Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2021-35052

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2021-35052.

Coverage Span: 2021-10-20
Reports: 1 related reports

Associated Reports & Timeline

WinRAR’s vulnerable trialware: when free software isn’t free

A chance find in WinRAR 5.70: its expired-trial notification window loads remote content through the legacy IE engine over HTTPS, so an attacker who can intercept traffic or spoof DNS can return a malicious redirect and achieve RCE. Tracked as CVE-2021-35052.