Skip to main content

ZDI Advisories

1797 advisories

Zero Day Initiative vulnerability advisories – published disclosures and upcoming publications.

ZDI-CAN-30793 7.8 Upcoming – 57d Linux Mint Jul 16, 2026

Linux Mint

ZDI-CAN-31769 8.8 Upcoming – 57d Linux Jul 16, 2026

Linux

ZDI-CAN-31039 8.1 Upcoming – 57d libwebsockets Jul 16, 2026

libwebsockets

ZDI-CAN-31027 5.7 Upcoming – 57d oFono Jul 16, 2026

oFono

ZDI-CAN-32069 8.8 Upcoming – 57d Apple Jul 16, 2026

Apple

ZDI-CAN-30672 7.5 Upcoming – 57d MariaDB Jul 16, 2026

MariaDB

ZDI-26-414 7.8 CVE-2026-40400 Microsoft Jul 15, 2026

Microsoft PowerShell Help Directory Traversal Remote Code Execution Vulnerability

ZDI-26-415 7.0 CVE-2026-49805 Microsoft Jul 15, 2026

Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability

ZDI-26-413 8.1 CVE-2026-50522 Microsoft Jul 15, 2026

Microsoft SharePoint Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

ZDI-26-416 7.8 CVE-2026-54129 Microsoft Jul 15, 2026

Microsoft Hyper-V netvsc Out-Of-Bounds Read Local Privilege Escalation Vulnerability

ZDI-26-417 7.8 CVE-2026-50311 Microsoft Jul 15, 2026

Microsoft Windows ServerManager Exposed Dangerous Method Local Privilege Escalation Vulnerability

ZDI-26-411 7.8 CVE-2026-24237 NVIDIA Jul 15, 2026

NVIDIA NVTabular Pickle File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-26-418 7.3 CVE-2026-55126 Microsoft Jul 15, 2026

Microsoft SharePoint SPFieldMultiLineText Cross-Site Scripting Vulnerability

ZDI-26-439 7.8 CVE-2026-8108 Fuji Jul 15, 2026

Fuji Electric Tellus pcid64 Driver Exposed Dangerous Method Local Privilege Escalation Vulnerability

ZDI-26-438 7.8 CVE-2026-6071 Rockwell Jul 15, 2026

Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-26-441 8.1 CVE-2026-2291 dnsmasq Jul 15, 2026

dnsmasq DNS Response Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-412 8.1 CVE-2026-50522 Microsoft Jul 15, 2026

Microsoft SharePoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-26-440 5.5 CVE-2026-8108 Fuji Jul 15, 2026

Fuji Electric Tellus pcid64 Driver Untrusted Pointer Dereference Denial of Service Vulnerability

ZDI-26-444 7.0 CVE-2026-14266 7-Zip Jul 15, 2026

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-443 8.8 Linux Jul 15, 2026

Linux Kernel vmwgfx Integer Overflow Local Privilege Escalation Vulnerability

ZDI-26-442 7.8 Linux Jul 15, 2026

Linux Kernel CAN ISO-TP Protocol Race Condition Local Privilege Escalation Vulnerability

ZDI-CAN-32163 7.8 Upcoming – 56d LIBERO Jul 15, 2026

LIBERO

ZDI-CAN-32164 3.3 Upcoming – 56d LIBERO Jul 15, 2026

LIBERO

ZDI-26-410 7.8 CVE-2026-24228 NVIDIA Jul 15, 2026

NVIDIA NeMo Framework Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-CAN-32642 6.5 Upcoming – 56d Open Robotics Jul 15, 2026

Open Robotics

ZDI-CAN-32652 8.8 Upcoming – 56d Open Robotics Jul 15, 2026

Open Robotics

ZDI-26-420 7.8 CVE-2026-48344 Adobe Jul 15, 2026

Adobe Creative Cloud AGSService Incorrect Permission Assignment Local Privilege Escalation Vulnerability

ZDI-26-422 7.8 CVE-2026-15551 Samsung Jul 15, 2026

Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability

ZDI-26-421 5.5 CVE-2026-20146 Cisco Jul 15, 2026

Cisco Identity Services Engine validFileNameOrPath Directory Traversal Information Disclosure Vulnerability

ZDI-26-405 7.8 CVE-2026-56000 X.Org Jul 15, 2026

X.Org Server GLX Extension Use-After-Free Privilege Escalation Vulnerability

Prev Page 19 of 60 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy