RARLAB WinRAR before 6.23 can execute arbitrary code when a user attempts to view a benign file in a crafted ZIP archive. The archive can contain a folder with the same name as the benign file, causing executable content inside that folder to be processed; the vulnerability was exploited in the wild from April through October 2023.

https://www.cve.org/CVERecord?id=CVE-2023-38831