CVE-2025-8088

LLM-synthesized narrative grounded in this CVE's description and references.

• dtSearch/dtSearch

  cpe:2.3:a:dtsearch:dtsearch:*:*:*:*:*:*:*:*

  Range: <2023.01
• Rarlab/Winrar

  cpe:2.3:a:rarlab:winrar:*:*:*:*:*:*:*:*

  Range: <7.13
• WinRAR/WinRARllm-fuzzy
• win.rar GmbH/WinRARv5

  Range: 0

• support.dtsearch.com/faq/dts0245.htmnvdThird Party Advisory
• www.vicarius.io/vsociety/posts/cve-2025-8088-detect-winrar-zero-daynvdThird Party Advisory
• www.vicarius.io/vsociety/posts/cve-2025-8088-mitigate-winrar-zero-day-using-srp-and-ifeonvdMitigationThird Party Advisory
• arstechnica.com/security/2025/08/high-severity-winrar-0-day-exploited-for-weeks-by-2-groups/nvdPress/Media Coverage
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
• www.welivesecurity.com/en/eset-research/update-winrar-tools-now-romcom-and-others-exploiting-zero-day-vulnerability/nvdPress/Media Coverage
• www.win-rar.com/singlenewsview.htmlnvdRelease Notes

• Top 10 Malware Used by Hackers Between July 20-26, 2026, to Launch Cyberattacks
  Cyber Security News · Jul 27, 2026
• Top 10 Malware Used by Hackers Last Week to Launch Cyberattacks
  Cyber Security News · Jul 21, 2026
• Update now: 7-Zip fixes RCE flaw exploitable with malicious archives
  BleepingComputer · Jul 18, 2026
• STOCKSTAY Backdoor Uses Malicious RDP Files and WinRAR Exploit to Target Ukraine
  Cyber Security News · Jul 7, 2026
• Russia-Linked Turla Uses Compromised Infrastructure to Deploy STOCKSTAY in Ukraine Operations
  Cyber Security News · Jun 29, 2026
• Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse
  The Hacker News · Jun 29, 2026
• Russian APT Deploys ‘StockStay’ Backdoor Against Ukrainian Targets
  SecurityWeek · Jun 26, 2026
• Google Details Turla's New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks
  The Hacker News · Jun 26, 2026
• Russia's Gamaredon Adapts Tactics to Target Ukraine
  GovInfoSecurity · Jun 25, 2026
• Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances
  ESET WeLiveSecurity · Jun 25, 2026
• The Latest Addition to Turla’s Intelligence Gathering Apparatus
  Mandiant Threat Intelligence · Jun 25, 2026
• GhostShell Malware Uses mTLS Implant and Telegram Dead-Drop to Target Ukrainian Drone Operations
  Cyber Security News · Jun 24, 2026
• 15th June – Threat Intelligence Report
  Check Point Research · Jun 15, 2026
• WinRAR Vulnerability Exploited by Russian Hackers to Deploy GIFTEDCROOK Stealer
  Cyber Security News · Jun 15, 2026
• Russian Attackers Weaponize WinRAR Flaw Against Ukrainian Orgs
  Dark Reading · Jun 9, 2026
• WinRAR Flaw Exploited by Russia-Aligned Groups to Deploy Stealers in Ukraine
  The Hacker News · Jun 9, 2026
• Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open
  Trend Micro Research · Jun 8, 2026
• Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine
  The Hacker News · Jun 2, 2026
• FSB Group Gamaredon Hides Worm in Windows Data Streams
  Infosecurity Magazine · Jun 1, 2026
• Russian Threat Groups Use RDP, VPN, Supply Chain Attacks, and Social Engineering for Initial Access
  Cyber Security News · May 22, 2026
• Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike
  The Hacker News · May 14, 2026
• Exploits and vulnerabilities in Q1 2026
  Securelist · May 7, 2026
• Ransomware Tactics, Techniques, and Procedures in a Shifting Threat Landscape
  Mandiant Threat Intelligence · Mar 16, 2026