CVE-2025-8088

EUVD-2025-23983
A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček
     from ESET.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 99.85%
Affected Products (NVD)
VendorProductVersion
rarlabwinrar
𝑥
< 7.13
dtsearchdtsearch
𝑥
< 2023.01
𝑥
= Vulnerable software versions
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
clamav
suse enterprise desktop 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise sap 12 SP5
1.5.4-3.59.1
fixed
suse enterprise sap 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise sap 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise server 12 SP3
1.4.6-36.28.1
fixed
suse enterprise server 12 SP5
1.5.4-3.59.1
fixed
suse enterprise server 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise server 15 SP7
1.5.4-150600.18.31.1
fixed
clamav-devel
suse enterprise desktop 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise sap 12 SP5
1.5.4-3.59.1
fixed
suse enterprise sap 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise sap 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise server 12 SP3
1.4.6-36.28.1
fixed
suse enterprise server 12 SP5
1.5.4-3.59.1
fixed
suse enterprise server 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise server 15 SP7
1.5.4-150600.18.31.1
fixed
clamav-docs-html
suse enterprise desktop 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise sap 12 SP5
1.5.4-3.59.1
fixed
suse enterprise sap 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise sap 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise server 12 SP3
1.4.6-36.28.1
fixed
suse enterprise server 12 SP5
1.5.4-3.59.1
fixed
suse enterprise server 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise server 15 SP7
1.5.4-150600.18.31.1
fixed
clamav-milter
suse enterprise desktop 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise sap 12 SP5
1.5.4-3.59.1
fixed
suse enterprise sap 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise sap 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise server 12 SP3
1.4.6-36.28.1
fixed
suse enterprise server 12 SP5
1.5.4-3.59.1
fixed
suse enterprise server 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise server 15 SP7
1.5.4-150600.18.31.1
fixed
libclamav12
suse enterprise desktop 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise sap 12 SP5
1.5.4-3.59.1
fixed
suse enterprise sap 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise sap 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise server 12 SP3
1.4.6-36.28.1
fixed
suse enterprise server 12 SP5
1.5.4-3.59.1
fixed
suse enterprise server 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise server 15 SP7
1.5.4-150600.18.31.1
fixed
libclammspack0
suse enterprise desktop 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise sap 12 SP5
1.5.4-3.59.1
fixed
suse enterprise sap 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise sap 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise server 12 SP3
1.4.6-36.28.1
fixed
suse enterprise server 12 SP5
1.5.4-3.59.1
fixed
suse enterprise server 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise server 15 SP7
1.5.4-150600.18.31.1
fixed
libclamunrar12
suse enterprise desktop 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise sap 12 SP5
1.5.4-3.59.1
fixed
suse enterprise sap 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise sap 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise server 12 SP3
1.4.6-36.28.1
fixed
suse enterprise server 12 SP5
1.5.4-3.59.1
fixed
suse enterprise server 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise server 15 SP7
1.5.4-150600.18.31.1
fixed
libfreshclam3
suse enterprise server 12 SP3
1.4.6-36.28.1
fixed
libfreshclam4
suse enterprise desktop 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise sap 12 SP5
1.5.4-3.59.1
fixed
suse enterprise sap 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise sap 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise server 12 SP5
1.5.4-3.59.1
fixed
suse enterprise server 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise server 15 SP7
1.5.4-150600.18.31.1
fixed
Common Weakness Enumeration
References
https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5
https://arstechnica.com/security/2025/08/high-severity-winrar-0-day-exploited-for-weeks-by-2-groups/
https://support.dtsearch.com/faq/dts0245.htm
https://www.vicarius.io/vsociety/posts/cve-2025-8088-detect-winrar-zero-day
https://www.vicarius.io/vsociety/posts/cve-2025-8088-mitigate-winrar-zero-day-using-srp-and-ifeo
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-8088
https://www.welivesecurity.com/en/eset-research/update-winrar-tools-now-romcom-and-others-exploiting-zero-day-vulnerability/#the-discovery-of-cve-2025-8088