Skip to main content

ZDI Advisories

658 advisories

Zero Day Initiative vulnerability advisories – published disclosures and upcoming publications.

ZDI-26-494 7.8 CVE-2026-43729 Apple Jul 29, 2026

Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-477 7.8 CVE-2026-18284 Sony Jul 29, 2026

Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability

ZDI-26-480 9.8 CVE-2026-18265 OSNEXUS Jul 29, 2026

OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability

ZDI-26-466 7.8 CVE-2026-18298 GStreamer Jul 29, 2026

GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-472 8.8 CVE-2026-18279 Sony Jul 29, 2026

Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-471 3.5 CVE-2026-18278 Sony Jul 29, 2026

Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-26-473 3.9 CVE-2026-18280 Sony Jul 29, 2026

Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability

ZDI-26-493 7.8 CVE-2026-43733 Apple Jul 29, 2026

Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-481 8.8 CVE-2026-59690 Progress Jul 29, 2026

Progress Software Kemp LoadMaster access Missing Authorization Privilege Escalation Vulnerability

ZDI-26-465 7.8 CVE-2026-18297 GStreamer Jul 29, 2026

GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-474 8.0 CVE-2026-18281 Sony Jul 29, 2026

Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-461 7.8 CVE-2026-18308 GIMP Jul 29, 2026

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

ZDI-26-453 7.8 CVE-2026-18300 GIMP Jul 29, 2026

GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability

ZDI-26-475 8.0 CVE-2026-18282 Sony Jul 29, 2026

Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-476 2.4 CVE-2026-18283 Sony Jul 29, 2026

Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability

ZDI-26-470 7.8 CVE-2026-18287 Aeon Jul 29, 2026

Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability

ZDI-26-455 7.8 CVE-2026-18302 GIMP Jul 29, 2026

GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-454 7.8 CVE-2026-18301 GIMP Jul 29, 2026

GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability

ZDI-26-501 7.2 CVE-2026-13054 WatchGuard Jul 29, 2026

WatchGuard FireWare OS sigd comp_start_cb Directory Traversal Arbitrary File Creation Vulnerability

ZDI-26-482 8.8 CVE-2026-59689 Progress Jul 29, 2026

Progress Software Kemp LoadMaster enablexroot Use of Hard-Coded Cryptographic Key Privilege Escalation Vulnerability

ZDI-26-456 7.8 CVE-2026-18303 GIMP Jul 29, 2026

GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-484 6.8 CVE-2026-18267 Kenwood Jul 29, 2026

Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability

ZDI-26-483 8.8 CVE-2026-18264 NoMachine Jul 29, 2026

NoMachine getstat Command Injection Remote Code Execution Vulnerability

ZDI-26-463 7.8 CVE-2026-18295 GStreamer Jul 29, 2026

GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-26-464 7.8 CVE-2026-18296 GStreamer Jul 29, 2026

GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-500 7.2 CVE-2026-13050 WatchGuard Jul 29, 2026

WatchGuard FireWare OS networkd network_wireless_kick_off_user_cb Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-459 7.8 CVE-2026-18306 GIMP Jul 29, 2026

GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability

ZDI-26-457 7.8 CVE-2026-18304 GIMP Jul 29, 2026

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

ZDI-26-458 7.8 CVE-2026-18305 GIMP Jul 29, 2026

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

ZDI-26-487 7.8 CVE-2026-18270 Kenwood Jul 29, 2026

Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Prev Page 8 of 22 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy