Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,213 articles

VULNhighCVE-2026-479117.8 HIGHZero Day Initiative5 months ago

ZDI-26-343: Adobe Acrobat Reader DC TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User in…

VULNhighCVE-2026-339997.8 HIGHZero Day Initiative5 months ago

ZDI-26-333: X.Org Server XkbSetCompatMap Integer Underflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-479147.8 HIGHZero Day Initiative5 months ago

ZDI-26-348: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User in…

VULNhighCVE-2026-485657.8 HIGHZero Day Initiative5 months ago

ZDI-26-339: Microsoft Windows Narrator Braille Support brlapi Exposed Dangerous Function Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must…

VULNhighCVE-2026-340006.1 MEDIUMZero Day Initiative5 months ago

ZDI-26-334: X.Org Server CheckSetGeom Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker…

VULNhighCVE-2026-479245.5 MEDIUMZero Day Initiative5 months ago

ZDI-26-346: Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC.…

VULNhighCVE-2026-479137.8 HIGHZero Day Initiative5 months ago

ZDI-26-347: Adobe Acrobat Reader DC Multimedia Rendition Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User in…

VULNhighCVE-2026-482917.8 HIGHZero Day Initiative5 months ago

ZDI-26-350: Adobe USD-Fileformat-plugins Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe USD-Fileformat-plugins. In…

VULNRecorded Future5 months ago

Tracking Advanced Persistent Threat Groups | Recorded Future

Learn about advanced persistent threat detection using real-time cyber intelligence. Learn how to track complex APT groups, expose…

VULNRecorded Future5 months ago

Russia’s Defense-Based Economy Risks Forcing Putin to Fight Wars

Western sanctions have tied Russia's elite patronage to the defense sector. Learn why this creates a domestic imperative for Putin…

VULNPalo Alto Unit 425 months ago

When “Hi, This Is IT” Comes Through Microsoft Teams

Attackers are increasingly targeting collaboration platforms like Microsoft Teams. Learn the risks and key steps to strengthen you…

VULNCheck Point Research5 months ago

8th June – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 1st June, please download our Threat Intelligence Bulletin. TOP ATTAC…

VULNRecorded Future5 months ago

May 2026 CVE Landscape

In May 2026, Insikt Group® identified 41 high-impact vulnerabilities that should be prioritized for remediation, all of which had…

VULNExploit-DB5 months ago

[webapps] OpenEMR 7.0.2 - Arbitrary File Read

OpenEMR 7.0.2 - Arbitrary File Read

VULNMandiant5 months ago

Seeking Counsel: Ongoing Targeted Campaign Against US Law Firms

Written by: Chad Reams, Tufail Ahmed, Keith Knapp, Ashley Frazer, Tyler McLellan Introduction From January through May 2026, Ma…

VULNhighFull Disclosure5 months ago

[REVIVE-SA-2026-002] Revive Adserver Vulnerabilities

Posted by Matteo Beccati on Jun 04 ======================================================================== https://www.revive-ads…

VULNExploit-DB5 months ago

[webapps] WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection

WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection

VULNRecorded Future5 months ago

Why Holistic Sourcing Wins: The Numbers Behind the Recorded Future Advantage

Recorded Future’s Intelligence Graph® uses holistic sourcing across 1M+ sources for complete threat intelligence and proactive def…

VULNhighCVE-2026-454958.8 HIGHZero Day Initiative5 months ago

ZDI-26-331: (Pwn2Own) Microsoft Edge Feedback Log File Handling Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge. User interaction…

VULNhighCVE-2026-7480Zero Day Initiative5 months ago

ZDI-26-328: ASUS Business Manager Service Client-Side Authentication Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of ASUS Business Manager. An attacker m…

VULNhighCVE-2026-454925.4 MEDIUMZero Day Initiative5 months ago

ZDI-26-329: (Pwn2Own) Microsoft Edge Origin Validation Error Security Bypass Vulnerability

This vulnerability allows remote attackers to access restricted functionality on affected installations of Microsoft Edge. User in…

VULNhighCVE-2026-454945.4 MEDIUMZero Day Initiative5 months ago

ZDI-26-330: (Pwn2Own) Microsoft Edge Navigation Handling Universal Cross-Site Scripting Vulnerability

This vulnerability allows remote attackers to execute arbitrary cross-origin script on affected installations of Microsoft Edge. U…

VULNRecorded Future5 months ago

Remembering Sir Alex Younger

A personal tribute to Sir Alex Younger, former head of MI6, on the friendship, lessons, and clarity he brought to Recorded Future…

VULNRecorded Future5 months ago

Threats to the 2026 FIFA World Cup

Threat assessment for the 2026 FIFA World Cup (US, Mexico, Canada) covering organized crime, AI-powered cyber fraud, state espiona…

VULNhighCheck Point Research5 months ago

Impersonation, Click Hijacking, and TDS: Inside a Malware Distribution Ecosystem

Research by: Alexey Bukhteyev Key Takeaways Introduction When we search Google for a popular piece of software, we usually click t…

VULNhighCVE-2026-8936Zero Day Initiative5 months ago

ZDI-26-327: Docker Desktop grpcfuse Kernel Module Uncontrolled Recursion Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Docker Desktop. An…

VULNPalo Alto Unit 425 months ago

The npm Threat Landscape: Attack Surface and Mitigations (Updated June 2)

Unit 42 analyzes npm supply chain evolution post-Shai Hulud. Discover wormable malware, CI/CD persistence, multi-stage attacks and…

VULNSentinelOne Labs5 months ago

LABScon25 Replay | Gamaredon x Turla: Unveiling a 2025 Espionage Alliance Targeting Ukraine

ESET researchers show how Gamaredon facilitated Turla access to Ukrainian targets, revealing rare cooperation between FSB-linked e…

VULNhighPalo Alto Unit 425 months ago

Operation FlutterBridge: macOS Malvertising Campaign Spreads New FlutterShell Backdoor

Operation FlutterBridge is a malvertising campaign targeting macOS users. It distributed the new backdoor FlutterShell, built usin…

VULNRecorded Future5 months ago

Iran Expands Handala Brand to Physical Threats

Iran's MOIS expands its Handala brand to hybrid cyber and physical threat operations, recruiting proxies to conduct attacks, espio…