WinRAR doesn't have an auto-update function, meaning PCs are vulnerable until you manually update. The bug is still being ...
Or reading the warnings, apparently.
Anyone who has WinRAR on their computer should ensure they install the latest version. Google warns of active attacks.