Body Background
TrendAI™ Zero Day Initiative™ Logo
About How It Works FAQs Blog Advisories
Sign Up Log In
ZDI Emblem
ZDI Emblem
About How It Works FAQs Blog Advisories
Sign Up Log In

Find us on

X Mastodon BlueSky LinkedIn

Latest Insights

The June 2026 Security Update Review

June 09, 2026
Dustin Childs

Read Full Article
Exploiting Exchange PowerShell After ProxyNotShell: Part 4 – No Argument Constructor
September 26, 2024

Exploiting Exchange PowerShell After ProxyNotShell: Part 4 – No Argument Constructor

  • Microsoft
  • Exchange
  • Research
Exploiting Exchange PowerShell After ProxyNotShell: Part 3 – DLL Loading Chain for RCE
September 19, 2024

Exploiting Exchange PowerShell After ProxyNotShell: Part 3 – DLL Loading Chain for RCE

  • Exchange
  • Microsoft
  • Research
Exploiting Exchange PowerShell After ProxyNotShell: Part 2 - ApprovedApplicationCollection
September 12, 2024

Exploiting Exchange PowerShell After ProxyNotShell: Part 2 - ApprovedApplicationCollection

  • Microsoft
  • Exchange
  • Research
Exploiting Exchange PowerShell After ProxyNotShell: Part 1 - MultiValuedProperty
September 05, 2024

Exploiting Exchange PowerShell After ProxyNotShell: Part 1 - MultiValuedProperty

  • Exchange
  • Research
  • Microsoft
Unpatched Powerful SSRF in Exchange OWA – Getting Response Through Attachments
November 02, 2023

Unpatched Powerful SSRF in Exchange OWA – Getting Response Through Attachments

  • Microsoft
  • Exchange
  • 0-day
Control Your Types or Get Pwned: Remote Code Execution in Exchange PowerShell Backend
November 16, 2022

Control Your Types or Get Pwned: Remote Code Execution in Exchange PowerShell Backend

  • Exchange
  • Microsoft
  • 0-day
The Top 5 Bugs Submitted in 2021
January 06, 2022

The Top 5 Bugs Submitted in 2021

  • Top 5
  • Microsoft
  • Linux
  • Exchange
  • Safari
ProxyToken: An Authentication Bypass in Microsoft Exchange Server
August 30, 2021

ProxyToken: An Authentication Bypass in Microsoft Exchange Server

  • Microsoft
  • Exchange
  • Exploit
From Pwn2Own 2021: A New Attack Surface on Microsoft Exchange - ProxyShell!
August 18, 2021

From Pwn2Own 2021: A New Attack Surface on Microsoft Exchange - ProxyShell!

  • Exchange
  • Pwn2Own
  • Research
CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys
February 25, 2020

CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys

  • Microsoft
  • Exchange
  • Exploit
TrendAI™ Zero Day Initiative™ Logo

Find us on

X Mastodon BlueSky LinkedIn

©2026 TrendAI™ Zero Day Initiative™ (ZDI).
All rights reserved.

General inquiries zdi@trendmicro.com
Media inquiries media_relations@trendmicro.com
Sensitive email communications PGP key
Who We Are
  • Our Mission
  • TrendAI
  • TrendAI Vision One™
How It Works
  • Process
  • Researcher Rewards
  • FAQs
  • Privacy
Advisories
  • Published Advisories
  • Upcoming Advisories
  • RSS Feeds
Blog