ZDI Advisories

706 advisories

Zero Day Initiative vulnerability advisories – published disclosures and upcoming publications.

ZDI-26-252 8.8 CVE-2026-4698 Mozilla Apr 02, 2026

Mozilla Firefox IonMonkey Switch Statement Optimization Type Confusion Remote Code Execution Vulnerability

ZDI-CAN-30215 7.8 Upcoming – 105d TrendAI Apr 01, 2026

TrendAI

ZDI-CAN-30003 7.8 Upcoming – 105d Microsoft Apr 01, 2026

Microsoft

ZDI-CAN-29483 7.8 Upcoming – 105d Apple Apr 01, 2026

Apple

ZDI-CAN-30180 7.8 Upcoming – 105d TrendAI Apr 01, 2026

TrendAI

ZDI-CAN-30052 7.0 Upcoming – 105d Microsoft Apr 01, 2026

Microsoft

ZDI-CAN-30179 7.8 Upcoming – 105d TrendAI Apr 01, 2026

TrendAI

ZDI-CAN-30288 7.8 Upcoming – 105d Samsung Apr 01, 2026

Samsung

ZDI-CAN-30002 7.8 Upcoming – 105d TrendAI Apr 01, 2026

TrendAI

ZDI-CAN-29653 7.8 Upcoming – 105d Adobe Apr 01, 2026

Adobe

ZDI-CAN-29388 7.8 Upcoming – 105d Avast Apr 01, 2026

Avast

ZDI-CAN-29496 8.1 Upcoming – 104d dnsmasq Mar 31, 2026

dnsmasq

ZDI-CAN-30243 6.5 Upcoming – 104d Google Mar 31, 2026

Google

ZDI-CAN-28718 5.6 Upcoming – 104d TrendAI Mar 31, 2026

TrendAI

ZDI-26-250 8.2 CVE-2026-23092 Linux Mar 31, 2026

Linux Kernel Analog Device Driver Improper Validation of Array Index Local Privilege Escalation Vulnerability

ZDI-CAN-30346 7.8 Upcoming – 104d BlackBerry Mar 31, 2026

BlackBerry

ZDI-CAN-30176 5.8 Upcoming – 104d Microsoft Mar 31, 2026

Microsoft

ZDI-CAN-28149 7.8 Upcoming – 104d Bosch Rexroth Mar 31, 2026

Bosch Rexroth

ZDI-CAN-28898 7.8 Upcoming – 104d GIMP Mar 31, 2026

GIMP

ZDI-CAN-30175 5.8 Upcoming – 104d Microsoft Mar 31, 2026

Microsoft

ZDI-CAN-29370 7.8 Upcoming – 104d Oracle Mar 31, 2026

Oracle

ZDI-CAN-29337 7.8 Upcoming – 104d OriginLab Mar 31, 2026

OriginLab

ZDI-CAN-29120 5.9 Upcoming – 104d GNU Mar 31, 2026

GNU

ZDI-CAN-29336 7.8 Upcoming – 104d OriginLab Mar 31, 2026

OriginLab

ZDI-CAN-29536 7.8 Upcoming – 104d pdfforge Mar 31, 2026

pdfforge

ZDI-26-231 3.8 CVE-2026-20695 Apple Mar 30, 2026

Apple macOS Exposure of Sensitive Information to Unauthorized Sphere Information Disclosure Vulnerability

CVE-2026-20695 is a local information disclosure vulnerability affecting Apple macOS that requires an attacker to already have low-privileged code…

ZDI-26-249 7.8 CVE-2026-5055 NoMachine Mar 30, 2026

NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

ZDI-26-243 6.8 CVE-2025-62842 QNAP Mar 30, 2026

QNAP TS-453E write_file_to_svr External Control of File Path Remote Code Execution Vulnerability

QNAP TS-453E devices contain a code execution vulnerability (CVE-2025-62842) that can be exploited by network-adjacent attackers who can bypass the…

ZDI-26-244 5.0 CVE-2024-13088 QNAP Mar 30, 2026

QNAP QHora-322 miro_webserver_controllers_api_login_singIn Authentication Bypass Vulnerability

QNAP QHora-322 routers contain an authentication bypass vulnerability (CVE-2024-13088) that allows network-adjacent attackers to gain unauthorized…

ZDI-26-236 7.8 CVE-2026-0954 Digilent Mar 30, 2026

Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Digilent DASYLab contains a remote code execution vulnerability (CVE-2026-0954) that allows attackers to execute arbitrary code on affected systems…

Prev Page 4 of 24 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy