U.S. CISA adds Microsoft Windows and WinRAR flaws to its Known Exploited Vulnerabilities catalog

According to the U.S. Cybersecurity and Infrastructure Security Agency (CISA), Microsoft Windows and WinRAR flaws have been added to the Known Exploited Vulnerabilities catalog. The entries include CVE-2025-6218, a WinRAR path traversal vulnerability with a CVSS score of 7.8, and CVE-2025-62221, a Microsoft Windows use-after-free vulnerability with a CVSS score of 7.8.

The WinRAR flaw is described as allowing remote code execution by tricking a user into opening a malicious archive or webpage, with crafted file paths inside the archive enabling the attacker to write files outside intended directories and execute code in the user’s context; the advisory notes that user interaction is required to exploit it.

The Windows use-after-free flaw in the Cloud Files Mini Filter Driver could let an authorised attacker elevate privileges locally, with the advisory stating that an attacker could gain SYSTEM privileges. The article notes that federal agencies must address these vulnerabilities by the due date set out in DHS regulations, with CISA ordering agencies to fix by 30 December 2025.