ZDI Advisories
716 advisoriesZero Day Initiative vulnerability advisories – published disclosures and upcoming publications.
Linux
Linux is the open-source operating system kernel used across servers, desktops, and embedded systems worldwide.
Apple macOS CoreMedia Framework Out-Of-Bounds Write Remote Code Execution Vulnerability
Apple macOS contains a remote code execution vulnerability (CVE-2026-20690) with a CVSS score of 8.8 that allows attackers to execute arbitrary code…
LiteLLM
LiteLLM is an open-source library that provides a unified interface for large language model APIs.
Foxit
Foxit is a well-known software company specializing in PDF readers and document management solutions.
Digilent DASYLab DSA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
Digilent DASYLab contains a remote code execution vulnerability (CVE-2026-0956) that allows attackers to execute arbitrary code on affected systems…
NoMachine External Control of File Path Arbitrary File Deletion Vulnerability
oFono
oFono is an open-source telephony framework for Linux that manages mobile broadband and voice communication.
OpenPrinting
OpenPrinting is a widely-used open-source printing system commonly integrated into Linux distributions and enterprise print servers.
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability
QNAP QHora-322 qvpn_db_mgr username SQL Injection Remote Code Execution Vulnerability
A critical vulnerability in QNAP QHora-322 routers (CVE-2025-62846) allows remote attackers to execute arbitrary code despite the presence of…
Foxit
Foxit is a well-known software company that develops PDF readers and document management solutions widely used in enterprise environments.
NoMachine External Control of File Path Local Privilege Escalation Vulnerability
Red Hat Enterprise Linux vmwgfx Driver Integer Overflow Local Privilege Escalation Vulnerability
A privilege escalation vulnerability identified as CVE-2025-40277 affects Red Hat Enterprise Linux, allowing local attackers with low-privileged code…
QNAP QHora-322 qvpn_db_mgr role_type Improper Neutralization of Escape Sequences Authentication Bypass Vulnerability
QNAP QHora-322 routers contain an authentication bypass vulnerability (CVE-2025-62845) that allows remote attackers to circumvent the device's…
Adobe
Adobe, a major software company known for creative and productivity applications, has a high-severity local vulnerability (CVSS 7.8) that requires…
Adobe
Adobe, a major software vendor known for creative and productivity applications, has a high-severity vulnerability (CVSS 7.8) that requires local…
Adobe
Adobe has disclosed a low-severity local information disclosure vulnerability (CVE details pending) that requires user interaction to exploit but no…
Adobe
Adobe, a leading software company known for creative and productivity applications, has a low-severity local vulnerability (CVSS 3.3) that requires…
TrendAI
TrendAI is a vendor in the artificial intelligence and machine learning security space.
TrendAI
TrendAI is a vendor in the artificial intelligence security space.
Meta
Meta, the social media and technology company behind Facebook, Instagram, and other platforms, has a high-severity vulnerability (CVSS 7.8) that…
Meta
Meta, a major social media and technology company, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no…
Meta
Meta, a major social media and technology company, has a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction to…
Meta
Meta, the social media and technology conglomerate, has a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction but…
Meta
Meta, the social media and technology conglomerate, has a local privilege escalation vulnerability (CVSS 7.8) that requires user interaction but no…
Meta
Meta, the parent company of Facebook, Instagram, and WhatsApp, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but…
Meta
Meta, a major social media and technology company, has a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction to…
Meta
Meta, the social media and technology conglomerate, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but requires no…
Meta
Meta, a major social media and technology company, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no…
Meta
Meta, the social media and technology conglomerate, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction to exploit but…