Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

666 articles

VULNhighCVE-2026-4682Zero Day Initiative3 months ago

ZDI-26-280: (Pwn2Own) HP DeskJet 2855e JobStatusEvent Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of HP DeskJet 2855e print…

VULNhighCVE-2026-331047.0 HIGHZero Day Initiative3 months ago

ZDI-26-278: Microsoft Windows win32kfull Improper Locking Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must…

VULNhighCVE-2026-5056Zero Day Initiative3 months ago

ZDI-26-283: GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this…

VULNhighCVE-2026-5487Zero Day Initiative3 months ago

ZDI-26-284: DriveLock Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authenticatio…

VULNhighCVE-2026-406887.2 HIGHZero Day Initiative3 months ago

ZDI-26-266: Fortinet FortiWeb cat_cgi_paths Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiWeb. Authenticatio…

VULNhighCVE-2026-328617.8 HIGHZero Day Initiative3 months ago

ZDI-26-291: NI LabVIEW LVCLASS File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NI LabVIEW. User interaction is…

VULNhighCVE-2026-5491Zero Day Initiative3 months ago

ZDI-26-287: DriveLock Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authenticatio…

VULNhighCVE-2026-5492Zero Day Initiative3 months ago

ZDI-26-288: DriveLock Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authenticatio…

VULNhighCVE-2026-321837.8 HIGHZero Day Initiative3 months ago

ZDI-26-279: Microsoft Windows Snipping Tool Improper Input Validation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interact…

VULNhighCVE-2026-398114.9 MEDIUMZero Day Initiative3 months ago

ZDI-26-265: Fortinet FortiWeb cgi_buf_alloc Integer Overflow Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Fortinet FortiWeb.…

VULNhighCVE-2026-273058.6 HIGHZero Day Initiative3 months ago

ZDI-26-264: Adobe ColdFusion fetchCFSettingFile Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe ColdFusion. Authen…

VULNcriticalZero Day Initiative3 months ago

ZDI-26-259: (0Day) Docker Desktop cli-plugins Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop for Windows. An attac…

VULNcriticalZero Day Initiative3 months ago

ZDI-26-258: (0Day) Docker Desktop extension-manager Exposed Dangerous Function Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop for Windows. An attac…

VULNhighCVE-2026-346197.7 HIGHZero Day Initiative3 months ago

ZDI-26-262: Adobe ColdFusion deleteVersion Directory Traversal Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on affected installations of Adobe ColdFusion. Although authe…

VULNhighCVE-2026-272827.5 HIGHZero Day Initiative3 months ago

ZDI-26-263: Adobe ColdFusion subscribeToEndpoints Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Adobe ColdFusion. Authentication…

VULNhighCVE-2026-252037.8 HIGHZero Day Initiative3 months ago

ZDI-26-268: Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Samsung MagicINFO 9 Server. An attac…

VULNhighCVE-2025-549489.4 CRITICALZero Day Initiative3 months ago

ZDI-26-269: TrendAI Apex One Console Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex One. Authentica…

VULNhighCVE-2025-549879.4 CRITICALZero Day Initiative3 months ago

ZDI-26-270: TrendAI Apex One Console Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex One. Authentica…

VULNhighCVE-2026-261797.8 HIGHZero Day Initiative3 months ago

ZDI-26-276: Microsoft Windows Secure Kernel Double Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must…

VULNhighCVE-2026-20507.8 HIGHZero Day Initiative3 months ago

ZDI-26-282: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is requir…

VULNcriticalZero Day Initiative3 months ago

ZDI-26-261: (0Day) Docker Desktop credentialHelper Directory Traversal Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop. An attacker must fir…

VULNRecorded Future3 months ago

Your Supply Chain Breach Is Someone Else's Payday

A supply chain attack by TeamPCP compromised trusted software tools to harvest credentials at scale, enabling payroll fraud, logis…

VULNRecorded Future3 months ago

Iran War: Future Scenario and Business Implications

Iran War: Future Scenarios and Business Implications

VULNRecorded Future3 months ago

A New Way to Buy Recorded Future: Solutions and Packages Built for the 2026 Threat Landscape

Recorded Future is rolling out new pricing and packaging that bundles its intelligence capabilities into four solutions and three…

VULNcriticalRecorded Future3 months ago

March 2026 CVE Landscape: 31 High-Impact Vulnerabilities Identified, Interlock Ransomware Group Exploits Cisco FMC Zero-Day

March 2026 saw a 139% increase in high-impact vulnerabilities, with Recorded Future's Insikt Group® identifying 31 vulnerabilities…

VULNRecorded Future4 months ago

VIP Credential Monitoring Blog

Executives and high-privilege users are prime targets for credential theft — and standard monitoring often misses them. Learn how…

VULNRecorded Future4 months ago

Third-Party Risk Is an Intelligence Operation. It's Time We Treated It Like One.

Recorded Future sees its inclusion in the 2026 Forrester Wave™ for Cybersecurity Risk Ratings Platforms as a reflection of a broad…

VULNRecorded Future4 months ago

Understanding and Anticipating Venezuelan Government Actions

Explore an in-depth analysis of Venezuela’s political landscape following the January 2026 US operation to capture Nicolás Maduro.…

VULNcriticalCVE-2026-54937.8 HIGHZero Day Initiative4 months ago

ZDI-26-255: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Labcenter Electronics Proteus. U…

VULNcriticalCVE-2026-54967.8 HIGHZero Day Initiative4 months ago

ZDI-26-254: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Labcenter Electronics Proteus. U…