Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,213 articles

VULNhighCVE-2026-89166.1 MEDIUMZero Day Initiative5 months ago

ZDI-26-359: Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung rlottie. Interaction wit…

VULNhighCVE-2026-340325.3 MEDIUMZero Day Initiative5 months ago

ZDI-26-356: Apache HTTP Server mod_proxy_ajp Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apache HTTP Server. An a…

VULNhighCVE-2026-114426.5 MEDIUMZero Day Initiative5 months ago

ZDI-26-357: Allegra exportReport Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication…

VULNhighCVE-2026-114434.6 MEDIUMZero Day Initiative5 months ago

ZDI-26-358: Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary script on affected installations of Allegra. User interaction is r…

VULNhighCVE-2026-52849Zero Day Initiative5 months ago

ZDI-26-360: MATE Desktop Atril Document Viewer EPUB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MATE Desktop Atril Document View…

VULNRecorded Future5 months ago

Recorded Future Launches Impact and Metrics Dashboard

See the business value of your intelligence program in one live, continuously updated dashboard, built for the conversations that…

VULNRecorded Future5 months ago

Cyber-Enabled Maritime Sanctions Evasion

Discover how Iranian and Russian shadow fleets use a vast network of fake maritime websites and fraudulent documents to evade inte…

VULNhighCVE-2026-272207.8 HIGHZero Day Initiative5 months ago

ZDI-26-355: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User in…

VULNhighCVE-2026-1052010.0 CRITICALwatchTowr Labs5 months ago

More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520)

Today, Ivanti published an advisory. “No way?” we hear you say. "Yes way!" a random dog screams back at you, across the street. To…

VULNRecorded Future5 months ago

China's Noncombatant Evacuation Operations: 2005–2025

Explore the Insikt Group study on 37 Chinese noncombatant evacuation operations (NEOs) from 2005–2025, revealing how China leverag…

VULNRecorded Future5 months ago

2026 FIFA World Cup: What Public Safety Officials Need to Know

Prepare for the 2026 FIFA World Cup with expert analysis of the physical and cyber threat landscape. Discover key mitigation strat…

VULNPalo Alto Unit 425 months ago

Blinding the Watchmen: Abusing Cloud Logging Services for Defense Evasion and Visibility

Unit 42 research examines attack scenarios targeting cloud logging services. Learn how to defend against log manipulation and defe…

VULNhighCVE-2026-02579.1 CRITICALPalo Alto Unit 425 months ago

Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257

We include indicators of activity and mitigations for PAN-OS vulnerability CVE-2026-0257. The post Threat Brief: Active Exploitati…

VULNCVE-2026-251127.8 HIGHFull Disclosure5 months ago

SEC Consult SA-20260608-0 :: Privilege Escalation via Binary Planting in Genetec-provided RabbitMQ in multiple Genetec products

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Jun 08 SEC Consult Vulnerability Lab Security Advisory ============…

VULNFull Disclosure5 months ago

[SYSS-2026-004] SAP NetWeaver SAML XML Signature Wrapping

Posted by Moritz Bechler via Fulldisclosure on Jun 08 Advisory ID: SYSS-2026-004 Product: SAP NetW…

VULNhighCVE-2026-479187.8 HIGHZero Day Initiative5 months ago

ZDI-26-353: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User in…

VULNhighCVE-2026-479157.8 HIGHZero Day Initiative5 months ago

ZDI-26-349: Adobe Acrobat Pro DC Annots.api Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User inter…

VULNhighCVE-2026-482927.8 HIGHZero Day Initiative5 months ago

ZDI-26-351: Adobe USD-Fileformat-plugins Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe USD-Fileformat-plugins. In…

VULNhighCVE-2026-479177.8 HIGHZero Day Initiative5 months ago

ZDI-26-352: Adobe Acrobat Pro DC AcroForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User inter…

VULNhighCVE-2026-479127.8 HIGHZero Day Initiative5 months ago

ZDI-26-345: Adobe Acrobat Reader DC Font Handling Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User in…

VULNhighCVE-2026-479235.5 MEDIUMZero Day Initiative5 months ago

ZDI-26-344: Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC.…

VULNhighCVE-2026-80379.6 CRITICALZero Day Initiative5 months ago

ZDI-26-342: Progress Software Kemp LoadMaster apiuser Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaste…

VULNhighCVE-2026-80379.6 CRITICALZero Day Initiative5 months ago

ZDI-26-340: Progress Software Kemp LoadMaster dodelapikey Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaste…

VULNhighCVE-2026-340026.1 MEDIUMZero Day Initiative5 months ago

ZDI-26-336: X.Org Server CheckKeyActions Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker…

VULNhighCVE-2026-340017.8 HIGHZero Day Initiative5 months ago

ZDI-26-335: X.Org Server SyncAwaitFence Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-340037.8 HIGHZero Day Initiative5 months ago

ZDI-26-337: X.Org Server CheckKeyTypes Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-80379.6 CRITICALZero Day Initiative5 months ago

ZDI-26-341: Progress Software Kemp LoadMaster dolistapikeys Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaste…

VULNhighCVE-2026-241627.8 HIGHZero Day Initiative5 months ago

ZDI-26-338: NVIDIA Transformers4Rec Model.load Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Transformers4Rec. User in…

VULNhighCVE-2026-479197.8 HIGHZero Day Initiative5 months ago

ZDI-26-354: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User in…

VULNhighCVE-2026-3886Zero Day Initiative5 months ago

ZDI-26-332: QEMU calc_image_hostmem Integer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of QEMU. An attacker must first obtain…