bleepingcomputer[.]com/news/security/google-links-winrar-exploitation-to-russian-chinese-state-hackers/
windowscentral[.]com/software-apps/winrar-has-a-major-security-bug-and-you-have-to-install-its-fix-manually
Patches have been available, but not everyone with WinRAR installed is aware of them &/or the need to install those fixes ASAP. The flaw is continuing to be actively exploited.