BaselineWatch
8727 unread
Desk
Register Tracker canaries (EasyPrivacy) 202610271409: first version Tue 27 Oct·Ad canaries (EasyList) 202610271405: 2 changed Tue 27 Oct·NIST SP 800-171 Rev 3 (CUI; CMMC Level 2) OSCAL 1.1.0: first version Thu 22 Oct·the register

News · Zero Day Initiative: upcoming advisories

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-30361: Docker

    A CVSS score 7.5 AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Florian K' was reported to the affected vendor on: 2026-09-03, 55 days ago. The vendor is given until 2027-01-01 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32649: LiteLLM

    A CVSS score 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N severity vulnerability discovered by 's3zer0' was reported to the affected vendor on: 2026-09-03, 55 days ago. The vendor is given until 2027-01-01 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32773: Dassault Systèmes

    A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'kai63001' was reported to the affected vendor on: 2026-09-03, 55 days ago. The vendor is given until 2027-01-01 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-30555: Microsoft

    A CVSS score 7.5 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Kyeongmin Kim (@hareh4ru) of KAIST Hacking Lab' was reported to the affected vendor on: 2026-09-03, 55 days ago. The vendor is given until 2027-01-01 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32580: Microsoft

    A CVSS score 3.3 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N severity vulnerability discovered by 'Len Sadowski (lytnc) and Oğuz Bektaş (_ozb_)' was reported to the affected vendor on: 2026-09-03, 55 days ago. The vendor is given until 2027-01-01 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32263: Microsoft

    A CVSS score 3.3 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N severity vulnerability discovered by 'Len Sadowski (lytnc) and Oğuz Bektaş (_ozb_)' was reported to the affected vendor on: 2026-09-03, 55 days ago. The vendor is given until 2027-01-01 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32257: Microsoft

    A CVSS score 3.3 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N severity vulnerability discovered by 'Len Sadowski (lytnc) and Oğuz Bektaş (_ozb_)' was reported to the affected vendor on: 2026-09-03, 55 days ago. The vendor is given until 2027-01-01 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32869: Linux

    A CVSS score 7.8 AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'caveeroo' was reported to the affected vendor on: 2026-09-03, 55 days ago. The vendor is given until 2027-01-01 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-28931: AOMEI

    A CVSS score 4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-09-03, 55 days ago. The vendor is given until 2027-01-01 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32224: NVIDIA

    A CVSS score 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'YJK(@YJK0805) of ZUSO ART' was reported to the affected vendor on: 2026-09-02, 56 days ago. The vendor is given until 2026-12-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32542: NVIDIA

    A CVSS score 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Habibullo Izzatilloyev' was reported to the affected vendor on: 2026-09-02, 56 days ago. The vendor is given until 2026-12-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-34034: VMware

    A CVSS score 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'NiNi (@terrynini38514) from the DEVCORE Research Team' was reported to the affected vendor on: 2026-09-02, 56 days ago. The vendor is given until 2026-12-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-33657: FLIR

    A CVSS score 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N severity vulnerability discovered by 'Dmitry "InfoSecDJ" Janushkevich of TrendAI Zero Day Initiative' was reported to the affected vendor on: 2026-09-02, 56 days ago. The vendor is given until 2026-12-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-33360: Linux

    A CVSS score 7.5 AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'GangMin Kim' was reported to the affected vendor on: 2026-09-02, 56 days ago. The vendor is given until 2026-12-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-33385: Devin

    A CVSS score 7.3 AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Xavier DANEST' was reported to the affected vendor on: 2026-09-02, 56 days ago. The vendor is given until 2026-12-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32061: X.Org

    A CVSS score 8.8 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Adam Bedard' was reported to the affected vendor on: 2026-09-02, 56 days ago. The vendor is given until 2026-12-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32093: X.Org

    A CVSS score 8.8 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Adam Bedard' was reported to the affected vendor on: 2026-09-02, 56 days ago. The vendor is given until 2026-12-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-31888: X.Org

    A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Adam Bedard' was reported to the affected vendor on: 2026-09-02, 56 days ago. The vendor is given until 2026-12-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32436: Linux

    A CVSS score 6.3 AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-09-02, 56 days ago. The vendor is given until 2026-12-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-31365: ASUS

    A CVSS score 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by '0x0dee' was reported to the affected vendor on: 2026-09-02, 56 days ago. The vendor is given until 2026-12-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32416: RAGFlow

    A CVSS score 5.0 AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N severity vulnerability discovered by 'Connor Kastner (ret2c)' was reported to the affected vendor on: 2026-08-28, 61 days ago. The vendor is given until 2026-12-26 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32895: Autodesk

    A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'ub1cu0' was reported to the affected vendor on: 2026-08-28, 61 days ago. The vendor is given until 2026-12-26 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32191: NVIDIA

    A CVSS score 8.0 AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Flydragon @ TRAPA Security' was reported to the affected vendor on: 2026-08-28, 61 days ago. The vendor is given until 2026-12-26 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32231: NVIDIA

    A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'YJK(@YJK0805) of ZUSO ART' was reported to the affected vendor on: 2026-08-28, 61 days ago. The vendor is given until 2026-12-26 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-33973: Docker

    A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Nitesh Surana (niteshsurana.com) of TrendAI Research' was reported to the affected vendor on: 2026-08-28, 61 days ago. The vendor is given until 2026-12-26 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-31254: PostgreSQL

    A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Sajeeb Lohani' was reported to the affected vendor on: 2026-08-27, 62 days ago. The vendor is given until 2026-12-25 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-33090: Philips

    A CVSS score 3.8 AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N severity vulnerability discovered by 'Connor Ford @ByteInsight of TrendAI Zero Day Initiative' was reported to the affected vendor on: 2026-08-27, 62 days ago. The vendor is given until 2026-12-25 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-33088: Philips

    A CVSS score 4.3 AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N severity vulnerability discovered by 'Connor Ford @ByteInsight of TrendAI Zero Day Initiative' was reported to the affected vendor on: 2026-08-27, 62 days ago. The vendor is given until 2026-12-25 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32710: LiteLLM

    A CVSS score 5.3 AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N severity vulnerability discovered by 'Connor Kastner (ret2c)' was reported to the affected vendor on: 2026-08-26, 63 days ago. The vendor is given until 2026-12-24 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32834: PyTorch Foundation

    A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'YJK(@YJK0805) of ZUSO ART' was reported to the affected vendor on: 2026-08-26, 63 days ago. The vendor is given until 2026-12-24 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32531: NVIDIA

    A CVSS score 8.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'YJK(@YJK0805) of ZUSO ART' was reported to the affected vendor on: 2026-08-26, 63 days ago. The vendor is given until 2026-12-24 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-31929: Docker

    A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'chwrld (@chwrld24)' was reported to the affected vendor on: 2026-08-26, 63 days ago. The vendor is given until 2026-12-24 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32601: PyTorch Foundation

    A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'YJK(@YJK0805) of ZUSO ART' was reported to the affected vendor on: 2026-08-26, 63 days ago. The vendor is given until 2026-12-24 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32822: LiteLLM

    A CVSS score 5.0 AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N severity vulnerability discovered by 'NURIHAN KIM (HanTul)' was reported to the affected vendor on: 2026-08-26, 63 days ago. The vendor is given until 2026-12-24 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32376: Ultralytics

    A CVSS score 8.8 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-08-26, 63 days ago. The vendor is given until 2026-12-24 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32530: NVIDIA

    A CVSS score 8.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'YJK(@YJK0805) of ZUSO ART' was reported to the affected vendor on: 2026-08-26, 63 days ago. The vendor is given until 2026-12-24 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-33089: Philips

    A CVSS score 8.0 AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Connor Ford @ByteInsight of TrendAI Zero Day Initiative' was reported to the affected vendor on: 2026-08-25, 64 days ago. The vendor is given until 2026-12-23 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32353: Netgate

    A CVSS score 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Alex Williams from Pellera Technologies' was reported to the affected vendor on: 2026-08-25, 64 days ago. The vendor is given until 2026-12-23 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-33896: Net-SNMP

    A CVSS score 7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Rocco Calvi (@TecR0c) with TecSecurity' was reported to the affected vendor on: 2026-08-25, 64 days ago. The vendor is given until 2026-12-23 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-29528: Net-SNMP

    A CVSS score 7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Rocco Calvi (@TecR0c) with TecSecurity' was reported to the affected vendor on: 2026-08-25, 64 days ago. The vendor is given until 2026-12-23 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-33895: Net-SNMP

    A CVSS score 7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Rocco Calvi (@TecR0c) with TecSecurity' was reported to the affected vendor on: 2026-08-25, 64 days ago. The vendor is given until 2026-12-23 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-33087: Philips

    A CVSS score 6.5 AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H severity vulnerability discovered by 'Connor Ford @ByteInsight of TrendAI Zero Day Initiative' was reported to the affected vendor on: 2026-08-25, 64 days ago. The vendor is given until 2026-12-23 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-29529: Net-SNMP

    A CVSS score 7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Rocco Calvi (@TecR0c) with TecSecurity' was reported to the affected vendor on: 2026-08-25, 64 days ago. The vendor is given until 2026-12-23 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32927: Linux

    A CVSS score 7.8 AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Nico Yip (@_cyeaa_)' was reported to the affected vendor on: 2026-08-25, 64 days ago. The vendor is given until 2026-12-23 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32092: FreeBSD

    A CVSS score 7.5 AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'MICHAEL RANDRIANANTENAINA [https://elkamika.blogspot.com/]' was reported to the affected vendor on: 2026-08-25, 64 days ago. The vendor is given until 2026-12-23 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32836: Adobe

    A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-08-25, 64 days ago. The vendor is given until 2026-12-23 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32513: Autodesk

    A CVSS score 3.3 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N severity vulnerability discovered by 'Liang Zhu' was reported to the affected vendor on: 2026-08-21, 68 days ago. The vendor is given until 2026-12-19 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32508: Autodesk

    A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Liang Zhu' was reported to the affected vendor on: 2026-08-21, 68 days ago. The vendor is given until 2026-12-19 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-32177: Autodesk

    A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Liang Zhu' was reported to the affected vendor on: 2026-08-21, 68 days ago. The vendor is given until 2026-12-19 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

  • Zero Day Initiative: upcoming advisories

    ZDI-CAN-33567: SmarterTools

    A CVSS score 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N severity vulnerability discovered by 'Shaber Tseng' was reported to the affected vendor on: 2026-08-20, 63 days ago. The vendor is given until 2026-12-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

Older