Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

666 articles

VULNhighCVE-2026-427716.2 MEDIUMZero Day Initiative11 days ago

ZDI-26-426: OpenSSL X.509 Email Validation Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenSSL. Authentication…

VULNhighCVE-2026-351885.0 MEDIUMZero Day Initiative11 days ago

ZDI-26-425: OpenSSL OCSP Stapling Verification Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenSSL. User interaction is req…

VULNhighCVE-2026-155515.5 MEDIUMZero Day Initiative11 days ago

ZDI-26-422: Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung rlottie. Interaction wit…

VULNhighCVE-2026-201465.5 MEDIUMZero Day Initiative11 days ago

ZDI-26-421: Cisco Identity Services Engine validFileNameOrPath Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Identity Services…

VULNhighCVE-2026-483447.8 HIGHZero Day Initiative11 days ago

ZDI-26-420: Adobe Creative Cloud AGSService Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Adobe Creative Cloud Desktop Applica…

VULNhighCVE-2026-482727.8 HIGHZero Day Initiative11 days ago

ZDI-26-419: Adobe Creative Cloud AdobeUpdateService Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Adobe Creative Cloud. An attacker mu…

VULNhighCVE-2026-551267.3 HIGHZero Day Initiative11 days ago

ZDI-26-418: Microsoft SharePoint SPFieldMultiLineText Cross-Site Scripting Vulnerability

This vulnerability allows remote attackers to execute web requests with a target user's privileges on affected installations of Mi…

VULNhighCVE-2026-503117.8 HIGHZero Day Initiative11 days ago

ZDI-26-417: Microsoft Windows ServerManager Exposed Dangerous Method Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows Server. An attacke…

VULNhighCVE-2026-498057.0 HIGHZero Day Initiative11 days ago

ZDI-26-415: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must…

VULNhighCVE-2026-404008.0 HIGHZero Day Initiative11 days ago

ZDI-26-414: Microsoft PowerShell Help Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft PowerShell. User inter…

VULNhighCVE-2026-505229.8 CRITICALZero Day Initiative11 days ago

ZDI-26-413: (Pwn2Own) Microsoft SharePoint Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint. Authentica…

VULNhighCVE-2026-505229.8 CRITICALZero Day Initiative11 days ago

ZDI-26-412: (Pwn2Own) Microsoft SharePoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint. Authentica…

VULNhighCVE-2026-242377.8 HIGHZero Day Initiative11 days ago

ZDI-26-411: NVIDIA NVTabular Pickle File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA NVTabular. User interacti…

VULNhighCVE-2026-242287.8 HIGHZero Day Initiative11 days ago

ZDI-26-410: NVIDIA NeMo Framework Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA NeMo Framework. User inte…

VULNhighCVE-2026-560028.5 HIGHZero Day Initiative11 days ago

ZDI-26-407: X.Org Server PCF Font Parsing Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-560018.5 HIGHZero Day Initiative11 days ago

ZDI-26-406: X.Org Server BitmapScaleBitmaps Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-560007.8 HIGHZero Day Initiative11 days ago

ZDI-26-405: X.Org Server GLX Extension Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNRecorded Future11 days ago

The Shift: A New Era of AI Regulation

Explore how recent US export controls on frontier AI models like Anthropic's Fable signal a new era of regulatory uncertainty. Lea…

VULNCheck Point Research12 days ago

AI Security Report 2026

For years, the cyber security industry tracked AI as a force multiplier: something that made existing attack techniques faster, ch…

VULNRecorded Future12 days ago

The FBI Warned About Fake Permit Fees. The Harder Question Is Where the Money Goes. | Recorded Future

A government impersonation scam is targeting property owners with fake planning and zoning permit invoices, and authorized wire tr…

VULNMicrosoft Security12 days ago

Defending SaaS-based applications against ShinyHunters OAuth abuse

Microsoft Threat Intelligence identified threat actor activity with overlapping tradecraft commonly associated with ShinyHunters,…

VULNMicrosoft Security12 days ago

Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID

Microsoft Entra ID makes passkeys the default sign-in experience and introduces a new model for SMS and voice authentication. Read…

VULNCheck Point Research12 days ago

13th July – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 13th July, please download our Threat Intelligence Bulletin. TOP ATTA…

VULNPalo Alto Unit 4215 days ago

No Manners Here: The Ruthless Rise of The Gentlemen Ransomware

Unit 42 explores The Gentlemen ransomware operations, revealing the affiliate model driving its rapid growth. Learn more here. The…

VULNMicrosoft Security15 days ago

Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative

Microsoft’s latest Secure Future Initiative report outlines progress on secure foundations, AI-powered defense, and future-ready c…

VULNRecorded Future16 days ago

June 2026 CVE Landscape

In June 2026, Insikt Group® identified 60 high-impact vulnerabilities that should be prioritized for remediation, 30 of which had…

VULNhighMicrosoft Security16 days ago

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operational platf…

VULNSentinelOne Labs16 days ago

One Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law Enforcement

China and India ran separate espionage operations against the same Pakistani police force, each drawn by different stakes in Pakis…

VULNhighFull Disclosure17 days ago

[REVIVE-SA-2026-003] Revive Adserver Vulnerabilities

Posted by Matteo Beccati on Jul 08 ======================================================================== https://www.revive-ads…

VULNRecorded Future17 days ago

RiskX interview video featuring Colin Mahony and Mastercard's Aditi Sawhney

Recorded Future CEO Colin Mahony and Mastercard’s Aditi Sawhney discuss the convergence of cyber and financial crime. Explore how…