ZDI Advisories
1817 advisoriesZero Day Initiative vulnerability advisories – published disclosures and upcoming publications.
libgme
libgme is an audio processing library used for video game music emulation and playback.
OpenClaw Client PKCE Verifier Information Disclosure Vulnerability
OpenClaw contains a credential disclosure vulnerability (CVE-2026-3691) that allows remote attackers to access stored credentials when a user…
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability
MLflow
MLflow, an open-source machine learning platform for experiment tracking and model management, has a high-severity vulnerability (CVSS 7.8) that…
aws-mcp-server Command Injection Remote Code Execution Vulnerability
Foxit
Foxit is a widely-used PDF software company, and this high-severity vulnerability (CVSS 7.8) requires local access and user interaction but requires…
Adobe
Adobe, a major software vendor known for creative and productivity applications, has a high-severity vulnerability (CVSS 7.8) that requires local…
Adobe
Adobe has disclosed a low-severity local information disclosure vulnerability (CVE details pending) that requires user interaction to exploit but no…
Adobe
Adobe, a leading software company known for creative and productivity applications, has a low-severity local vulnerability (CVSS 3.3) that requires…
TrendAI
TrendAI is a vendor in the artificial intelligence security space.
TrendAI
TrendAI is a vendor in the artificial intelligence and machine learning security space.
Meta
Meta, a major social media and technology company, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no…
Meta
Meta, the social media and technology conglomerate, has a local privilege escalation vulnerability (CVSS 7.8) that requires user interaction but no…
Meta
Meta, the social media and technology giant, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no authentication…
Meta
Meta, the social media and technology conglomerate, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction to exploit but…
Meta
Meta, the social media and technology conglomerate, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no…
Meta
Meta, the social media and technology company behind Facebook, Instagram, and other platforms, has a local vulnerability with a CVSS score of 7.8…
Meta
Meta, the social media and technology conglomerate, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no…
Meta
Meta, the major social media and technology company, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no…
Meta
Meta, the social media and technology conglomerate, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no…
Meta
Meta, the social media and technology conglomerate, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no…
Meta
Meta, the parent company of Facebook, Instagram, and WhatsApp, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but…
Meta
Meta, the social media and technology conglomerate behind Facebook, Instagram, and other services, has a high-severity vulnerability (CVSS 7.8) that…
Meta
Meta, the social media and technology conglomerate, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no…
Meta
Meta, the social media and technology conglomerate, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction to exploit but…
Google has a local vulnerability (CVE pending) with a low CVSS score of 3.3, discovered by researcher Seiji Sakurai, that requires local access and…
Meta
Meta, a major technology and social media company, has a high-severity vulnerability (CVSS 7.8) that requires local access to exploit and user…
Meta
Meta, a major social media and technology company, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no…
Meta
Meta, the social media and technology conglomerate, has a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction but…
Meta
Meta, a major social media and technology company, has a high-severity local vulnerability (CVSS 7.8) that requires no authentication but does need…