Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,213 articles

VULNhighCVE-2026-133064.3 MEDIUMZero Day Initiative3 months ago

ZDI-26-434: (Pwn2Own) Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability

This vulnerability allows physically present attackers to bypass authentication on affected installations of Autel MaxiCharger AC…

VULNhighCVE-2026-133076.8 MEDIUMZero Day Initiative3 months ago

ZDI-26-436: (Pwn2Own) Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC…

VULNhighCVE-2026-133088.1 HIGHZero Day Initiative3 months ago

ZDI-26-437: (Pwn2Own) Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home…

VULNhighCVE-2026-82478.8 HIGHZero Day Initiative3 months ago

ZDI-26-428: WatchGuard FireWare OS admd Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS…

VULNhighCVE-2026-560007.8 HIGHZero Day Initiative3 months ago

ZDI-26-405: X.Org Server GLX Extension Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-560018.5 HIGHZero Day Initiative3 months ago

ZDI-26-406: X.Org Server BitmapScaleBitmaps Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-560028.5 HIGHZero Day Initiative3 months ago

ZDI-26-407: X.Org Server PCF Font Parsing Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-242287.8 HIGHZero Day Initiative3 months ago

ZDI-26-410: NVIDIA NeMo Framework Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA NeMo Framework. User inte…

VULNhighCVE-2026-242377.8 HIGHZero Day Initiative3 months ago

ZDI-26-411: NVIDIA NVTabular Pickle File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA NVTabular. User interacti…

VULNhighCVE-2026-505229.8 CRITICALZero Day Initiative3 months ago

ZDI-26-412: (Pwn2Own) Microsoft SharePoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint. Authentica…

VULNhighCVE-2026-505229.8 CRITICALZero Day Initiative3 months ago

ZDI-26-413: (Pwn2Own) Microsoft SharePoint Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint. Authentica…

VULNhighCVE-2026-404008.0 HIGHZero Day Initiative3 months ago

ZDI-26-414: Microsoft PowerShell Help Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft PowerShell. User inter…

VULNhighCVE-2026-498057.0 HIGHZero Day Initiative3 months ago

ZDI-26-415: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must…

VULNhighCVE-2026-503117.8 HIGHZero Day Initiative3 months ago

ZDI-26-417: Microsoft Windows ServerManager Exposed Dangerous Method Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows Server. An attacke…

VULNhighCVE-2026-551267.3 HIGHZero Day Initiative3 months ago

ZDI-26-418: Microsoft SharePoint SPFieldMultiLineText Cross-Site Scripting Vulnerability

This vulnerability allows remote attackers to execute web requests with a target user's privileges on affected installations of Mi…

VULNhighCVE-2026-482727.8 HIGHZero Day Initiative3 months ago

ZDI-26-419: Adobe Creative Cloud AdobeUpdateService Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Adobe Creative Cloud. An attacker mu…

VULNhighCVE-2026-483447.8 HIGHZero Day Initiative3 months ago

ZDI-26-420: Adobe Creative Cloud AGSService Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Adobe Creative Cloud Desktop Applica…

VULNhighCVE-2026-201465.5 MEDIUMZero Day Initiative3 months ago

ZDI-26-421: Cisco Identity Services Engine validFileNameOrPath Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Identity Services…

VULNhighCVE-2026-155515.5 MEDIUMZero Day Initiative3 months ago

ZDI-26-422: Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung rlottie. Interaction wit…

VULNhighCVE-2026-351885.0 MEDIUMZero Day Initiative3 months ago

ZDI-26-425: OpenSSL OCSP Stapling Verification Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenSSL. User interaction is req…

VULNhighCVE-2026-427716.2 MEDIUMZero Day Initiative3 months ago

ZDI-26-426: OpenSSL X.509 Email Validation Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenSSL. Authentication…

VULNhighCVE-2026-241577.8 HIGHZero Day Initiative3 months ago

ZDI-26-429: NVIDIA NeMo Framework Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA NeMo Framework. User inte…

VULNhighCVE-2026-12578Zero Day Initiative3 months ago

ZDI-26-404: Delta Electronics DTM Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DTM Soft. User…

VULNhighCVE-2026-560038.5 HIGHZero Day Initiative3 months ago

ZDI-26-408: X.Org Server ComputeScaledProperties Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-559998.5 HIGHZero Day Initiative3 months ago

ZDI-26-409: X.Org Server Glamor Font Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-541297.0 HIGHZero Day Initiative3 months ago

ZDI-26-416: Microsoft Hyper-V netvsc Out-Of-Bounds Read Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Hyper-V. An attacker must…

VULNhighCVE-2025-15660Zero Day Initiative3 months ago

ZDI-26-423: Synology DiskStation DS925+ MailPlus Redis Weak Cryptography for Passwords Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation D…

VULNhighCVE-2026-13135Zero Day Initiative3 months ago

ZDI-26-424: Synology DiskStation DS925+ MailPlus Improper Restriction of Communication Channel to Intended Endpoints Vulnerability

This vulnerability allows network-adjacent attackers to access the Redis instance on affected installations of Synology DiskStatio…

VULNhighCVE-2026-130847.5 HIGHZero Day Initiative3 months ago

ZDI-26-427: WatchGuard FireWare OS iked ike2_hmac Null Pointer Dereference Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of WatchGuard FireWar…

VULNhighCVE-2026-132687.8 HIGHZero Day Initiative3 months ago

ZDI-26-432: G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker m…