Skip to main content

ZDI Advisories

1785 advisories

Zero Day Initiative vulnerability advisories – published disclosures and upcoming publications.

ZDI-CAN-31822 7.5 Upcoming – 85d FreeBSD Aug 12, 2026

FreeBSD

ZDI-CAN-32302 7.8 Upcoming – 85d Cline Aug 12, 2026

Cline

ZDI-CAN-32577 8.0 Upcoming – 85d Redis Aug 12, 2026

Redis

ZDI-CAN-30608 6.5 Upcoming – 85d Parallels Aug 12, 2026

Parallels

ZDI-CAN-33086 8.8 Upcoming – 85d Philips Aug 12, 2026

Philips

ZDI-CAN-33217 7.2 Upcoming – 84d Microsoft Aug 11, 2026

Microsoft

ZDI-26-543 7.8 CVE-2026-54984 Microsoft Aug 11, 2026

Microsoft Windows ICC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-26-530 7.8 CVE-2026-66150 SonicWall Aug 11, 2026

SonicWall Email Security snmp Command Injection Local Privilege Escalation Vulnerability

ZDI-26-529 8.8 CVE-2026-21045 Samsung Aug 11, 2026

Samsung Galaxy S25 TIFF File Processing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-531 7.8 CVE-2026-66148 SonicWall Aug 11, 2026

SonicWall GMS Virtual Appliance interface Command Injection Local Privilege Escalation Vulnerability

ZDI-26-528 9.9 CVE-2026-28220 Wazuh Aug 11, 2026

Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-26-538 8.8 CVE-2026-62911 Microsoft Aug 11, 2026

Microsoft Exchange Improper Authorization Privilege Escalation Vulnerability

ZDI-26-527 9.9 CVE-2026-44901 Wazuh Aug 11, 2026

Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-CAN-30483 7.8 Upcoming – 84d Microsoft Aug 11, 2026

Microsoft

ZDI-26-542 7.8 CVE-2026-62712 Microsoft Aug 11, 2026

Microsoft Windows UMPDDrvBitBlt Improper Object Management Local Privilege Escalation Vulnerability

ZDI-26-534 8.1 CVE-2026-62911 Microsoft Aug 11, 2026

Microsoft Exchange Capture-Replay Authentication Bypass Vulnerability

ZDI-26-541 8.8 CVE-2026-65775 Microsoft Aug 11, 2026

Microsoft Windows win32kfull Use-After-Free Local Privilege Escalation Vulnerability

ZDI-26-545 8.8 CVE-2026-69256 Flowise Aug 11, 2026

Flowise CSV_Agent customReadCSV Code Injection Remote Code Execution Vulnerability

ZDI-26-533 9.8 CVE-2026-20316 Cisco Aug 11, 2026

Cisco Secure Firewall Management Center login.cgi Authentication Bypass Vulnerability

ZDI-26-540 6.5 CVE-2026-65776 Microsoft Aug 11, 2026

Microsoft Windows win32kfull Use-After-Free Information Disclosure Vulnerability

ZDI-26-547 7.8 CVE-2026-18288 OriginLab Aug 11, 2026

OriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-26-544 7.5 CVE-2026-62893 Microsoft Aug 11, 2026

Microsoft Windows Deployment Services Use-After-Free Remote Code Execution Vulnerability

ZDI-26-546 9.8 CVE-2026-69264 Flowise Aug 11, 2026

Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability

ZDI-26-535 7.2 CVE-2026-62911 Microsoft Aug 11, 2026

Microsoft Exchange External Control of File Path Remote Code Execution Vulnerability

ZDI-26-553 7.8 CVE-2026-18294 OriginLab Aug 11, 2026

OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-26-556 7.8 CVE-2026-18263 Parallels Aug 11, 2026

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

ZDI-26-555 7.8 CVE-2026-18262 Parallels Aug 11, 2026

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

ZDI-26-554 7.8 CVE-2026-13121 Parallels Aug 11, 2026

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

ZDI-26-552 7.8 CVE-2026-18293 OriginLab Aug 11, 2026

OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-26-539 7.8 CVE-2026-65773 Microsoft Aug 11, 2026

Microsoft Windows ipt.sys Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Prev Page 11 of 60 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy