ZDI Advisories
658 advisoriesZero Day Initiative vulnerability advisories – published disclosures and upcoming publications.
pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability
BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability
NVIDIA TensorRT ONNX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
NVIDIA TensorRT ONNX File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability
NVIDIA TensorRT ONNX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability
libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Microsoft Windows Localized Filenames Improper Input Validation NTLM Response Information Disclosure Vulnerability
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
NVIDIA Megatron Bridge load_model_config Code Injection Remote Code Execution Vulnerability
Microsoft Office HTML Injection Information Disclosure Vulnerability
Microsoft Windows Compatibility Appraiser Link Following Local Privilege Escalation Vulnerability
Linux Kernel KVM IOAPIC Use-After-Free Local Privilege Escalation Vulnerability
Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability
Linux Kernel Net Scheduler Packet Classifier Use-After-Free Local Privilege Escalation Vulnerability
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability
Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability
OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability
Cisco Identity Services Engine Missing Authentication for Critical Function Information Disclosure Vulnerability
Cisco Identity Services Engine zipFiles Directory Traversal Remote Code Execution Vulnerability