Zero Day Initiative (Published)

Uebersicht

Letzter Fetch Letzter Erfolg Aufeinanderfolgende Fehler Letzte Fehlermeldung ETag Last-Modified
2026-10-21 13:03 UTC 2026-10-21 13:03 UTC 0 - - -

Letzte Eintraege

668 Eintraege · 50 pro Seite · Seite 11 von 14

Veroeffentlicht Titel CVEs EPSS-Pctl Severity
2026-04-15 05:00

ZDI-26-263: Adobe ColdFusion subscribeToEndpoints Authentication Bypass Vulnerability

CVE-2026-27282

HIGH
2026-04-15 05:00

ZDI-26-270: TrendAI Apex One Console Directory Traversal Remote Code Execution Vulnerability

CVE-2025-54987

CRITICAL
2026-04-15 05:00

ZDI-26-268: Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability

CVE-2026-25203

HIGH
2026-04-15 05:00

ZDI-26-291: NI LabVIEW LVCLASS File Parsing Memory Corruption Remote Code Execution Vulnerability

CVE-2026-32861

HIGH
2026-04-15 05:00

ZDI-26-267: Malwarebytes Anti-Malware Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

—

-
2026-04-15 05:00

ZDI-26-266: Fortinet FortiWeb cat_cgi_paths Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2026-40688

MEDIUM
2026-04-15 05:00

ZDI-26-264: Adobe ColdFusion fetchCFSettingFile Directory Traversal Information Disclosure Vulnerability

CVE-2026-27305

HIGH
2026-04-15 05:00

ZDI-26-273: Microsoft Olive Deserialization of Untrusted Data Remote Code Execution Vulnerability

—

-
2026-04-15 05:00

ZDI-26-285: DriveLock Directory Traversal Information Disclosure Vulnerability

CVE-2026-5489

-
2026-04-15 05:00

ZDI-26-275: Microsoft Qlib _mount_nfs_uri Command Injection Remote Code Execution Vulnerability

—

-
2026-04-15 05:00

ZDI-26-272: ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability

CVE-2026-5057

-
2026-04-15 05:00

ZDI-26-265: Fortinet FortiWeb cgi_buf_alloc Integer Overflow Denial-of-Service Vulnerability

CVE-2026-39811

MEDIUM
2026-04-15 05:00

ZDI-26-269: TrendAI Apex One Console Directory Traversal Remote Code Execution Vulnerability

CVE-2025-54948

CRITICAL
2026-04-15 05:00

ZDI-26-286: DriveLock SQL Injection Privilege Escalation Vulnerability

CVE-2026-5490

-
2026-04-15 05:00

ZDI-26-261: (0Day) Docker Desktop credentialHelper Directory Traversal Privilege Escalation Vulnerability

—

-
2026-04-15 05:00

ZDI-26-289: Linux Kernel ETS Scheduler Race Condition Local Privilege Escalation Vulnerability

CVE-2025-71066

HIGH
2026-04-15 05:00

ZDI-26-280: (Pwn2Own) HP DeskJet 2855e JobStatusEvent Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2026-4682

HIGH
2026-04-15 05:00

ZDI-26-282: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2026-2050

HIGH
2026-04-15 05:00

ZDI-26-290: NI LabVIEW LVLIB File Parsing Memory Corruption Remote Code Execution Vulnerability

CVE-2026-32860

HIGH
2026-04-15 05:00

ZDI-26-287: DriveLock Directory Traversal Information Disclosure Vulnerability

CVE-2026-5491

-
2026-04-15 05:00

ZDI-26-284: DriveLock Directory Traversal Information Disclosure Vulnerability

CVE-2026-5487

-
2026-04-15 05:00

ZDI-26-283: GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2026-5056

-
2026-04-15 05:00

ZDI-26-281: Microsoft vcpkg OpenSSL Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

CVE-2026-34054

HIGH
2026-04-15 05:00

ZDI-26-279: Microsoft Windows Snipping Tool Improper Input Validation Remote Code Execution Vulnerability

CVE-2026-32183

HIGH
2026-04-15 05:00

ZDI-26-274: Microsoft Qlib fit Deserialization of Untrusted Data Remote Code Execution Vulnerability

—

-
2026-04-15 05:00

ZDI-26-278: Microsoft Windows win32kfull Improper Locking Local Privilege Escalation Vulnerability

CVE-2026-33104

HIGH
2026-04-15 05:00

ZDI-26-277: Microsoft Windows afd.sys Race Condition Local Privilege Escalation Vulnerability

CVE-2026-32073

HIGH
2026-04-15 05:00

ZDI-26-276: Microsoft Windows Secure Kernel Double Free Local Privilege Escalation Vulnerability

CVE-2026-26179

HIGH
2026-04-15 05:00

ZDI-26-271: Avast Premium Security Gen Self Protection Driver Exposed Dangerous Function Local Privilege Escalation Vulnerability

CVE-2026-5424

-
2026-04-06 05:00

ZDI-26-254: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Type Confusion Remote Code Execution Vulnerability

CVE-2026-5496

HIGH
2026-04-06 05:00

ZDI-26-257: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2026-5495

HIGH
2026-04-06 05:00

ZDI-26-256: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2026-5494

HIGH
2026-04-06 05:00

ZDI-26-255: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2026-5493

HIGH
2026-04-02 05:00

ZDI-26-251: Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

CVE-2026-3775

HIGH
2026-04-02 05:00

ZDI-26-253: Microsoft Visual Studio Code mcp.json Command Injection Remote Code Execution Vulnerability

CVE-2026-21518

HIGH
2026-04-02 05:00

ZDI-26-252: Mozilla Firefox IonMonkey Switch Statement Optimization Type Confusion Remote Code Execution Vulnerability

CVE-2026-4698

CRITICAL
2026-03-31 05:00

ZDI-26-250: Linux Kernel Analog Device Driver Improper Validation of Array Index Local Privilege Escalation Vulnerability

CVE-2026-23092

-
2026-03-30 05:00

ZDI-26-248: NoMachine External Control of File Path Local Privilege Escalation Vulnerability

CVE-2026-5054

HIGH
2026-03-30 05:00

ZDI-26-249: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

CVE-2026-5055

HIGH
2026-03-30 05:00

ZDI-26-244: (Pwn2Own) QNAP QHora-322 miro_webserver_controllers_api_login_singIn Authentication Bypass Vulnerability

CVE-2024-13088

MEDIUM
2026-03-30 05:00

ZDI-26-243: (Pwn2Own) QNAP TS-453E write_file_to_svr External Control of File Path Remote Code Execution Vulnerability

CVE-2025-62842

HIGH
2026-03-30 05:00

ZDI-26-242: (Pwn2Own) QNAP TS-453E server_handlers.pyc rr2s.kwargs Error Message Information Disclosure Vulnerability

CVE-2025-62840

HIGH
2026-03-30 05:00

ZDI-26-240: (Pwn2Own) QNAP QHora-322 qvpn_db_mgr role_type Improper Neutralization of Escape Sequences Authentication Bypass Vulnerability

CVE-2025-62845

MEDIUM
2026-03-30 05:00

ZDI-26-237: (Pwn2Own) QNAP QHora-322 ip6_wanifset Improper Restriction of Communication Channel to Intended Endpoints Firewall Bypass Vulnerability

CVE-2025-62843

LOW
2026-03-30 05:00

ZDI-26-236: Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2026-0954

HIGH
2026-03-30 05:00

ZDI-26-234: Digilent DASYLab DSA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

CVE-2026-0956

HIGH
2026-03-30 05:00

ZDI-26-232: (Pwn2Own) Red Hat Enterprise Linux vmwgfx Driver Integer Overflow Local Privilege Escalation Vulnerability

CVE-2025-40277

-
2026-03-30 05:00

ZDI-26-231: Apple macOS Exposure of Sensitive Information to Unauthorized Sphere Information Disclosure Vulnerability

CVE-2026-20695

MEDIUM
2026-03-30 05:00

ZDI-26-230: Apple macOS CoreMedia Framework Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2026-20690

MEDIUM
2026-03-30 05:00

ZDI-26-229: OpenClaw Client PKCE Verifier Information Disclosure Vulnerability

CVE-2026-3691

MEDIUM