CVE-2024-8811

Summary

CVE-2024-8811 is a newly disclosed vulnerability affecting WinZip software. This issue permits remote attackers to bypass the Mark-of-the-Web (MotW) protection mechanism. The exploitation requires users to visit a malicious webpage or open a maliciously crafted file. WinZip incorrectly removes the MotW from archive files during the extraction process, allowing attackers to execute arbitrary code in the context of the current user. This vulnerability, identified as ZDI-CAN-23983, poses a significant risk and demands immediate attention from WinZip users.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.