APT33 · weakness class

File and Path Handling

1 CVE · 1 in CISA KEV

Every dot is a CVE a source says this actor exploits; each name says which source. The named ones are the most at risk.

Connect AI

Open APT33's actor page

exploited in the wild: 1

Every one of the 1 is a mark on the map. Named now: 1 to 1, most at risk first.

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field…CVE-2018-20250Check Point Software Technologies Ltd. · CVSS 7.8 · 96% likely · ATT&CK T1203
CWE-36 Check Point

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: MITRE ATT&CK (© The MITRE Corporation, reproduced and distributed with its permission), the MISP Galaxy (CC0), and CyberSIXT's own coverage.