CVE-2025-8088

Vulnerability updated a month ago (2025-08-09T09:36:38.536Z)

Download STIX

Preview STIX

Not enough context has been learned about CVE-2025-8088 for a description yet. However we're tracking it as a Vulnerability profile. Vulnerability: A flaw in software design or implementation

Description last updated:

What's your take? (Question 1 of 3)

Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.

Aliases We are not currently tracking any aliases

Miscellaneous Associations

Other elements of context that could aid in the identification of relevance

WinRAR

Vulnerability

Analyst Notes & Discussion

Be the first to leave your mark here! Log in to share your views and vote.

Associated Malware

To see the evidence that has resulted in these malware associations, create a free account

Alias Description	Association Type	Votes
The RomCom Malware is associated with CVE-2025-8088. RomCom, a malicious software, has been identified as a significant cyber threat. Reports from third-party and open-source intelligence since spring 2022 have indicated a connection between RomCom Remote Access Trojan (RAT) actors, Cuba ransomware actors, and Industrial Spy ransomware actors. The mal	Unspecified	3

Associated Vulnerabilities

To see the evidence that has resulted in these vulnerability associations, create a free account

Alias Description	Association Type	Votes
The vulnerability Path Traversal Flaw is associated with CVE-2025-8088.	Unspecified	2

Source Document References

Information about the CVE-2025-8088 Vulnerability was read from the documents corpus below. This display is limited to 20 results, create a free account to see more

Source Link	CreatedAt	Title
Recorded Future	3 days ago	August 2025 CVE Landscape
Securityaffairs	a month ago	U.S. CISA adds Microsoft Internet Explorer, Microsoft Office Excel, and WinRAR flaws to its Known Exploited Vulnerabilities catalog
CISA	a month ago	CISA Adds Three Known Exploited Vulnerabilities to Catalog \| CISA
Malwarebytes	a month ago	WinRAR vulnerability exploited by two different groups
ESET	a month ago	Update WinRAR tools now: RomCom and others exploiting zero-day vulnerability
ESET	a month ago	WinRAR zero-day exploited in espionage attacks against high-value targets
InfoSecurity-magazine	a month ago	New WinRAR Zero-Day Exploited by RomCom Hackers
Securityaffairs	a month ago	Security Affairs newsletter Round 536 by Pierluigi Paganini – INTERNATIONAL EDITION
Securityaffairs	a month ago	Phishing attacks exploit WinRAR flaw CVE-2025-8088 to install RomCom