Update KEV: Wed Aug 13 00:13:37 UTC 2025

Signed-off-by: AboutCode Automation <[email protected]>

Author: aboutcode-automation

known_exploited_vulnerabilities.json

@@ -1,9 +1,52 @@
 {
     "title": "CISA Catalog of Known Exploited Vulnerabilities",
-    "catalogVersion": "2025.08.05",
-    "dateReleased": "2025-08-05T18:03:16.7522Z",
-    "count": 1394,
+    "catalogVersion": "2025.08.12",
+    "dateReleased": "2025-08-12T17:01:51.5879Z",
+    "count": 1397,
     "vulnerabilities": [
+        {
+            "cveID": "CVE-2025-8088",
+            "vendorProject": "RARLAB",
+            "product": "WinRAR",
+            "vulnerabilityName": "RARLAB WinRAR Path Traversal Vulnerability",
+            "dateAdded": "2025-08-12",
+            "shortDescription": "RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.",
+            "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
+            "dueDate": "2025-09-02",
+            "knownRansomwareCampaignUse": "Unknown",
+            "notes": "https:\/\/www.win-rar.com\/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5 ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-8088",
+            "cwes": [
+                "CWE-35"
+            ]
+        },
+        {
+            "cveID": "CVE-2007-0671",
+            "vendorProject": "Microsoft",
+            "product": "Office",
+            "vulnerabilityName": "Microsoft Office Excel Remote Code Execution Vulnerability",
+            "dateAdded": "2025-08-12",
+            "shortDescription": "Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.",
+            "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
+            "dueDate": "2025-09-02",
+            "knownRansomwareCampaignUse": "Unknown",
+            "notes": "https:\/\/learn.microsoft.com\/en-us\/security-updates\/securitybulletins\/2007\/ms07-015 ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2007-0671",
+            "cwes": []
+        },
+        {
+            "cveID": "CVE-2013-3893",
+            "vendorProject": "Microsoft",
+            "product": "Internet Explorer",
+            "vulnerabilityName": "Microsoft Internet Explorer Resource Management Errors Vulnerability",
+            "dateAdded": "2025-08-12",
+            "shortDescription": "Microsoft Internet Explorer contains a memory corruption vulnerability that allows for remote code execution. The impacted products could be end-of-life (EoL) and\/or end-of-service (EoS). Users should discontinue product utilization.",
+            "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
+            "dueDate": "2025-09-02",
+            "knownRansomwareCampaignUse": "Unknown",
+            "notes": "https:\/\/learn.microsoft.com\/en-us\/security-updates\/securitybulletins\/2013\/ms13-080 ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2013-3893",
+            "cwes": [
+                "CWE-399"
+            ]
+        },
         {
             "cveID": "CVE-2020-25078",
             "vendorProject": "D-Link",