes by the library developer.
4. Switch -iver prints RAR version even if -idc is specified
in the command line, configuration file or RARINISWITCHES environment
variable. Previously -idc blocked -iver action.
Also a new line character is added to -iver output.
SHA-256: 8FF0DAF3ED564CC743C0E23FF2E253997FFC74460F9673F0B6DD037B2DB4CE7B
