Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,213 articles

VULNhighCVE-2026-819887.8 HIGHZero Day Initiativeabout 2 months ago

ZDI-26-673: Adobe Acrobat Pro DC Doc Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User inter…

VULNhighCVE-2026-819757.8 HIGHZero Day Initiativeabout 2 months ago

ZDI-26-667: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User in…

VULNhighCVE-2026-819857.8 HIGHZero Day Initiativeabout 2 months ago

ZDI-26-661: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User in…

VULNhighCVE-2026-801625.5 MEDIUMZero Day Initiativeabout 2 months ago

ZDI-26-660: Adobe Acrobat Reader DC Font Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC.…

VULNhighCVE-2026-801605.5 MEDIUMZero Day Initiativeabout 2 months ago

ZDI-26-659: Adobe Acrobat Reader DC JPEG2000 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC.…

VULNhighCVE-2026-819877.8 HIGHZero Day Initiativeabout 2 months ago

ZDI-26-658: Adobe Acrobat Pro DC JPEG Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User inter…

VULNhighCVE-2026-19397Zero Day Initiativeabout 2 months ago

ZDI-26-657: ASUS Control Center Express Agent Missing Authentication Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of ASUS Control Center Express Agen…

VULNhighZero Day Initiativeabout 2 months ago

ZDI-26-656: PAPPL Job Processing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PAPPL. Authentication is not req…

VULNhighZero Day Initiativeabout 2 months ago

ZDI-26-655: PAPPL Printer IPP Processing Stack-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of PAPPL. An attacker must first obtain…

VULNhighCVE-2025-71414Zero Day Initiativeabout 2 months ago

ZDI-26-654: TrendAI Apex One Incomplete Cleanup Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Apex One Security Agent. An…

VULNhighCVE-2025-71415Zero Day Initiativeabout 2 months ago

ZDI-26-653: TrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Apex One Security Agent. An…

VULNhighCVE-2025-71416Zero Day Initiativeabout 2 months ago

ZDI-26-652: TrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Apex One Security Agent. An…

VULNhighCVE-2026-195939.8 CRITICALZero Day Initiativeabout 2 months ago

ZDI-26-651: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenAI Codex. User interaction i…

VULNhighCVE-2026-195927.3 HIGHZero Day Initiativeabout 2 months ago

ZDI-26-650: (Pwn2Own) OpenAI Codex External Control of Configuration Setting Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenAI Codex. User interaction i…

VULNhighCVE-2026-195918.8 HIGHZero Day Initiativeabout 2 months ago

ZDI-26-649: (Pwn2Own) OpenAI Codex Improper Neutralization of Control Sequences Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenAI Codex. User interaction i…

VULNhighCVE-2026-819775.5 MEDIUMZero Day Initiativeabout 2 months ago

ZDI-26-672: Adobe Acrobat Reader DC PDF File Parsing Integer Underflow Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC.…

VULNhighCVE-2026-801617.8 HIGHZero Day Initiativeabout 2 months ago

ZDI-26-671: Adobe Acrobat Reader DC Dialog Object Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User in…

VULNhighCVE-2026-819915.5 MEDIUMZero Day Initiativeabout 2 months ago

ZDI-26-670: Adobe Acrobat Pro DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Pro DC. Us…

VULNhighCVE-2026-819785.5 MEDIUMZero Day Initiativeabout 2 months ago

ZDI-26-669: Adobe Acrobat Reader DC JBIG2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC.…

VULNhighCVE-2026-819845.5 MEDIUMZero Day Initiativeabout 2 months ago

ZDI-26-668: Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC.…

VULNhighCVE-2026-799105.5 MEDIUMZero Day Initiativeabout 2 months ago

ZDI-26-666: Adobe Acrobat Reader DC JPEG2000 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC.…

VULNhighCVE-2026-799097.8 HIGHZero Day Initiativeabout 2 months ago

ZDI-26-665: Adobe Acrobat Reader DC Annots Report Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User in…

VULNhighCVE-2026-819867.8 HIGHZero Day Initiativeabout 2 months ago

ZDI-26-664: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User in…

VULNhighCVE-2026-819897.8 HIGHZero Day Initiativeabout 2 months ago

ZDI-26-663: Adobe Acrobat Pro DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User inter…

VULNhighCVE-2026-819907.8 HIGHZero Day Initiativeabout 2 months ago

ZDI-26-662: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User in…

VULNhighCVE-2026-195907.3 HIGHZero Day Initiativeabout 2 months ago

ZDI-26-648: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenAI Codex. User interaction i…

VULNRecorded Futureabout 2 months ago

The Intelligible World of Agents

AI agents don't fail from weak reasoning. They fail due to the disconnected and untrustworthy operational world in which they act.…

VULNMicrosoft Securityabout 2 months ago

Threat Matrix: Mapping threats across cloud web applications

Microsoft introduces the Cloud Web Applications Threat Matrix, a MITRE ATT&CK-aligned framework that helps defenders understand, p…

VULNMicrosoft Securityabout 2 months ago

Passkey-themed social engineering leads to identity and cloud compromise

Passkey-themed social engineering is being used to compromise identities and enable broader cloud attacks. Learn how threat actors…

VULNPalo Alto Unit 42about 2 months ago

Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure

An investigation into how cybercriminals used YouTube gaming lures and SEO poisoning to deliver multi-payload malware to enterpris…