Body Background
TrendAI™ Zero Day Initiative™ Logo
About How It Works FAQs Blog Advisories
Sign Up Log In
ZDI Emblem
ZDI Emblem
About How It Works FAQs Blog Advisories
Sign Up Log In

Find us on

X Mastodon BlueSky LinkedIn

Latest Insights

CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

October 27, 2026
Bobby Gould

Read Full Article
CVE-2022-34715: More Microsoft Windows NFS v4 Remote Code Execution
September 06, 2022

CVE-2022-34715: More Microsoft Windows NFS v4 Remote Code Execution

  • Microsoft
  • NFS
  • Research
Looking at Patch Gap Vulnerabilities in the VMware ESXi TCP/IP Stack
July 27, 2022

Looking at Patch Gap Vulnerabilities in the VMware ESXi TCP/IP Stack

  • VMware
  • Research
  • Reverse Engineering
Riding the InfoRail to Exploit Ivanti Avalanche
July 19, 2022

Riding the InfoRail to Exploit Ivanti Avalanche

  • Ivanti
  • JNDI
  • Exploit
CVE-2022-30136: Microsoft Windows Network File System v4 Remote Code Execution Vulnerability
July 14, 2022

CVE-2022-30136: Microsoft Windows Network File System v4 Remote Code Execution Vulnerability

  • NFS
  • Microsoft
  • Research
CVE-2022-23088: Exploiting a Heap Overflow in the FreeBSD Wi-Fi Stack
June 16, 2022

CVE-2022-23088: Exploiting a Heap Overflow in the FreeBSD Wi-Fi Stack

  • FreeBSD
  • Kernel
  • Research
Is exploiting a null pointer deref for LPE just a pipe dream?
June 02, 2022

Is exploiting a null pointer deref for LPE just a pipe dream?

  • Bitdefender
  • Research
  • LPE
CVE-2022-26381: Gone by others! Triggering a UAF in Firefox
April 07, 2022

CVE-2022-26381: Gone by others! Triggering a UAF in Firefox

  • Firefox
  • Mozilla
  • Research
Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks
March 17, 2022

Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks

  • Windows
  • LPE
  • Research
  • Exploit
CVE-2021-44142: Details on a Samba Code Execution Bug Demonstrated at Pwn2Own Austin
February 01, 2022

CVE-2021-44142: Details on a Samba Code Execution Bug Demonstrated at Pwn2Own Austin

  • Samba
  • Pwn2Own
  • Netatalk
  • Research
CVE-2021-44790: Code Execution on Apache via an Integer Underflow
January 25, 2022

CVE-2021-44790: Code Execution on Apache via an Integer Underflow

  • Apache
  • Research
TrendAI™ Zero Day Initiative™ Logo

Find us on

X Mastodon BlueSky LinkedIn

©2026 TrendAI™ Zero Day Initiative™ (ZDI).
All rights reserved.

General inquiries zdi@trendmicro.com
Media inquiries media_relations@trendmicro.com
Sensitive email communications PGP key
Who We Are
  • Our Mission
  • TrendAI™
  • TrendAI Vision One™
How It Works
  • Process
  • Researcher Rewards
  • FAQs
  • Privacy
Advisories
  • Published Advisories
  • Upcoming Advisories
  • RSS Feeds
Blog