Securityweek WinRAR Vulnerability CVE-2025-8088 Exploited by State Actors
Article Content
Browse articles 
Russian and Chinese state-sponsored threat actors have been exploiting a vulnerability in WinRAR, identified as CVE-2025-8088, since July 2025. Multiple cybercriminals are also taking advantage of this zero-day vulnerability, which has been widely reported in the cybersecurity community.
Ask AI about this cluster
Answers cite the sources they use
Updated 213d ago How this analysis works
More articles in this cluster (2)
Following this threat?
Track CVE-2025-8088 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Path Traversal Vulnerability in WinRAR Exploited by RomCom Group CVE-2025-8088 is a path traversal vulnerability in WinRAR versions up to 7.12, allowing attackers to exploit alternate data streams (ADSes) in RAR files to extract malicious payloads to sensitive system locations. Exploitation began in the wild on July 18, 2025, with attackers linked to the Russia-aligned RomCom… 
Critical Vulnerabilities in ClamAV Affecting Multiple File Parsers SUSE has issued important security advisories for ClamAV, addressing multiple denial of service vulnerabilities. The vulnerabilities, identified as CVE-2026-20213 through CVE-2026-20217 and CVE-2026-20337 through CVE-2026-20347, allow unauthenticated remote attackers to exploit flaws in various file format parsers…