<![CDATA[ZDI: Published Advisories]]> http://www.zerodayinitiative.com/advisories/published/ Sat, 05 Sep 2026 03:25:25 -0500 Trend Micro, all rights reserved en <![CDATA[ZDI-26-615: (0Day) pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability]]> ZDI-CAN-29536 http://www.zerodayinitiative.com/advisories/ZDI-26-615/ Mon, 31 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-614: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability]]> ZDI-CAN-29219 http://www.zerodayinitiative.com/advisories/ZDI-26-614/ Mon, 31 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-613: (0Day) pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability]]> ZDI-CAN-28916 http://www.zerodayinitiative.com/advisories/ZDI-26-613/ Mon, 31 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-612: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability]]> ZDI-CAN-28673 http://www.zerodayinitiative.com/advisories/ZDI-26-612/ Mon, 31 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-611: (0Day) pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability]]> ZDI-CAN-28570 http://www.zerodayinitiative.com/advisories/ZDI-26-611/ Mon, 31 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-610: Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-32069 http://www.zerodayinitiative.com/advisories/ZDI-26-610/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-609: Linux Kernel Net Scheduler Packet Classifier Use-After-Free Local Privilege Escalation Vulnerability]]> ZDI-CAN-31524 http://www.zerodayinitiative.com/advisories/ZDI-26-609/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-608: Linux Kernel KVM IOAPIC Use-After-Free Local Privilege Escalation Vulnerability]]> ZDI-CAN-31468 http://www.zerodayinitiative.com/advisories/ZDI-26-608/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-607: Microsoft Office HTML Injection Information Disclosure Vulnerability]]> ZDI-CAN-29320 http://www.zerodayinitiative.com/advisories/ZDI-26-607/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-606: Microsoft Windows Compatibility Appraiser Link Following Local Privilege Escalation Vulnerability]]> ZDI-CAN-28205 http://www.zerodayinitiative.com/advisories/ZDI-26-606/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-605: Microsoft Windows Localized Filenames Improper Input Validation NTLM Response Information Disclosure Vulnerability]]> ZDI-CAN-29223 http://www.zerodayinitiative.com/advisories/ZDI-26-605/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-604: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-30246 http://www.zerodayinitiative.com/advisories/ZDI-26-604/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-603: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-30248 http://www.zerodayinitiative.com/advisories/ZDI-26-603/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-602: Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-30270 http://www.zerodayinitiative.com/advisories/ZDI-26-602/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-601: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability]]> ZDI-CAN-30310 http://www.zerodayinitiative.com/advisories/ZDI-26-601/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-600: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability]]> ZDI-CAN-30311 http://www.zerodayinitiative.com/advisories/ZDI-26-600/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-599: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability]]> ZDI-CAN-30312 http://www.zerodayinitiative.com/advisories/ZDI-26-599/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-598: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-30661 http://www.zerodayinitiative.com/advisories/ZDI-26-598/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-597: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-30696 http://www.zerodayinitiative.com/advisories/ZDI-26-597/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-596: Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability]]> ZDI-CAN-30755 http://www.zerodayinitiative.com/advisories/ZDI-26-596/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-595: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-31158 http://www.zerodayinitiative.com/advisories/ZDI-26-595/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-594: NVIDIA Megatron Bridge load_model_config Code Injection Remote Code Execution Vulnerability]]> ZDI-CAN-30353 http://www.zerodayinitiative.com/advisories/ZDI-26-594/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-593: NVIDIA TensorRT ONNX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-30321 http://www.zerodayinitiative.com/advisories/ZDI-26-593/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-592: NVIDIA TensorRT ONNX File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability]]> ZDI-CAN-30322 http://www.zerodayinitiative.com/advisories/ZDI-26-592/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-591: NVIDIA TensorRT ONNX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-30323 http://www.zerodayinitiative.com/advisories/ZDI-26-591/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-590: libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability]]> ZDI-CAN-31036 http://www.zerodayinitiative.com/advisories/ZDI-26-590/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-589: BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29429 http://www.zerodayinitiative.com/advisories/ZDI-26-589/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-588: Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability]]> ZDI-CAN-29318 http://www.zerodayinitiative.com/advisories/ZDI-26-588/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-587: Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-28173 http://www.zerodayinitiative.com/advisories/ZDI-26-587/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-586: OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability]]> ZDI-CAN-29340 http://www.zerodayinitiative.com/advisories/ZDI-26-586/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-585: OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability]]> ZDI-CAN-29337 http://www.zerodayinitiative.com/advisories/ZDI-26-585/ Mon, 24 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-584: dnsmasq DNSSEC NSEC/NSEC3 Type Bitmap Processing Infinite Loop Denial-of-Service Vulnerability]]> ZDI-CAN-30607 http://www.zerodayinitiative.com/advisories/ZDI-26-584/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-583: Clam AntiVirus 7z Archive Parsing Integer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29416 http://www.zerodayinitiative.com/advisories/ZDI-26-583/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-582: Cisco Identity Services Engine PatchUpdateListener Directory Traversal Information Disclosure Vulnerability]]> ZDI-CAN-28708 http://www.zerodayinitiative.com/advisories/ZDI-26-582/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-581: Cisco Identity Services Engine invokeScript Command Injection Remote Code Execution Vulnerability]]> ZDI-CAN-28709 http://www.zerodayinitiative.com/advisories/ZDI-26-581/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-580: Cisco Identity Services Engine Missing Authentication for Critical Function Information Disclosure Vulnerability]]> ZDI-CAN-29246 http://www.zerodayinitiative.com/advisories/ZDI-26-580/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-579: Cisco Identity Services Engine zipFiles Directory Traversal Remote Code Execution Vulnerability]]> ZDI-CAN-29197 http://www.zerodayinitiative.com/advisories/ZDI-26-579/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-578: NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution Vulnerability]]> ZDI-CAN-29287 http://www.zerodayinitiative.com/advisories/ZDI-26-578/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-577: Trend Micro VPN OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability]]> ZDI-CAN-29830 http://www.zerodayinitiative.com/advisories/ZDI-26-577/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-576: Linux Kernel XFRM Race Condition Local Privilege Escalation Vulnerability]]> ZDI-CAN-31423 http://www.zerodayinitiative.com/advisories/ZDI-26-576/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-575: Linux Kernel Net Scheduler Packet Classifier API Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability]]> ZDI-CAN-31419 http://www.zerodayinitiative.com/advisories/ZDI-26-575/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-574: Linux Kernel Net Scheduler Connection Tracking Race Condition Local Privilege Escalation Vulnerability]]> ZDI-CAN-29413 http://www.zerodayinitiative.com/advisories/ZDI-26-574/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-573: Linux Kernel KSMBD Response Header Out-Of-Bounds Read Information Disclosure Vulnerability]]> ZDI-CAN-31063 http://www.zerodayinitiative.com/advisories/ZDI-26-573/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-572: Linux Kernel XFRM Race Condition Local Privilege Escalation Vulnerability]]> ZDI-CAN-30499 http://www.zerodayinitiative.com/advisories/ZDI-26-572/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-571: Linux Kernel Net Scheduler Packet Classifier API Use-After-Free Local Privilege Escalation Vulnerability]]> ZDI-CAN-31222 http://www.zerodayinitiative.com/advisories/ZDI-26-571/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-570: Linux Kernel IGMP Subsystem Race Condition Local Privilege Escalation Vulnerability]]> ZDI-CAN-31149 http://www.zerodayinitiative.com/advisories/ZDI-26-570/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-569: Linux Kernel Net Scheduler True Link Equalizer Race Condition Local Privilege Escalation Vulnerability]]> ZDI-CAN-30840 http://www.zerodayinitiative.com/advisories/ZDI-26-569/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-568: Linux Kernel Net Scheduler Race Condition Local Privilege Escalation Vulnerability]]> ZDI-CAN-31523 http://www.zerodayinitiative.com/advisories/ZDI-26-568/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-567: Norton Utilities Ultimate NortonUtilitiesSvc Link Following Local Privilege Escalation Vulnerability]]> ZDI-CAN-25569 http://www.zerodayinitiative.com/advisories/ZDI-26-567/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-566: BlackBerry QNX KEV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability]]> ZDI-CAN-30346 http://www.zerodayinitiative.com/advisories/ZDI-26-566/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-565: Gen Digital CCleaner Link Following Local Privilege Escalation Vulnerability]]> ZDI-CAN-28680 http://www.zerodayinitiative.com/advisories/ZDI-26-565/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-564: NVIDIA Transformers4Rec load_model_trainer_states_from_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability]]> ZDI-CAN-28536 http://www.zerodayinitiative.com/advisories/ZDI-26-564/ Thu, 13 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-563: (Pwn2Own) Home Assistant Green Simple Service Discovery Protocol Server-Side Request Forgery Vulnerability]]> ZDI-CAN-28279 http://www.zerodayinitiative.com/advisories/ZDI-26-563/ Wed, 12 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-562: (Pwn2Own) Home Assistant Green mDNS Server-Side Request Forgery Vulnerability]]> ZDI-CAN-28336 http://www.zerodayinitiative.com/advisories/ZDI-26-562/ Wed, 12 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-561: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability]]> ZDI-CAN-28429 http://www.zerodayinitiative.com/advisories/ZDI-26-561/ Wed, 12 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-560: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability]]> ZDI-CAN-28340 http://www.zerodayinitiative.com/advisories/ZDI-26-560/ Wed, 12 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-559: (Pwn2Own) Amazon Smart Plug OTA Update Process Out-Of-Bounds Write Remote Code Execution Vulnerability]]> ZDI-CAN-28459 http://www.zerodayinitiative.com/advisories/ZDI-26-559/ Wed, 12 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-558: (Pwn2Own) Amazon Smart Plug OTA Update Process Improper Certificate Validation Vulnerability]]> ZDI-CAN-28460 http://www.zerodayinitiative.com/advisories/ZDI-26-558/ Wed, 12 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-557: (Pwn2Own) Amazon Smart Plug Insecure Fallback Information Disclosure Vulnerability]]> ZDI-CAN-28367 http://www.zerodayinitiative.com/advisories/ZDI-26-557/ Wed, 12 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-556: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability]]> ZDI-CAN-28886 http://www.zerodayinitiative.com/advisories/ZDI-26-556/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-555: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability]]> ZDI-CAN-28885 http://www.zerodayinitiative.com/advisories/ZDI-26-555/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-554: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability]]> ZDI-CAN-29220 http://www.zerodayinitiative.com/advisories/ZDI-26-554/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-553: OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability]]> ZDI-CAN-29338 http://www.zerodayinitiative.com/advisories/ZDI-26-553/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-552: OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability]]> ZDI-CAN-29336 http://www.zerodayinitiative.com/advisories/ZDI-26-552/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-551: OriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerability]]> ZDI-CAN-29335 http://www.zerodayinitiative.com/advisories/ZDI-26-551/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-550: OriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerability]]> ZDI-CAN-29334 http://www.zerodayinitiative.com/advisories/ZDI-26-550/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-549: OriginLab OriginPro OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability]]> ZDI-CAN-29333 http://www.zerodayinitiative.com/advisories/ZDI-26-549/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-548: OriginLab OriginPro OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability]]> ZDI-CAN-29332 http://www.zerodayinitiative.com/advisories/ZDI-26-548/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-547: OriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability]]> ZDI-CAN-29331 http://www.zerodayinitiative.com/advisories/ZDI-26-547/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-546: Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability]]> ZDI-CAN-30458 http://www.zerodayinitiative.com/advisories/ZDI-26-546/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-545: Flowise CSV_Agent customReadCSV Code Injection Remote Code Execution Vulnerability]]> ZDI-CAN-30461 http://www.zerodayinitiative.com/advisories/ZDI-26-545/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-544: Microsoft Windows Deployment Services Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-31889 http://www.zerodayinitiative.com/advisories/ZDI-26-544/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-543: Microsoft Windows ICC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability]]> ZDI-CAN-30441 http://www.zerodayinitiative.com/advisories/ZDI-26-543/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-542: Microsoft Windows UMPDDrvBitBlt Improper Object Management Local Privilege Escalation Vulnerability]]> ZDI-CAN-30747 http://www.zerodayinitiative.com/advisories/ZDI-26-542/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-541: (Pwn2Own) Microsoft Windows win32kfull Use-After-Free Local Privilege Escalation Vulnerability]]> ZDI-CAN-31479 http://www.zerodayinitiative.com/advisories/ZDI-26-541/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-540: (Pwn2Own) Microsoft Windows win32kfull Use-After-Free Information Disclosure Vulnerability]]> ZDI-CAN-31276 http://www.zerodayinitiative.com/advisories/ZDI-26-540/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-539: (Pwn2Own) Microsoft Windows ipt.sys Incorrect Permission Assignment Local Privilege Escalation Vulnerability]]> ZDI-CAN-31260 http://www.zerodayinitiative.com/advisories/ZDI-26-539/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-538: (Pwn2Own) Microsoft Exchange Improper Authorization Privilege Escalation Vulnerability]]> ZDI-CAN-31480 http://www.zerodayinitiative.com/advisories/ZDI-26-538/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-537: (Pwn2Own) Microsoft Windows storport Integer Overflow Local Privilege Escalation Vulnerability]]> ZDI-CAN-31299 http://www.zerodayinitiative.com/advisories/ZDI-26-537/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-536: (Pwn2Own) Microsoft Windows http.sys Integer Overflow Local Privilege Escalation Vulnerability]]> ZDI-CAN-31294 http://www.zerodayinitiative.com/advisories/ZDI-26-536/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-535: (Pwn2Own) Microsoft Exchange External Control of File Path Remote Code Execution Vulnerability]]> ZDI-CAN-31481 http://www.zerodayinitiative.com/advisories/ZDI-26-535/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-534: (Pwn2Own) Microsoft Exchange Capture-Replay Authentication Bypass Vulnerability]]> ZDI-CAN-31262 http://www.zerodayinitiative.com/advisories/ZDI-26-534/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-533: Cisco Secure Firewall Management Center login.cgi Authentication Bypass Vulnerability]]> ZDI-CAN-30390 http://www.zerodayinitiative.com/advisories/ZDI-26-533/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-532: SonicWall Email Security updateNetIf Command Injection Local Privilege Escalation Vulnerability]]> ZDI-CAN-29025 http://www.zerodayinitiative.com/advisories/ZDI-26-532/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-531: SonicWall GMS Virtual Appliance interface Command Injection Local Privilege Escalation Vulnerability]]> ZDI-CAN-29024 http://www.zerodayinitiative.com/advisories/ZDI-26-531/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-530: SonicWall Email Security snmp Command Injection Local Privilege Escalation Vulnerability]]> ZDI-CAN-29029 http://www.zerodayinitiative.com/advisories/ZDI-26-530/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-529: Samsung Galaxy S25 TIFF File Processing Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29432 http://www.zerodayinitiative.com/advisories/ZDI-26-529/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-528: Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability]]> ZDI-CAN-30062 http://www.zerodayinitiative.com/advisories/ZDI-26-528/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-527: Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability]]> ZDI-CAN-30086 http://www.zerodayinitiative.com/advisories/ZDI-26-527/ Tue, 11 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-526: (0Day) PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability]]> ZDI-CAN-30585 http://www.zerodayinitiative.com/advisories/ZDI-26-526/ Fri, 14 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-525: (0Day) PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability]]> ZDI-CAN-30583 http://www.zerodayinitiative.com/advisories/ZDI-26-525/ Wed, 05 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-524: (0Day) PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability]]> ZDI-CAN-30584 http://www.zerodayinitiative.com/advisories/ZDI-26-524/ Wed, 05 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-523: Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability]]> ZDI-CAN-27987 http://www.zerodayinitiative.com/advisories/ZDI-26-523/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-522: Phoenix Contact CHARX SEC-3000 Insertion of Sensitive Information into Log File Information Disclosure Vulnerability]]> ZDI-CAN-27763 http://www.zerodayinitiative.com/advisories/ZDI-26-522/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-521: Phoenix Contact CHARX SEC-3000 Command Injection Remote Code Execution Vulnerability]]> ZDI-CAN-27762 http://www.zerodayinitiative.com/advisories/ZDI-26-521/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-520: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Jupicore External Control of Path Remote Code Execution Vulnerability]]> ZDI-CAN-29093 http://www.zerodayinitiative.com/advisories/ZDI-26-520/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-519: (Pwn2Own) Phoenix Contact CHARX SEC-3150 CharxSystemConfigManager Configuration Injection Remote Code Execution Vulnerability]]> ZDI-CAN-29077 http://www.zerodayinitiative.com/advisories/ZDI-26-519/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-518: (Pwn2Own) Phoenix Contact CHARX SEC-3150 MQTT Service Server-Side Request Forgery Remote Code Execution Vulnerability]]> ZDI-CAN-29073 http://www.zerodayinitiative.com/advisories/ZDI-26-518/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-517: (Pwn2Own) Phoenix Contact CHARX SEC-3150 BackendURL WebSocket Command Injection Remote Code Execution Vulnerability]]> ZDI-CAN-29054 http://www.zerodayinitiative.com/advisories/ZDI-26-517/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-516: (Pwn2Own) Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability]]> ZDI-CAN-29055 http://www.zerodayinitiative.com/advisories/ZDI-26-516/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-515: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx-jupicore Missing Authentication Configuration Modification Vulnerability]]> ZDI-CAN-28999 http://www.zerodayinitiative.com/advisories/ZDI-26-515/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-514: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Failing Open Authentication Bypass Vulnerability]]> ZDI-CAN-29076 http://www.zerodayinitiative.com/advisories/ZDI-26-514/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-513: (Pwn2Own) Phoenix Contact CHARX SEC-3150 update2-upload Arbitrary File Upload Vulnerability]]> ZDI-CAN-29110 http://www.zerodayinitiative.com/advisories/ZDI-26-513/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-512: (Pwn2Own) Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability]]> ZDI-CAN-29052 http://www.zerodayinitiative.com/advisories/ZDI-26-512/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-511: (Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Symlink Following Local Privilege Escalation Vulnerability]]> ZDI-CAN-29075 http://www.zerodayinitiative.com/advisories/ZDI-26-511/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-510: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Missing Cryptographic Signature Remote Code Execution Vulnerability]]> ZDI-CAN-29094 http://www.zerodayinitiative.com/advisories/ZDI-26-510/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-509: (Pwn2Own) Phoenix Contact CHARX SEC-3150 OCPP Missing Authentication for Critical Function Authentication Bypass Vulnerability]]> ZDI-CAN-29091 http://www.zerodayinitiative.com/advisories/ZDI-26-509/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-508: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx_set_ip_address Improper Input Validation Local Privilege Escalation Vulnerability]]> ZDI-CAN-29108 http://www.zerodayinitiative.com/advisories/ZDI-26-508/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-507: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Privilege Defined With Unsafe Actions Local Privilege Escalation Vulnerability]]> ZDI-CAN-29109 http://www.zerodayinitiative.com/advisories/ZDI-26-507/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-506: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Insertion of Sensitive Information into Log File Authentication Bypass Vulnerability]]> ZDI-CAN-29050 http://www.zerodayinitiative.com/advisories/ZDI-26-506/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-505: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx-system-config-manager Service CRLF Injection Firewall Bypass Vulnerability]]> ZDI-CAN-29074 http://www.zerodayinitiative.com/advisories/ZDI-26-505/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-504: (Pwn2Own) Phoenix Contact CHARX SEC-3150 CharxSystemConfigManager Configuration Injection Remote Code Execution Vulnerability]]> ZDI-CAN-29059 http://www.zerodayinitiative.com/advisories/ZDI-26-504/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-503: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Race Condition Firewall Bypass Vulnerability]]> ZDI-CAN-29058 http://www.zerodayinitiative.com/advisories/ZDI-26-503/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-502: (Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Link Following Local Privilege Escalation Vulnerability]]> ZDI-CAN-29085 http://www.zerodayinitiative.com/advisories/ZDI-26-502/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-501: WatchGuard FireWare OS sigd comp_start_cb Directory Traversal Arbitrary File Creation Vulnerability]]> ZDI-CAN-31457 http://www.zerodayinitiative.com/advisories/ZDI-26-501/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-500: WatchGuard FireWare OS networkd network_wireless_kick_off_user_cb Stack-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-31458 http://www.zerodayinitiative.com/advisories/ZDI-26-500/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-499: WatchGuard FireWare OS cli Token Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-31459 http://www.zerodayinitiative.com/advisories/ZDI-26-499/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-498: TrendAI Vision One Incorrect Privilege Assignment Privilege Escalation Vulnerability]]> ZDI-CAN-28122 http://www.zerodayinitiative.com/advisories/ZDI-26-498/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-497: TrendAI Vision One Service Gateway Logs Information Disclosure Vulnerability]]> ZDI-CAN-28148 http://www.zerodayinitiative.com/advisories/ZDI-26-497/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-496: Trend AI Cleaner One Pro Link Following Arbitrary File Deletion Vulnerability]]> ZDI-CAN-28718 http://www.zerodayinitiative.com/advisories/ZDI-26-496/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-495: (Pwn2Own) VMware ESXi VMXNET3 espQueueMask Out-Of-Bounds Write Local Privilege Escalation Vulnerability]]> ZDI-CAN-31293 http://www.zerodayinitiative.com/advisories/ZDI-26-495/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-494: Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-30380 http://www.zerodayinitiative.com/advisories/ZDI-26-494/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-493: Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29483 http://www.zerodayinitiative.com/advisories/ZDI-26-493/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-492: Apple macOS ImageIO Numeric Truncation Remote Code Execution Vulnerability]]> ZDI-CAN-29252 http://www.zerodayinitiative.com/advisories/ZDI-26-492/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-491: Apple macOS CoreAudio Out-Of-Bounds Write Remote Code Execution Vulnerability]]> ZDI-CAN-29143 http://www.zerodayinitiative.com/advisories/ZDI-26-491/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-490: (Pwn2Own) Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability]]> ZDI-CAN-29070 http://www.zerodayinitiative.com/advisories/ZDI-26-490/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-489: (Pwn2Own) Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability]]> ZDI-CAN-28981 http://www.zerodayinitiative.com/advisories/ZDI-26-489/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-488: (Pwn2Own) Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability]]> ZDI-CAN-28974 http://www.zerodayinitiative.com/advisories/ZDI-26-488/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-487: (Pwn2Own) Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability]]> ZDI-CAN-29111 http://www.zerodayinitiative.com/advisories/ZDI-26-487/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-486: (Pwn2Own) Kenwood DNR1007XR tchdr_bytestream_read Out-Of-Bounds Write Code Execution Vulnerability]]> ZDI-CAN-28980 http://www.zerodayinitiative.com/advisories/ZDI-26-486/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-485: (Pwn2Own) Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability]]> ZDI-CAN-29066 http://www.zerodayinitiative.com/advisories/ZDI-26-485/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-484: (Pwn2Own) Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability]]> ZDI-CAN-28751 http://www.zerodayinitiative.com/advisories/ZDI-26-484/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-483: NoMachine getstat Command Injection Remote Code Execution Vulnerability]]> ZDI-CAN-30634 http://www.zerodayinitiative.com/advisories/ZDI-26-483/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-482: Progress Software Kemp LoadMaster enablexroot Use of Hard-Coded Cryptographic Key Privilege Escalation Vulnerability]]> ZDI-CAN-30687 http://www.zerodayinitiative.com/advisories/ZDI-26-482/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-481: Progress Software Kemp LoadMaster access Missing Authorization Privilege Escalation Vulnerability]]> ZDI-CAN-30735 http://www.zerodayinitiative.com/advisories/ZDI-26-481/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-480: OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability]]> ZDI-CAN-30036 http://www.zerodayinitiative.com/advisories/ZDI-26-480/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-479: Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability]]> ZDI-CAN-28603 http://www.zerodayinitiative.com/advisories/ZDI-26-479/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-478: Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability]]> ZDI-CAN-28201 http://www.zerodayinitiative.com/advisories/ZDI-26-478/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-477: (Pwn2Own) Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability]]> ZDI-CAN-29061 http://www.zerodayinitiative.com/advisories/ZDI-26-477/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-476: (Pwn2Own) Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability]]> ZDI-CAN-28992 http://www.zerodayinitiative.com/advisories/ZDI-26-476/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-475: (Pwn2Own) Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-28995 http://www.zerodayinitiative.com/advisories/ZDI-26-475/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-474: (Pwn2Own) Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29072 http://www.zerodayinitiative.com/advisories/ZDI-26-474/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-473: (Pwn2Own) Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability]]> ZDI-CAN-29060 http://www.zerodayinitiative.com/advisories/ZDI-26-473/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-472: (Pwn2Own) Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29042 http://www.zerodayinitiative.com/advisories/ZDI-26-472/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-471: (Pwn2Own) Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability]]> ZDI-CAN-28990 http://www.zerodayinitiative.com/advisories/ZDI-26-471/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-470: Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability]]> ZDI-CAN-29159 http://www.zerodayinitiative.com/advisories/ZDI-26-470/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-469: Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability]]> ZDI-CAN-29160 http://www.zerodayinitiative.com/advisories/ZDI-26-469/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-468: Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability]]> ZDI-CAN-28749 http://www.zerodayinitiative.com/advisories/ZDI-26-468/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-467: GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-29787 http://www.zerodayinitiative.com/advisories/ZDI-26-467/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-466: GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29581 http://www.zerodayinitiative.com/advisories/ZDI-26-466/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-465: GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29584 http://www.zerodayinitiative.com/advisories/ZDI-26-465/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-464: GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29608 http://www.zerodayinitiative.com/advisories/ZDI-26-464/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-463: GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability]]> ZDI-CAN-29510 http://www.zerodayinitiative.com/advisories/ZDI-26-463/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-462: GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29401 http://www.zerodayinitiative.com/advisories/ZDI-26-462/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-461: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29405 http://www.zerodayinitiative.com/advisories/ZDI-26-461/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-460: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29404 http://www.zerodayinitiative.com/advisories/ZDI-26-460/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-459: GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29396 http://www.zerodayinitiative.com/advisories/ZDI-26-459/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-458: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29406 http://www.zerodayinitiative.com/advisories/ZDI-26-458/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-457: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29403 http://www.zerodayinitiative.com/advisories/ZDI-26-457/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-456: GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29399 http://www.zerodayinitiative.com/advisories/ZDI-26-456/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-455: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29398 http://www.zerodayinitiative.com/advisories/ZDI-26-455/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-454: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29395 http://www.zerodayinitiative.com/advisories/ZDI-26-454/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-453: GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29289 http://www.zerodayinitiative.com/advisories/ZDI-26-453/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-452: Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability]]> ZDI-CAN-29196 http://www.zerodayinitiative.com/advisories/ZDI-26-452/ Thu, 23 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-451: Docker Desktop for macOS Inference Server Permissive Allow List Sandbox Escape Vulnerability]]> ZDI-CAN-29308 http://www.zerodayinitiative.com/advisories/ZDI-26-451/ Thu, 23 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-450: AzeoTech DAQFactory CTL File Parsing Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-28831 http://www.zerodayinitiative.com/advisories/ZDI-26-450/ Thu, 23 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-449: AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability]]> ZDI-CAN-28876 http://www.zerodayinitiative.com/advisories/ZDI-26-449/ Thu, 23 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-448: Bitdefender Total Security Shredder Link Following Local Privilege Escalation Vulnerability]]> ZDI-CAN-28703 http://www.zerodayinitiative.com/advisories/ZDI-26-448/ Thu, 23 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-447: Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability]]> ZDI-CAN-29251 http://www.zerodayinitiative.com/advisories/ZDI-26-447/ Thu, 23 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-446: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability]]> ZDI-CAN-32968 http://www.zerodayinitiative.com/advisories/ZDI-26-446/ Tue, 21 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-445: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability]]> ZDI-CAN-32967 http://www.zerodayinitiative.com/advisories/ZDI-26-445/ Tue, 21 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-444: 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-30169 http://www.zerodayinitiative.com/advisories/ZDI-26-444/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-443: Linux Kernel vmwgfx Integer Overflow Local Privilege Escalation Vulnerability]]> ZDI-CAN-31467 http://www.zerodayinitiative.com/advisories/ZDI-26-443/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-442: Linux Kernel CAN ISO-TP Protocol Race Condition Local Privilege Escalation Vulnerability]]> ZDI-CAN-31764 http://www.zerodayinitiative.com/advisories/ZDI-26-442/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-441: dnsmasq DNS Response Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29496 http://www.zerodayinitiative.com/advisories/ZDI-26-441/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-440: Fuji Electric Tellus pcid64 Driver Untrusted Pointer Dereference Denial of Service Vulnerability]]> ZDI-CAN-27744 http://www.zerodayinitiative.com/advisories/ZDI-26-440/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-439: Fuji Electric Tellus pcid64 Driver Exposed Dangerous Method Local Privilege Escalation Vulnerability]]> ZDI-CAN-27670 http://www.zerodayinitiative.com/advisories/ZDI-26-439/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-438: Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability]]> ZDI-CAN-27055 http://www.zerodayinitiative.com/advisories/ZDI-26-438/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-437: (Pwn2Own) Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability]]> ZDI-CAN-29113 http://www.zerodayinitiative.com/advisories/ZDI-26-437/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-436: (Pwn2Own) Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability]]> ZDI-CAN-29048 http://www.zerodayinitiative.com/advisories/ZDI-26-436/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-435: (Pwn2Own) Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability]]> ZDI-CAN-29044 http://www.zerodayinitiative.com/advisories/ZDI-26-435/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-434: (Pwn2Own) Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability]]> ZDI-CAN-29046 http://www.zerodayinitiative.com/advisories/ZDI-26-434/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-433: (Pwn2Own) Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability]]> ZDI-CAN-29062 http://www.zerodayinitiative.com/advisories/ZDI-26-433/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-432: G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability]]> ZDI-CAN-28665 http://www.zerodayinitiative.com/advisories/ZDI-26-432/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-431: ASUS Business Manager Service Client-Side Authentication Local Privilege Escalation Vulnerability]]> ZDI-CAN-28776 http://www.zerodayinitiative.com/advisories/ZDI-26-431/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-430: MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability]]> ZDI-CAN-28935 http://www.zerodayinitiative.com/advisories/ZDI-26-430/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-429: NVIDIA NeMo Framework Deserialization of Untrusted Data Remote Code Execution Vulnerability]]> ZDI-CAN-28090 http://www.zerodayinitiative.com/advisories/ZDI-26-429/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-428: WatchGuard FireWare OS admd Stack-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-30173 http://www.zerodayinitiative.com/advisories/ZDI-26-428/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-427: WatchGuard FireWare OS iked ike2_hmac Null Pointer Dereference Denial-of-Service Vulnerability]]> ZDI-CAN-30097 http://www.zerodayinitiative.com/advisories/ZDI-26-427/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-426: OpenSSL X.509 Email Validation Out-Of-Bounds Read Information Disclosure Vulnerability]]> ZDI-CAN-30378 http://www.zerodayinitiative.com/advisories/ZDI-26-426/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-425: OpenSSL OCSP Stapling Verification Double Free Remote Code Execution Vulnerability]]> ZDI-CAN-30391 http://www.zerodayinitiative.com/advisories/ZDI-26-425/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-424: Synology DiskStation DS925+ MailPlus Improper Restriction of Communication Channel to Intended Endpoints Vulnerability]]> ZDI-CAN-28485 http://www.zerodayinitiative.com/advisories/ZDI-26-424/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-423: Synology DiskStation DS925+ MailPlus Redis Weak Cryptography for Passwords Remote Code Execution Vulnerability]]> ZDI-CAN-28554 http://www.zerodayinitiative.com/advisories/ZDI-26-423/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-422: Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability]]> ZDI-CAN-30236 http://www.zerodayinitiative.com/advisories/ZDI-26-422/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-421: Cisco Identity Services Engine validFileNameOrPath Directory Traversal Information Disclosure Vulnerability]]> ZDI-CAN-28724 http://www.zerodayinitiative.com/advisories/ZDI-26-421/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-420: Adobe Creative Cloud AGSService Incorrect Permission Assignment Local Privilege Escalation Vulnerability]]> ZDI-CAN-29867 http://www.zerodayinitiative.com/advisories/ZDI-26-420/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-419: Adobe Creative Cloud AdobeUpdateService Uncontrolled Search Path Element Local Privilege Escalation Vulnerability]]> ZDI-CAN-29588 http://www.zerodayinitiative.com/advisories/ZDI-26-419/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-418: Microsoft SharePoint SPFieldMultiLineText Cross-Site Scripting Vulnerability]]> ZDI-CAN-30803 http://www.zerodayinitiative.com/advisories/ZDI-26-418/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-417: Microsoft Windows ServerManager Exposed Dangerous Method Local Privilege Escalation Vulnerability]]> ZDI-CAN-30003 http://www.zerodayinitiative.com/advisories/ZDI-26-417/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-416: Microsoft Hyper-V netvsc Out-Of-Bounds Read Local Privilege Escalation Vulnerability]]> ZDI-CAN-28769 http://www.zerodayinitiative.com/advisories/ZDI-26-416/ Wed, 15 Jul 2026 00:00:00 -0500