WinRAR has a major security bug, and you have to install its fix manually

[Windows Central]

A vulnerability in WinRAR allows attackers to execute arbitrary code when you open zipped files. A fix is already available, but you have to install it manually as WinRAR does not update automatically.

WinRAR has a major security bug, and you have to install its fix manually : Read more