tag

Storm-0978

CVE-2025-8088 misc HIGH 8.4 KEV Ransomware EPSS 95%

WinRAR Windows Path Traversal via NTFS Alternate Data Streams (CVE-2025-8088)

CVE-2025-8088 is a path traversal vulnerability in the Windows version of WinRAR. A specially crafted RAR archive abuses NTFS Alternate Data Streams (ADS) combined with ..\ traversal sequences so that, when opened or extracted by a vulnerable WinRAR build,…

Patched 2026-07-01