CVE-2015-5663
No fix known EPSS <1%
The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extensionless filename that was selected by the user.
Products: rarlab winrar