Loading HuntDB...

CVE-2025-8088

UNKNOWN
Published 2025-08-08T11:11:41.842Z
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2025-8088. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček
from ESET.

Available Exploits

No exploits available for this CVE.

Related News

Week in review: 2 threat actors exploiting WinRAR 0-day, Microsoft fixes “BadSuccessor” Kerberos flaw

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: WinRAR zero-day was exploited by two threat actors (CVE-2025-8088) The RomCom attackers aren’t the only ones that have been leveraging the newly unveiled WinRAR …

Help Net Security 2025-08-17 08:00
GreenboneOS: New WinRAR Flaw CVE-2025-8088 Exploited in Social Engineering Attacks

CVE-2025-8088 (CVSS 8.4) is a new high-risk path traversal vulnerability [CWE-35] in WinRAR versions 7.12 and below and related components including UnRAR.dll. The flaw allows unauthorized attackers to copy malicious files into sensitive directories, includin…

Greenbone.net 2025-08-15 09:50
New WinRAR zero-day PC vulnerability exploited by hackers — What you need to know

A concerning zero-day vulnerability in WinRAR (CVE-2025-8088) allows hackers to hijack your PC. Users are advised to update to version 7.13 immediately.

Windows Central 2025-08-12 18:53
WinRAR zero-day was exploited by two threat actors (CVE-2025-8088)

The RomCom attackers aren’t the only ones that have been leveraging the newly unveiled WinRAR vulnerability (CVE-2025-8088) in zero-day attacks: according to Russian cybersecurity company BI.ZONE, a group tracked as Paper Werewolf has been using it to target …

Help Net Security 2025-08-12 12:38
Details emerge on WinRAR zero-day attacks that infected PCs with malware

Researchers have released a report detailing how a recent WinRAR path traversal vulnerability tracked as CVE-2025-8088 was exploited in zero-day attacks by the Russian 'RomCom' hacking group to drop different malware payloads. [...]

BleepingComputer 2025-08-11 18:05

Affected Products

Affected Versions:

Known Exploited Vulnerability

This vulnerability is actively being exploited in the wild

View KEV Details

Remediation Status

Due Soon

Due Date

September 2, 2025 (10 days remaining)

Added to KEV

August 12, 2025

Required Action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Affected Product

Vendor/Project: RARLAB
Product: WinRAR

Ransomware Risk

Known Ransomware Use
KEV Catalog Version: 2025.08.12 Released: August 12, 2025

EU Vulnerability Database

Monitored by ENISA for EU cybersecurity

EU Coordination

EU Coordinated

Exploitation Status

No Known Exploitation

ENISA Analysis

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček
from ESET.

Affected Products (ENISA)

win.rar gmbh
winrar

ENISA Scoring

CVSS Score (4.0)

8.4
/10
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS Score

6.110
probability

Data provided by ENISA EU Vulnerability Database. Last updated: August 21, 2025

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed HIGH

GHSA-832g-3rcm-wcrf

Advisory Details

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.

CVSS Scoring

CVSS Score

7.5

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Advisory provided by GitHub Security Advisory Database. Published: August 8, 2025, Modified: August 21, 2025

Social Media Intelligence

Real-time discussions and threat intelligence from social platforms

17 posts
Reddit 3 days, 21 hours ago
Safihre

Release Notes - SABnzbd 4.5.3 Release Candidate 1 ## https://sabnzbd.org/downloads ## Bug fixes and changes in 4.5.3 * Remember if `Permanently delete` was previously checked. * All available IP-addresses will be included when selecting the fastest. * Pre-queue script rejected NZBs were sometimes reported as `URL Fetching failed`. * RSS …

Reddit 5 days, 2 hours ago
crstux
Exploit

🔥 Top 10 Trending CVEs (18/08/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2025-8091](https://nvd.nist.gov/vuln/detail/CVE-2025-8091)** - 📝 The EventON Lite plugin for WordPress is vulnerable to Information Exposure in all versions less than, or equal to, 2.4.6 via the add_single_eventon and add_eventon shortcodes due to …

2
2.0
View Original High Risk
Reddit 6 days, 2 hours ago
crstux
Exploit

🔥 Top 10 Trending CVEs (17/08/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2025-26633](https://nvd.nist.gov/vuln/detail/CVE-2025-26633)** - 📝 Microsoft Management Console Security Feature Bypass Vulnerability - 📅 **Published:** 11/03/2025 - 📈 **CVSS:** 7 - 🧭 **Vector:** CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C - 📣 **Mentions:** 61 - ⚠️ **Priority:** 2 - …

1
1.0
View Original High Risk
Reddit 1 week ago
crstux
Exploit

🔥 Top 10 Trending CVEs (16/08/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2023-44487](https://nvd.nist.gov/vuln/detail/CVE-2023-44487)** - 📝 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October …

2
2.0
View Original High Risk
Reddit 1 week ago
k12techpro
Exploit PoC

Security Watch 8/15/25 On K12TechPro, we've launched a weekly cyber threat intelligence and vulnerability newsletter with NTP and K12TechPro. We'll post the "public" news to k12sysadmin from each newsletter. For the full "k12 techs only" portion (no middle schoolers, bad guys, vendors, etc. allowed), log into [k12techpro.com](http://k12techpro.com) and visit the …

Also mentions: CVE-2025-53786
3
3.0
View Original High Risk
Reddit 1 week ago
caramel_member
Exploit Payload

Week 33 | Cybersecurity - technology - privacy News recap * Cybercriminals are now making use of TikTok Shops to spread malware and steal funds from unsuspecting young users of the platform. The campaign, revealed by security experts at CTM360, mimics the profile of legitimate ecommerce sellers to build its …

2
2.0
View Original High Risk
Reddit 1 week, 1 day ago
crstux
Exploit

🔥 Top 10 Trending CVEs (15/08/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2025-50167](https://nvd.nist.gov/vuln/detail/CVE-2025-50167)** - 📝 Windows Hyper-V Elevation of Privilege Vulnerability - 📅 **Published:** 12/08/2025 - 📈 **CVSS:** 7 - 🧭 **Vector:** CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C - 📣 **Mentions:** 2 - ⚠️ **Priority:** 2 - 📝 …

1
1.0
View Original High Risk
Reddit 1 week, 2 days ago
crstux
Exploit

🔥 Top 10 Trending CVEs (14/08/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2025-53773](https://nvd.nist.gov/vuln/detail/CVE-2025-53773)** - 📝 GitHub Copilot and Visual Studio Remote Code Execution Vulnerability - 📅 **Published:** 12/08/2025 - 📈 **CVSS:** 7.8 - 🧭 **Vector:** CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C - 📣 **Mentions:** 10 - ⚠️ **Priority:** …

1
1.0
View Original High Risk
Reddit 1 week, 2 days ago
kkingfisherr
Exploit

A new WinRAR zero-day \(CVE-2025-8088\) was exploited by cybercrime groups. Update your WinRAR to version 7.13+ immediately to stay safe!

1
1.0
View Original High Risk
Reddit 1 week, 2 days ago
kkingfisherr

WinRAR kullanıcıları dikkat! Kötü amaçlı bir açık \(CVE-2025-8088\) siber suçlular tarafından kullanılıyor. En kısa sürede WinRAR'ı güncelleyin! Bilgisayarınız risk altında olabilir.

References

Published: 2025-08-08T11:11:41.842Z
Last Modified: 2025-08-21T03:30:50.515Z
Copied to clipboard!