ZDI Advisories
875 advisoriesZero Day Initiative vulnerability advisories – published disclosures and upcoming publications.
Microsoft
Microsoft has disclosed a high-severity vulnerability (CVSS 7.8) that requires local access and low-level user privileges to exploit, with no user…
G DATA
G DATA is a well-known German cybersecurity company that develops antivirus and endpoint protection software.
MSI
MSI, a well-known manufacturer of motherboards, graphics cards, and gaming hardware, has a local privilege escalation vulnerability (CVSS 7.8) that…
NGINX
NGINX is a widely-used open-source web server and reverse proxy software that handles traffic for millions of websites globally.
Adminer
Adminer is a popular web-based database management tool that allows remote administration of databases.
verl
A high-severity vulnerability (CVSS 8.1) has been identified in Verl, affecting the confidentiality, integrity, and availability of impacted systems.
Apple
Apple has a local vulnerability (CVE pending) with low severity that requires user interaction to exploit but could lead to minor information…
Microsoft
Microsoft has a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction to exploit, but delivers complete system…
Apple
Apple has a high-severity vulnerability (CVSS 7.5) that can be exploited remotely without authentication, though it requires user interaction and…
Meta
Meta, a major social media and technology company, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no…
Meta
Meta, the social media and technology conglomerate behind Facebook, Instagram, and other platforms, has a high-severity local vulnerability (CVSS…
Meta
Meta, the parent company of Facebook, Instagram, and WhatsApp, has a high-severity vulnerability (CVSS 7.8) that requires local access and user…
Meta
Meta, the social media and technology conglomerate, has a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction but…
Meta
Meta, the parent company of Facebook, Instagram, and WhatsApp, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but…
Meta
Meta, the social media and technology conglomerate behind Facebook, Instagram, and WhatsApp, has a high-severity local vulnerability (CVSS 7.8) that…
Meta
Meta, the social media and technology conglomerate, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction to exploit but…
ASUS
ASUS, a major manufacturer of consumer and enterprise computing hardware and components, has a high-severity local privilege escalation vulnerability…
Microsoft
Microsoft has a high-severity vulnerability (CVSS 7.5) that can be exploited remotely over the network without authentication, though it requires…
GNU
GNU is the open-source software foundation behind widely-used tools like GCC compiler and core Linux utilities, making this vulnerability potentially…
Microsoft
Microsoft, a major software and cloud services provider, has a high-severity vulnerability (CVSS 7.6) that can be exploited remotely without…
Microsoft
Microsoft has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires local access and low-level user privileges to…
AzeoTech
AzeoTech is a software company known for industrial automation and SCADA control systems.
AzeoTech
AzeoTech is a software company known for industrial automation and SCADA/HMI (human-machine interface) platforms.
Microsoft
Microsoft has a high-severity vulnerability (CVSS 7.0) that requires local access and low-level user privileges to exploit, with potential to…
Microsoft
Microsoft has disclosed a low-severity local information disclosure vulnerability (CVSS 3.3) that requires user interaction to exploit but no…
Trend Micro
Trend Micro is a well-known cybersecurity software vendor specializing in antivirus, endpoint protection, and threat defense solutions.
Trend Micro
Trend Micro is a major cybersecurity vendor that provides antivirus, endpoint protection, and cloud security solutions.
Mozilla
Mozilla, the company behind the Firefox browser and related internet services, has a critical vulnerability (CVSS 8.8) that can be exploited remotely…
Linux
Linux kernel vulnerability CVE classified as HIGH severity (CVSS 7.5) requires local access and high-level privileges to exploit, but can result in…
Flowise
Flowise is an open-source platform for building AI applications and workflows.