CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-08-08
WinRAR Windows Path Traversal Remote Code Execution Vulnerability (CVE-2025-8088) Urgent Security Advisory
[Affected Scope] WinRAR for Windows (versions prior to 7.02)
[Impact] Attackers can execute arbitrary code (RCE) by tricking users into extracting a specially crafted malicious archive file, which drops payloads into arbitrary system directories
[Mitigation] Immediately upgrade WinRAR to the latest secure version (7.02 or higher) and avoid extracting archives from untrusted sources