Body Background
TrendAI™ Zero Day Initiative™ Logo
About How It Works FAQs Blog Advisories
Sign Up Log In
ZDI Emblem
ZDI Emblem
About How It Works FAQs Blog Advisories
Sign Up Log In

Find us on

X Mastodon BlueSky LinkedIn

Latest Insights

CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

October 27, 2026
Bobby Gould

Read Full Article
CVE-2023-24941: Microsoft Network File System Remote Code Execution
June 01, 2023

CVE-2023-24941: Microsoft Network File System Remote Code Execution

  • Microsoft
  • NFS
  • Research
Exploiting the Sonos One Speaker Three Different Ways: A Pwn2Own Toronto Highlight
May 25, 2023

Exploiting the Sonos One Speaker Three Different Ways: A Pwn2Own Toronto Highlight

  • Sonos
  • Pwn2Own
  • Research
  • Exploit
CVE-2023-28231: RCE in the Microsoft Windows DHCPv6 Service
May 02, 2023

CVE-2023-28231: RCE in the Microsoft Windows DHCPv6 Service

  • Microsoft
  • DHCP
  • Research
CVE-2022-29844: A Classic Buffer Overflow on the Western Digital My Cloud Pro Series PR4100
April 20, 2023

CVE-2022-29844: A Classic Buffer Overflow on the Western Digital My Cloud Pro Series PR4100

  • Western Digital
  • Pwn2Own
  • Research
Bash Privileged-Mode Vulnerabilities in Parallels Desktop and CDPATH Handling in MacOS
April 06, 2023

Bash Privileged-Mode Vulnerabilities in Parallels Desktop and CDPATH Handling in MacOS

  • Parallels
  • Research
  • Bash
Pwn2Own Vancouver 2023 - Day Two Results
March 23, 2023

Pwn2Own Vancouver 2023 - Day Two Results

  • Pwn2Own
  • Oracle
  • Tesla
  • Microsoft
Pwn2Own Vancouver 2023 - Day One Results
March 22, 2023

Pwn2Own Vancouver 2023 - Day One Results

  • Pwn2Own
  • Tesla
  • Microsoft
  • Apple
  • Oracle
Pwn2Own Vancouver 2023 - The Full Schedule
March 21, 2023

Pwn2Own Vancouver 2023 - The Full Schedule

  • Pwn2Own
  • Tesla
  • Microsoft
  • Adobe
  • Apple
  • Linux
CVE-2022-38108: RCE in SolarWinds Network Performance Monitor
February 28, 2023

CVE-2022-38108: RCE in SolarWinds Network Performance Monitor

  • SolarWinds
  • Research
  • Detection Guidance
Activation Context Cache Poisoning: Exploiting CSRSS for Privilege Escalation
January 23, 2023

Activation Context Cache Poisoning: Exploiting CSRSS for Privilege Escalation

  • Microsoft
  • Research
  • CSRSS
TrendAI™ Zero Day Initiative™ Logo

Find us on

X Mastodon BlueSky LinkedIn

©2026 TrendAI™ Zero Day Initiative™ (ZDI).
All rights reserved.

General inquiries zdi@trendmicro.com
Media inquiries media_relations@trendmicro.com
Sensitive email communications PGP key
Who We Are
  • Our Mission
  • TrendAI™
  • TrendAI Vision One™
How It Works
  • Process
  • Researcher Rewards
  • FAQs
  • Privacy
Advisories
  • Published Advisories
  • Upcoming Advisories
  • RSS Feeds
Blog