ZDI Advisories

WatchGuard FireWare OS admd Stack-based Buffer Overflow Remote Code Execution Vulnerability

Linux Kernel CAN ISO-TP Protocol Race Condition Local Privilege Escalation Vulnerability

NVIDIA NVTabular Pickle File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

Microsoft Windows ServerManager Exposed Dangerous Method Local Privilege Escalation Vulnerability

Microsoft Hyper-V netvsc Out-Of-Bounds Read Local Privilege Escalation Vulnerability

Adobe Creative Cloud AdobeUpdateService Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability

Microsoft SharePoint SPFieldMultiLineText Cross-Site Scripting Vulnerability

Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability

Microsoft PowerShell Help Directory Traversal Remote Code Execution Vulnerability

Cisco Identity Services Engine validFileNameOrPath Directory Traversal Information Disclosure Vulnerability

Synology DiskStation DS925+ MailPlus Redis Weak Cryptography for Passwords Remote Code Execution Vulnerability

Adobe Creative Cloud AGSService Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Microsoft SharePoint Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

Microsoft SharePoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability

OpenSSL OCSP Stapling Verification Double Free Remote Code Execution Vulnerability

Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability

Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability

Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability

WatchGuard FireWare OS iked ike2_hmac Null Pointer Dereference Denial-of-Service Vulnerability

Fuji Electric Tellus pcid64 Driver Exposed Dangerous Method Local Privilege Escalation Vulnerability

Linux Kernel vmwgfx Integer Overflow Local Privilege Escalation Vulnerability

dnsmasq DNS Response Heap-based Buffer Overflow Remote Code Execution Vulnerability

Fuji Electric Tellus pcid64 Driver Untrusted Pointer Dereference Denial of Service Vulnerability

Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability

Synology DiskStation DS925+ MailPlus Improper Restriction of Communication Channel to Intended Endpoints Vulnerability

OpenSSL X.509 Email Validation Out-Of-Bounds Read Information Disclosure Vulnerability

(Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability