ZDI Advisories

VMware Workstation PVSCSI Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

CVE-2025-41238 is a privilege escalation vulnerability in VMware Workstation with a high severity rating of 8.2 that allows local attackers to gain…

Linux Kernel nf_tables_newset Out-Of-Bounds Write Information Disclosure Vulnerability

This vulnerability in the Linux Kernel allows local attackers to read sensitive information on affected systems, but requires them to already have…

VMware ESXi VMXNET3 Integer Overflow Local Privilege Escalation Vulnerability

VMware ESXi contains a privilege escalation vulnerability (CVE-2025-41236) with a CVSS score of 8.2 that allows attackers with high-privileged code…

QNAP TS-453E Hyper Data Protector Plugin Hard-Coded Credentials Authentication Bypass Vulnerability

A medium-severity authentication bypass vulnerability (CVE-2025-59388) affects QNAP TS-453E NAS devices, allowing network-adjacent attackers to gain…

Synology DiskStation Manager Netatalk Library Buffer Overflow Remote Code Execution Vulnerability

Synology DiskStation Manager contains a critical remote code execution vulnerability (CVE-2022-45188) with a CVSS score of 9.8 that requires no…

VMware ESXi VMCI Integer Underflow Local Privilege Escalation Vulnerability

VMware ESXi is vulnerable to a local privilege escalation attack (CVE-2025-41237) rated as HIGH severity with a CVSS score of 8.2, requiring…

Bitdefender

Bitdefender is a major cybersecurity software vendor known for antivirus and endpoint protection products.

Adobe

Adobe, a leading software company known for creative and document processing applications, has a high-severity local vulnerability (CVSS 7.0) that…

ATEN

ATEN is a well-known manufacturer of IT infrastructure and KVM switch solutions used in data centers and enterprise environments.

ATEN

ATEN is a well-known manufacturer of IT infrastructure and KVM switch solutions used in data centers and enterprise environments.

ATEN

ATEN is a well-known manufacturer of IT infrastructure and KVM switch solutions used for data center and remote management.

ATEN

ATEN is a Taiwan-based manufacturer of IT infrastructure and KVM switching solutions widely used in data centers and server environments.

ATEN

ATEN is a manufacturer of IT infrastructure and remote management products, particularly known for KVM switches and data center management solutions.

ATEN

ATEN is a well-known manufacturer of IT infrastructure and KVM switch products used widely in data centers and enterprise environments.

GStreamer

GStreamer is a widely-used open-source multimedia framework used for audio and video processing across many applications and operating systems.

OriginLab

OriginLab is a scientific data analysis and graphing software company known for their Origin product suite used in research and engineering.

Bosch Rexroth

Bosch Rexroth, a major industrial automation and hydraulics manufacturer, has a high-severity vulnerability (CVSS 7.8) that requires local access and…

Bosch Rexroth

Bosch Rexroth, a major industrial automation and hydraulics company, has a high-severity vulnerability (CVSS 7.8) that requires local access and user…

Samba

Samba is a widely-used open-source software suite that enables file sharing and printing services across Windows and Unix networks.

OriginLab

OriginLab is a software company known for scientific data analysis and graphing tools, primarily their Origin product used in research and…

Microsoft Windows win32kfull Improper Locking Local Privilege Escalation Vulnerability

CVE-2026-23668 is a high-severity privilege escalation vulnerability in Microsoft Windows that allows local attackers to gain elevated system…

Microsoft Windows win32full Improper Release Local Privilege Escalation Vulnerability

This vulnerability is a privilege escalation flaw in Microsoft Windows (CVE-2026-24285) that allows attackers with low-level code execution to gain…

G DATA

G DATA is a well-known German cybersecurity company that develops antivirus and endpoint protection software.

Microsoft Windows cdd Improper Locking Local Privilege Escalation Vulnerability

A privilege escalation vulnerability (CVE-2026-23668) in Microsoft Windows allows attackers who already have low-level code execution to gain…

Fortinet FortiClient Link Following Local Privilege Escalation Vulnerability

A high-severity privilege escalation vulnerability exists in Fortinet FortiClient that allows local attackers with low-privileged code execution to…

Array Networks MotionPro ArrayInstallManager Incorrect Permission Assignment Local Privilege Escalation Vulnerability

A privilege escalation vulnerability (CVE-2026-26364) in Array Networks MotionPro allows attackers with low-level code execution to gain elevated…

Microsoft Windows GDI Bitmap Parsing Out-Of-Bound Read Information Disclosure Vulnerability

This vulnerability in Microsoft Windows GDI library allows remote attackers to access sensitive information without requiring user authentication.

Microsoft Windows win32full Improper Release Local Privilege Escalation Vulnerability

A privilege escalation vulnerability (CVE-2026-24285) has been identified in Microsoft Windows with a CVSS score of 7.8.

Microsoft Windows cdd Improper Locking Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability in Microsoft Windows (CVE-2026-23668) allows attackers with low-level code execution to gain elevated…

Apple macOS ImageIO SGI File Parsing Integer Overflow Remote Code Execution Vulnerability

CVE-2026-20675 is a high-severity remote code execution vulnerability in Apple's macOS ImageIO library that allows attackers to execute arbitrary…