ZDI Advisories
474 advisoriesZero Day Initiative vulnerability advisories – published disclosures and upcoming publications.
Meta
Meta, the social media and technology conglomerate behind Facebook, Instagram, and WhatsApp, has a high-severity local vulnerability (CVSS 7.8) that…
Meta
Meta, the social media and technology conglomerate behind Facebook, Instagram, and other platforms, has a high-severity local vulnerability (CVSS…
Meta
Meta, the parent company of Facebook, Instagram, and WhatsApp, has a high-severity vulnerability (CVSS 7.8) that requires local access and user…
ASUS
ASUS, a major manufacturer of consumer and enterprise computing hardware and components, has a high-severity local privilege escalation vulnerability…
Meta
Meta, the social media and technology conglomerate, has a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction but…
Meta
Meta, the parent company of Facebook, Instagram, and WhatsApp, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but…
GNU
GNU is the open-source software foundation behind widely-used tools like GCC compiler and core Linux utilities, making this vulnerability potentially…
Microsoft
Microsoft, a major software and cloud services provider, has a high-severity vulnerability (CVSS 7.6) that can be exploited remotely without…
Microsoft
Microsoft has a high-severity vulnerability (CVSS 7.5) that can be exploited remotely over the network without authentication, though it requires…
Trend Micro
Trend Micro is a major cybersecurity vendor that provides antivirus, endpoint protection, and cloud security solutions.
AzeoTech
AzeoTech is a software company known for industrial automation and SCADA/HMI (human-machine interface) platforms.
Microsoft
Microsoft has a high-severity vulnerability (CVSS 7.0) that requires local access and low-level user privileges to exploit, with potential to…
Microsoft
Microsoft has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires local access and low-level user privileges to…
Mozilla
Mozilla, the company behind the Firefox browser and related internet services, has a critical vulnerability (CVSS 8.8) that can be exploited remotely…
AzeoTech
AzeoTech is a software company known for industrial automation and SCADA control systems.
Microsoft
Microsoft has disclosed a low-severity local information disclosure vulnerability (CVSS 3.3) that requires user interaction to exploit but no…
Trend Micro
Trend Micro is a well-known cybersecurity software vendor specializing in antivirus, endpoint protection, and threat defense solutions.
Flowise
Flowise is an open-source platform for building AI applications and workflows.
Linux
Linux kernel vulnerability CVE classified as HIGH severity (CVSS 7.5) requires local access and high-level privileges to exploit, but can result in…
Flowise
Flowise is a popular open-source low-code platform for building AI applications and chatbots.
Docker
Docker, a leading containerization platform, has a high-severity vulnerability (CVSS 8.8) that requires local access and low-level user privileges to…
AOMEI
AOMEI, known for backup and disk utility software, has a high-severity vulnerability (CVSS 7.5) that allows unauthenticated remote attackers to…
Parallels
Parallels, known for virtualization and remote access software, has a high-severity vulnerability (CVSS 7.8) that requires local access and valid…
Parallels
Parallels, known for virtualization and desktop software solutions, has a high-severity vulnerability (CVSS 7.8) that requires local access and…
Parallels
Parallels, a well-known provider of virtualization and desktop management software, has a high-severity vulnerability (CVSS 7.8) that requires local…
Microsoft
Microsoft has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires local access and low-level user privileges to…
AOMEI
AOMEI is a software vendor known for backup, cloning, and disk management utilities commonly used in enterprise and consumer environments.
Flowise
Flowise is an open-source low-code platform for building AI applications, and this vulnerability has a high severity rating of 8.8.
OpenAI
OpenAI, the artificial intelligence company behind ChatGPT and related AI services, has a high-severity local vulnerability (CVSS 8.6) that requires…
Meta
Meta, the parent company of Facebook, Instagram, and WhatsApp, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but…