8.4Yüksek KEV Fidye yazılımında kullanılıyor

CVE-2025-8088Path traversal vulnerability in WinRAR

win.rar GmbH WinRAR Yayım: 2025-08-08 14:11 (1 yıl önce)

Aktif olarak istismar ediliyor — RARLAB WinRAR Path Traversal Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 12.08.2025 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 02.09.2025.

Gerekli işlem: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5 ; https://nvd.nist.gov/vuln/detail/CVE-2025-8088

Açıklama

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.

Zayıflık türü (CWE): CWE-35

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
dtsearch	dtsearch	< 2023.01
rarlab	winrar	< 7.13
win.rar GmbH	WinRAR	≤ 7.12

Kaynaklar ve yamalar

https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5 Release Notes
https://arstechnica.com/security/2025/08/high-severity-winrar-0-day-exploited-for-weeks-by-2-groups/ Press/Media Coverage
https://support.dtsearch.com/faq/dts0245.htm Third Party Advisory
https://www.vicarius.io/vsociety/posts/cve-2025-8088-detect-winrar-zero-day Third Party Advisory
https://www.vicarius.io/vsociety/posts/cve-2025-8088-mitigate-winrar-zero-day-using-srp-and-ifeo MitigationThird Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-8088 US Government Resource
https://www.welivesecurity.com/en/eset-research/update-winrar-tools-now-romcom-and-others-exploiting-zero-day… Press/Media Coverage

CPE eşleşmeleri (NVD) (2)

cpe:2.3:a:rarlab:winrar:*:*:*:*:*:*:*:* < 7.13
cpe:2.3:a:dtsearch:dtsearch:*:*:*:*:*:*:*:* < 2023.01

CVSS puanı

8.4Yüksek

Kaynak: ESET · CVSS 4.0

Saldırı yolu: Yerel
Karmaşıklık: Düşük
Ön koşul: Yok
Gereken yetki: Yok
Kullanıcı etkileşimi: Aktif
Gizlilik: Yüksek
Bütünlük: Yüksek
Erişilebilirlik: Yüksek

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tüm puanlar (3)

cna	CVSS 4.0	8.4Yüksek
security@eset.com	CVSS 4.0	8.4Yüksek
nvd	CVSS 3.1	8.8Yüksek

EPSS (30 günde istismar olasılığı)

94.01%

tüm CVE'lerin %100'inden yüksek

CISA değerlendirmesi (SSVC)

İstismar: active
Otomatikleştirilebilir: no
Teknik etki: total

Zaman çizelgesi

Numara ayrıldı2025-07-23
Yayımlandı2025-08-08 14:11
IP-DB'ye ulaştı2026-10-24 23:30
KEV'e eklendi2025-08-12
Son güncelleme2026-08-11 07:17

Numarayı veren (CNA): ESET
NVD durumu: Analyzed

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — WinRAR

7.8Yüksek

CVE-2026-14191 4 ay önce

WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader

RARLAB WinRAR; RARLAB RAR; RARLAB UnRAR; RARLAB UnRAR.dll

An out-of-bounds heap write exists in the RAR5 recovery-volume (.rev) parser in WinRAR and UnRAR (RecVolumes5::ReadHeader in recvol5.cpp). The RecItems vector is sized only when the first .rev file in a set is processed; subsequent .rev files supply an indepe…

6.2Orta

CVE-2019-25677 7 ay önce

WinRAR 5.61 Denial of Service via Malformed Language File

Win-Rar WinRAR

WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the t…

6.1Orta

CVE-2025-52331 11 ay önce

rarlab winrar

Cross-site scripting (XSS) vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes …

8.4Yüksek

CVE-2014-125119 1 yıl önce

WinRAR < 5.00 Filename Spoofing RCE

RARLab WinRAR

A filename spoofing vulnerability exists in WinRAR when opening specially crafted ZIP archives. The issue arises due to inconsistencies between the Central Directory and Local File Header entries in ZIP files. When viewed in WinRAR, the file name from the Cen…

2.0%EPSS

7.8Yüksek

CVE-2025-6218 KEV 1 yıl önce

RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability

RARLAB WinRAR

RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the targ…

90%EPSS

6.8Orta

CVE-2025-31334 1 yıl önce

RARLAB WinRAR

Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic link specially crafted by an attacker is opened on the affected…

1.3%EPSS