ZDI Advisories

OpenAI Codex External Control of Configuration Setting Remote Code Execution Vulnerability

Adobe Photoshop DCM JPEG-LS Image Parsing Integer Overflow Remote Code Execution Vulnerability

Adobe Acrobat Pro DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

Linux

OpenAI Codex Improper Neutralization of Control Sequences Remote Code Execution Vulnerability

Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability

PAPPL Job Processing Heap-based Buffer Overflow Remote Code Execution Vulnerability

PAPPL Printer IPP Processing Stack-based Buffer Overflow Local Privilege Escalation Vulnerability

TrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

TrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

Apple

Adobe Acrobat Reader DC DigSig Use-After-Free Remote Code Execution Vulnerability

OpenAI Codex External Control of System or Configuration Setting Remote Code Execution Vulnerability

Backblaze Personal Computer Backup bzreports Link Following Denial-of-Service Vulnerability

Microsoft Azure Entra ID OAuth Device Code Grant Information Disclosure Vulnerability

Backblaze Personal Computer Backup bztransmit Link Following Denial-of-Service Vulnerability

Backblaze Personal Computer Backup bzfilelist Link Following Denial-of-Service Vulnerability

VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation Vulnerability

Backblaze Personal Computer Backup bzserv Link Following Denial-of-Service Vulnerability

Langflow

Backblaze Personal Computer Backup bzbackup Link Following Denial-of-Service Vulnerability

Progress Software Kemp LoadMaster escape_quotes Uninitialized Memory Remote Code Execution Vulnerability

NI LabVIEW VI File Parsing Integer Overflow Information Disclosure Vulnerability

Cisco

Autodesk

Autodesk

Oracle Outside In Technology PDF File Parsing Integer Overflow Remote Code Execution Vulnerability

Linux Kernel IPv6 Multicast Routing Use-After-Free Local Privilege Escalation Vulnerability

Flowise CSV Agent Prompt Injection Remote Code Execution Vulnerability

GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability