Skip to main content

ZDI Advisories

658 advisories

Zero Day Initiative vulnerability advisories – published disclosures and upcoming publications.

ZDI-26-633 7.8 CVE-2026-4153 GIMP Sep 09, 2026

GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability

ZDI-26-630 3.3 CVE-2026-18445 NI Sep 09, 2026

NI LabVIEW VI File Parsing Integer Overflow Information Disclosure Vulnerability

ZDI-26-626 6.1 CVE-2026-19820 Backblaze Sep 09, 2026

Backblaze Personal Computer Backup bzfilelist Link Following Denial-of-Service Vulnerability

ZDI-26-637 7.8 CVE-2026-60413 Oracle Sep 09, 2026

Oracle Outside In Technology GEM File Parsing Integer Overflow Remote Code Execution Vulnerability

ZDI-26-636 7.8 CVE-2026-60412 Oracle Sep 09, 2026

Oracle Outside In Technology PostScript File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-635 7.8 CVE-2026-60392 Oracle Sep 09, 2026

Oracle Outside In Technology PDF File Parsing Integer Overflow Remote Code Execution Vulnerability

ZDI-26-638 7.8 CVE-2026-60414 Oracle Sep 09, 2026

Oracle Outside In Technology WPS File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-26-623 8.8 Linux Sep 09, 2026

Linux Kernel IPv6 Multicast Routing Use-After-Free Local Privilege Escalation Vulnerability

ZDI-26-639 7.5 CVE-2026-71116 Oracle Sep 09, 2026

Oracle VirtualBox VMSVGA Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

ZDI-26-634 9.8 CVE-2026-70477 Flowise Sep 09, 2026

Flowise CSV Agent Prompt Injection Remote Code Execution Vulnerability

ZDI-26-643 6.1 CVE-2026-60162 Oracle Sep 09, 2026

Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-26-642 7.5 CVE-2026-60159 Oracle Sep 09, 2026

Oracle VirtualBox IDisplay Out-Of-Bounds Read Local Privilege Escalation Vulnerability

ZDI-26-641 6.1 CVE-2026-71114 Oracle Sep 09, 2026

Oracle VirtualBox VirtioSCSI Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-26-640 5.3 CVE-2026-71132 Oracle Sep 09, 2026

Oracle VirtualBox VirtioSCSI Uninitialized Memory Information Disclosure Vulnerability

ZDI-26-647 7.5 CVE-2026-59346 VMware Sep 09, 2026

VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation Vulnerability

ZDI-26-646 7.2 CVE-2026-8037 Progress Sep 09, 2026

Progress Software Kemp LoadMaster escape_quotes Uninitialized Memory Remote Code Execution Vulnerability

ZDI-26-625 6.1 CVE-2026-19820 Backblaze Sep 09, 2026

Backblaze Personal Computer Backup bzserv Link Following Denial-of-Service Vulnerability

ZDI-26-624 6.1 CVE-2026-19820 Backblaze Sep 09, 2026

Backblaze Personal Computer Backup bzbackup Link Following Denial-of-Service Vulnerability

ZDI-26-645 7.2 CVE-2026-84387 Fortinet Sep 09, 2026

Fortinet FortiSandbox write_remote_backup_to_crontab cronValue Command Injection Remote Code Execution Vulnerability

ZDI-26-644 7.5 CVE-2026-60155 Oracle Sep 09, 2026

Oracle VirtualBox VMSVGA Race Condition Local Privilege Escalation Vulnerability

ZDI-26-616 8.8 CVE-2026-19780 Koha Sep 08, 2026

Koha Eval Code Injection Remote Code Execution Vulnerability

ZDI-26-618 7.8 CVE-2026-62712 Microsoft Sep 08, 2026

Microsoft Windows UMPDDrvStretchBlt Improper Object Management Local Privilege Escalation Vulnerability

ZDI-26-619 7.8 CVE-2026-62712 Microsoft Sep 08, 2026

Microsoft Windows UMPDDrvStretchBltROP Improper Object Management Local Privilege Escalation Vulnerability

ZDI-26-617 7.8 CVE-2026-66804 Microsoft Sep 08, 2026

Microsoft Windows MIDI Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability

ZDI-26-622 8.1 CVE-2026-50696 Microsoft Sep 08, 2026

Microsoft Windows IKEv2 AES-GCM Decryption Integer Underflow Remote Code Execution Vulnerability

ZDI-26-621 7.8 CVE-2026-62712 Microsoft Sep 08, 2026

Microsoft Windows UMPDDrvRealizeBrush Improper Object Management Local Privilege Escalation Vulnerability

ZDI-26-620 7.8 CVE-2026-62712 Microsoft Sep 08, 2026

Microsoft Windows UMPDDrvPlgBlt Improper Object Management Local Privilege Escalation Vulnerability

ZDI-26-615 7.8 pdfforge Aug 31, 2026

pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

ZDI-26-614 7.8 pdfforge Aug 31, 2026

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-26-613 7.8 pdfforge Aug 31, 2026

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

Prev Page 3 of 22 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy