Update now: 7-Zip fixes RCE flaw exploitable with malicious archives
WinRAR exploit reportedly remains widely-used by China and Russia state actors despite patch — vulnerability allows malicious archives to deliver a hidden payload to Windows Startup folder