Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,213 articles

VULNhighCVE-2026-183037.8 HIGHZero Day Initiative3 months ago

ZDI-26-456: GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is requir…

VULNhighCVE-2026-183047.8 HIGHZero Day Initiative3 months ago

ZDI-26-457: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is requir…

VULNhighCVE-2026-183057.8 HIGHZero Day Initiative3 months ago

ZDI-26-458: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is requir…

VULNhighCVE-2026-437297.8 HIGHZero Day Initiative3 months ago

ZDI-26-494: Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with th…

VULNhighCVE-2026-437337.8 HIGHZero Day Initiative3 months ago

ZDI-26-493: Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with th…

VULNhighCVE-2026-437807.8 HIGHZero Day Initiative3 months ago

ZDI-26-492: Apple macOS ImageIO Numeric Truncation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with th…

VULNhighCVE-2026-436737.8 HIGHZero Day Initiative3 months ago

ZDI-26-491: Apple macOS CoreAudio Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is…

VULNhighCVE-2026-182736.6 MEDIUMZero Day Initiative3 months ago

ZDI-26-490: (Pwn2Own) Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability

This vulnerability allows physically present attackers to escalate privileges on affected installations of Kenwood DNR1007XR devic…

VULNhighCVE-2026-183007.8 HIGHZero Day Initiative3 months ago

ZDI-26-453: GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is requir…

VULNhighCVE-2026-183017.8 HIGHZero Day Initiative3 months ago

ZDI-26-454: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is requir…

VULNhighCVE-2026-183027.8 HIGHZero Day Initiative3 months ago

ZDI-26-455: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is requir…

VULNhighCVE-2026-183077.8 HIGHZero Day Initiative3 months ago

ZDI-26-460: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is requir…

VULNhighCVE-2026-183087.8 HIGHZero Day Initiative3 months ago

ZDI-26-461: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is requir…

VULNhighCVE-2026-183097.8 HIGHZero Day Initiative3 months ago

ZDI-26-462: GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is requir…

VULNhighCVE-2026-182957.8 HIGHZero Day Initiative3 months ago

ZDI-26-463: GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is r…

VULNhighCVE-2026-182967.8 HIGHZero Day Initiative3 months ago

ZDI-26-464: GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is r…

VULNhighCVE-2026-182857.8 HIGHZero Day Initiative3 months ago

ZDI-26-468: Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Aeon. User interaction is requir…

VULNhighCVE-2026-182867.8 HIGHZero Day Initiative3 months ago

ZDI-26-469: Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is requir…

VULNhighCVE-2026-182877.8 HIGHZero Day Initiative3 months ago

ZDI-26-470: Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is requir…

VULNhighCVE-2026-182818.0 HIGHZero Day Initiative3 months ago

ZDI-26-474: (Pwn2Own) Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES device…

VULNhighCVE-2026-182828.0 HIGHZero Day Initiative3 months ago

ZDI-26-475: (Pwn2Own) Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES device…

VULNhighCVE-2026-182832.4 LOWZero Day Initiative3 months ago

ZDI-26-476: (Pwn2Own) Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability

This vulnerability allows physically present attackers to bypass authorization on affected installations on Sony XAV-9500ES device…

VULNhighCVE-2026-182659.8 CRITICALZero Day Initiative3 months ago

ZDI-26-480: OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OSNEXUS QuantaStor. Authenticati…

VULNhighCVE-2026-182648.8 HIGHZero Day Initiative3 months ago

ZDI-26-483: NoMachine getstat Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NoMachine. Authentication is req…

VULNhighCVE-2026-182726.8 MEDIUMZero Day Initiative3 months ago

ZDI-26-489: (Pwn2Own) Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR de…

VULNhighCVE-2026-62660Zero Day Initiative3 months ago

ZDI-26-496: Trend AI Cleaner One Pro Link Following Arbitrary File Deletion Vulnerability

This vulnerability allows local attackers to delete arbitrary files on affected installations of Trend Micro Cleaner One Pro. An a…

VULNhighCVE-2025-71386Zero Day Initiative3 months ago

ZDI-26-497: TrendAI Vision One Service Gateway Logs Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of TrendAI Vision One. Auth…

VULNhighCVE-2025-71387Zero Day Initiative3 months ago

ZDI-26-498: TrendAI Vision One Incorrect Privilege Assignment Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of TrendAI Vision One. Authentication…

VULNhighCVE-2026-130537.2 HIGHZero Day Initiative3 months ago

ZDI-26-499: WatchGuard FireWare OS cli Token Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. Authenti…

VULNhighCVE-2026-130547.2 HIGHZero Day Initiative3 months ago

ZDI-26-501: WatchGuard FireWare OS sigd comp_start_cb Directory Traversal Arbitrary File Creation Vulnerability

This vulnerability allows remote attackers to create arbitrary files on affected installations of WatchGuard FireWare OS. Authenti…