CVE-2025-8088 is a high-severity path traversal flaw in WinRAR for Windows. Exploited as a zero-day by Russian APT groups RomCom and Paper Werewolf.
Critical Ivanti VPN buffer overflow (CVE-2025-22457) exploited by UNC5221 for RCE.