Skip to main content

ZDI Advisories

669 advisories

Zero Day Initiative vulnerability advisories – published disclosures and upcoming publications.

ZDI-26-247 7.1 CVE-2026-5053 NoMachine Mar 30, 2026

NoMachine External Control of File Path Arbitrary File Deletion Vulnerability

ZDI-26-248 7.8 CVE-2026-5054 NoMachine Mar 30, 2026

NoMachine External Control of File Path Local Privilege Escalation Vulnerability

ZDI-26-229 5.3 CVE-2026-3691 OpenClaw Mar 30, 2026

OpenClaw Client PKCE Verifier Information Disclosure Vulnerability

OpenClaw contains a credential disclosure vulnerability (CVE-2026-3691) that allows remote attackers to access stored credentials when a user…

ZDI-26-249 7.8 CVE-2026-5055 NoMachine Mar 30, 2026

NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

ZDI-26-232 8.8 CVE-2025-40277 Red Mar 30, 2026

Red Hat Enterprise Linux vmwgfx Driver Integer Overflow Local Privilege Escalation Vulnerability

A privilege escalation vulnerability identified as CVE-2025-40277 affects Red Hat Enterprise Linux, allowing local attackers with low-privileged code…

ZDI-26-228 7.4 CVE-2026-3690 OpenClaw Mar 30, 2026

OpenClaw Canvas Authentication Bypass Vulnerability

OpenClaw contains a critical authentication bypass vulnerability (CVE-2026-3690) that allows unauthenticated remote attackers to gain unauthorized…

ZDI-26-236 7.8 CVE-2026-0954 Digilent Mar 30, 2026

Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Digilent DASYLab contains a remote code execution vulnerability (CVE-2026-0954) that allows attackers to execute arbitrary code on affected systems…

ZDI-26-226 9.8 Microsoft Mar 24, 2026

Microsoft Azure MCP AzureCliService Command Injection Remote Code Execution Vulnerability

A critical remote code execution vulnerability (CVSS 9.8) has been discovered in Microsoft Azure that requires no authentication to exploit, allowing…

ZDI-26-222 8.8 CVE-2025-14233 Canon Mar 23, 2026

Canon imageCLASS MF654Cdw BJNP Memory Corruption Remote Code Execution Vulnerability

CVE-2025-14233 is a critical unauthenticated remote code execution vulnerability affecting Canon imageCLASS MF654Cdw printers that allows…

ZDI-26-223 5.9 CVE-2025-58488 Samsung Mar 23, 2026

Samsung Galaxy S25 Smart Touch Call Application Protection Mechanism Failure Information Disclosure Vulnerability

Samsung Galaxy S25 devices contain a remote information disclosure vulnerability (CVE-2025-58488) that allows attackers to access sensitive data if…

ZDI-26-224 6.3 CVE-2025-58486 Samsung Mar 23, 2026

Samsung Galaxy S25 Samsung Account Cross-Site Scripting Remote Code Execution Vulnerability

This vulnerability in Samsung Galaxy S25 allows unauthenticated remote attackers to execute arbitrary scripts on affected devices, potentially…

ZDI-26-225 5.6 CVE-2025-58487 Samsung Mar 23, 2026

Samsung Galaxy S25 Samsung Account Open Redirect Security Bypass Vulnerability

A medium-severity security bypass vulnerability (CVE-2025-58487) has been identified in Samsung Galaxy S25 devices that allows remote attackers to…

ZDI-26-221 7.8 CVE-2026-4154 GIMP Mar 19, 2026

GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability

A high-severity remote code execution vulnerability (CVE-2026-4154) affects GIMP and allows attackers to execute arbitrary code if a user opens a…

ZDI-26-219 7.8 CVE-2026-4152 GIMP Mar 19, 2026

GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP contains a remote code execution vulnerability (CVE-2026-4152) with a CVSS score of 7.8 that allows attackers to execute arbitrary code when a…

ZDI-26-220 7.8 CVE-2026-4153 GIMP Mar 19, 2026

GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP contains a remote code execution vulnerability (CVE-2026-4153) that allows attackers to execute arbitrary code if a user opens a malicious file…

ZDI-26-217 7.8 CVE-2026-4150 GIMP Mar 19, 2026

GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP contains a remote code execution vulnerability (CVE-2026-4150) with a CVSS score of 7.8 that allows attackers to execute arbitrary code when a…

ZDI-26-218 7.8 CVE-2026-4151 GIMP Mar 19, 2026

GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP contains a remote code execution vulnerability (CVE-2026-4151) that allows attackers to execute arbitrary code if a user opens a malicious file…

ZDI-26-216 6.3 CVE-2025-62847 QNAP Mar 17, 2026

QNAP TS-453E smbd domain_name Argument Injection Authentication Bypass Vulnerability

This vulnerability (CVE-2025-62847) affects QNAP TS-453E NAS devices and allows network-adjacent attackers to completely bypass authentication…

ZDI-26-210 5.4 CVE-2025-21079 Samsung Mar 16, 2026

Samsung Galaxy S25 Samsung Members Security Feature Bypass Vulnerability

A medium-severity security feature bypass vulnerability affects Samsung Galaxy S25 devices, allowing remote attackers to circumvent protective…

ZDI-26-215 7.3 CVE-2026-4158 KeePassXC Mar 16, 2026

KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

A high-severity privilege escalation vulnerability (CVE-2026-4158) has been discovered in KeePassXC that allows attackers with low-privileged code…

ZDI-26-187 9.8 CVE-2022-45188 Synology Mar 16, 2026

Synology DiskStation Manager Netatalk Library Buffer Overflow Remote Code Execution Vulnerability

Synology DiskStation Manager contains a critical remote code execution vulnerability (CVE-2022-45188) with a CVSS score of 9.8 that requires no…

ZDI-26-189 8.2 CVE-2025-41236 VMware Mar 16, 2026

VMware ESXi VMXNET3 Integer Overflow Local Privilege Escalation Vulnerability

VMware ESXi contains a privilege escalation vulnerability (CVE-2025-41236) with a CVSS score of 8.2 that allows attackers with high-privileged code…

ZDI-26-190 8.2 CVE-2025-41238 VMware Mar 16, 2026

VMware Workstation PVSCSI Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

CVE-2025-41238 is a privilege escalation vulnerability in VMware Workstation with a high severity rating of 8.2 that allows local attackers to gain…

ZDI-26-194 5.3 CVE-2026-21527 Microsoft Mar 16, 2026

Microsoft Exchange InterceptorSmtpAgent Improper Input Validation Security Feature Bypass Vulnerability

A medium-severity vulnerability (CVE-2026-21527) in Microsoft Exchange allows unauthenticated remote attackers to bypass a security feature,…

ZDI-26-192 10.0 CVE-2026-4149 Sonos Mar 16, 2026

Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability

The Sonos Era 300 speaker contains a critical remote code execution vulnerability (CVE-2026-4149) that allows unauthenticated attackers to execute…

ZDI-26-205 8.8 CVE-2025-14234 Canon Mar 16, 2026

Canon imageCLASS MF654Cdw PJCC Request Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Canon imageCLASS MF654Cdw printers contain a critical remote code execution vulnerability (CVE-2025-14234) that allows network-adjacent attackers to…

ZDI-26-202 8.0 CVE-2025-59389 QNAP Mar 16, 2026

QNAP TS-453E Hyper Data Protector Plugin query_original_file_size SQL Injection Remote Code Execution Vulnerability

A critical vulnerability in QNAP TS-453E NAS devices (CVE-2025-59389) allows network-adjacent attackers to execute arbitrary code by bypassing the…

ZDI-26-203 8.8 CVE-2025-14231 Canon Mar 16, 2026

Canon imageCLASS MF654Cdw XML SOAP Request Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

A critical remote code execution vulnerability (CVE-2025-14231) has been discovered in Canon imageCLASS MF654Cdw printers, allowing unauthenticated…

ZDI-26-206 8.8 CVE-2025-14235 Canon Mar 16, 2026

Canon imageCLASS MF654Cdw TTF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Canon imageCLASS MF654Cdw printers contain a critical vulnerability (CVE-2025-14235) that allows network-adjacent attackers to execute arbitrary code…

ZDI-26-199 5.5 CVE-2025-62848 QNAP Mar 16, 2026

QNAP TS-453E conn_log_tool Format String Remote Code Execution Vulnerability

A network-adjacent attacker can execute arbitrary code on QNAP TS-453E NAS devices (CVE-2025-62848) by bypassing the authentication mechanism,…

Prev Page 17 of 23 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy