CVE-2026-14191 WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader
Information published.
EPSS 0.00 CVE-2026-14191 WinRAR UnRAR US
Information published.
EPSS 0.00 CVE-2026-14191 WinRAR UnRAR US
Two separate Russia-aligned campaigns are still exploiting the WinRAR flaw CVE-2025-8088 against Ukrainian organizations nearly a year after it was patched, showing how unmanaged software keeps an exploited entry point open long after the fix ships.
KEV ✓ EPSS 0.95 CVE-2025-8088 WinRAR veřejná správa JP