News · Zero Day Initiative: upcoming advisories

• Zero Day Initiative: upcoming advisories Mon 26 Oct

  ZDI-CAN-34791: Open Asset Importer Library

  A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Mirae' was reported to the affected vendor on: 2026-10-26, 2 days ago. The vendor is given until 2027-02-23 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories Fri 23 Oct

  ZDI-CAN-33564: Adobe

  A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-10-23, 5 days ago. The vendor is given until 2027-02-20 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories Fri 23 Oct

  ZDI-CAN-32728: Siemens

  A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Berat.I' was reported to the affected vendor on: 2026-10-23, 5 days ago. The vendor is given until 2027-02-20 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories Fri 23 Oct

  ZDI-CAN-33565: Adobe

  A CVSS score 3.3 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-10-23, 5 days ago. The vendor is given until 2027-02-20 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories Fri 23 Oct

  ZDI-CAN-36541: NVIDIA

  A CVSS score 8.8 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Brandon Evans (@0x1nsomnia), Michael DePlante (@izobashi), and John Simpson (@Thracky) of TrendAI Zero Day Initiative' was reported to the affected vendor on: 2026-10-23, 5 days ago. The vendor is given until 2027-02-20 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories Fri 23 Oct

  ZDI-CAN-29632: Siemens

  A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'gardenchair' was reported to the affected vendor on: 2026-10-23, 5 days ago. The vendor is given until 2027-02-20 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories Fri 23 Oct

  ZDI-CAN-32726: Siemens

  A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Berat.\xc4\xb0' was reported to the affected vendor on: 2026-10-23, 5 days ago. The vendor is given until 2027-02-20 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories Fri 23 Oct

  ZDI-CAN-29891: Siemens

  A CVSS score 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N severity vulnerability discovered by 'Rocco Calvi (@TecR0c) with TecSecurity' was reported to the affected vendor on: 2026-10-23, 5 days ago. The vendor is given until 2027-02-20 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories Fri 23 Oct

  ZDI-CAN-34171: Adobe

  A CVSS score 3.3 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-10-23, 5 days ago. The vendor is given until 2027-02-20 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories Thu 22 Oct

  ZDI-CAN-36560: Apple

  A CVSS score 8.8 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative' was reported to the affected vendor on: 2026-10-22, 6 days ago. The vendor is given until 2027-02-19 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-36406: Microsoft

  A CVSS score 3.3 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N severity vulnerability discovered by 'Lucas Miller of TrendAI Research' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-31686: Zabbix

  A CVSS score 7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Seokchan Yoon (https://ch4n3.kr)' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-34346: e2fsprogs

  A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'lucasfutures' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-34340: Net-SNMP

  A CVSS score 7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-33774: Linux

  A CVSS score 9.0 AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Hyeontae Lee' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-33367: Linux

  A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'p1r0x' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-34125: X.Org

  A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'WONJOON HWANG (@joon1337)' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-33760: X.Org

  A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-33549: Linux

  A CVSS score 9.0 AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'HYEONTAE LEE' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-34008: X.Org

  A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Elias Myllym\xc3\xa4ki' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-34076: Linux

  A CVSS score 8.6 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N severity vulnerability discovered by 'Hyeontae Lee' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-35258: X.Org

  A CVSS score 3.3 AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N severity vulnerability discovered by 'Minse Kim (s3min141)' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-34127: X.Org

  A CVSS score 3.3 AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N severity vulnerability discovered by 'WONJOON HWANG (@joon1337)' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-33757: X.Org

  A CVSS score 5.5 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-35179: Netdata

  A CVSS score 7.0 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'welpsigh' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-34344: e2fsprogs

  A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'lucasfutures' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-33779: X.Org

  A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Minse Kim (s3min141)' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-34825: Clam AntiVirus

  A CVSS score 7.0 AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Alex Williams from Pellera Technologies' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-33759: X.Org

  A CVSS score 7.0 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-34068: Linux

  A CVSS score 8.8 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Leonardo Mazzorana, z0v3r1n' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-34495: Clam AntiVirus

  A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Alex Williams from Pellera Technologies' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 21 Oct

  ZDI-CAN-33882: FreeBSD

  A CVSS score 8.8 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-10-21, 7 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 19 Oct

  ZDI-CAN-32005: ConnMan

  A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Mantas Sabeckis @otterly' was reported to the affected vendor on: 2026-10-19, 9 days ago. The vendor is given until 2027-02-16 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 19 Oct

  ZDI-CAN-31454: ESET

  A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Christo Erasmus and Matt Bouffe of MWR CyberSec' was reported to the affected vendor on: 2026-10-19, 9 days ago. The vendor is given until 2027-02-16 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 19 Oct

  ZDI-CAN-34762: Netgate

  A CVSS score 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Antonio GIordano' was reported to the affected vendor on: 2026-10-19, 9 days ago. The vendor is given until 2027-02-16 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 14 Oct

  ZDI-CAN-31758: NVIDIA

  A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'YJK(@YJK0805) of ZUSO ART' was reported to the affected vendor on: 2026-10-14, 14 days ago. The vendor is given until 2027-02-11 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 14 Oct

  ZDI-CAN-33522: Microsoft

  A CVSS score 7.7 AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Lucas Miller of TrendAI Research' was reported to the affected vendor on: 2026-10-14, 14 days ago. The vendor is given until 2027-02-11 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 14 Oct

  ZDI-CAN-32462: Samba

  A CVSS score 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-10-14, 14 days ago. The vendor is given until 2027-02-11 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 9 Oct

  ZDI-CAN-31442: mySCADA

  A CVSS score 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Jonathan Crosby (bitwize)' was reported to the affected vendor on: 2026-10-09, 19 days ago. The vendor is given until 2027-02-06 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 9 Oct

  ZDI-CAN-31412: mySCADA

  A CVSS score 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Jonathan Crosby (bitwize)' was reported to the affected vendor on: 2026-10-09, 19 days ago. The vendor is given until 2027-02-06 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 9 Oct

  ZDI-CAN-33831: Microsoft

  A CVSS score 6.3 AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H severity vulnerability discovered by 'Lucas Miller of TrendAI Research' was reported to the affected vendor on: 2026-10-09, 19 days ago. The vendor is given until 2027-02-06 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 9 Oct

  ZDI-CAN-33293: libgme

  A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'yeee3642 from Bamboo Fox' was reported to the affected vendor on: 2026-10-09, 19 days ago. The vendor is given until 2027-02-06 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 9 Oct

  ZDI-CAN-33521: Microsoft

  A CVSS score 8.6 AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Lucas Miller of TrendAI Research' was reported to the affected vendor on: 2026-10-09, 19 days ago. The vendor is given until 2027-02-06 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 9 Oct

  ZDI-CAN-33523: Microsoft

  A CVSS score 7.7 AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Lucas Miller of TrendAI Research' was reported to the affected vendor on: 2026-10-09, 19 days ago. The vendor is given until 2027-02-06 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 9 Oct

  ZDI-CAN-33830: Microsoft

  A CVSS score 8.6 AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Lucas Miller of TrendAI Research' was reported to the affected vendor on: 2026-10-09, 19 days ago. The vendor is given until 2027-02-06 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 9 Oct

  ZDI-CAN-33446: Microsoft

  A CVSS score 8.6 AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Lucas Miller of TrendAI Research' was reported to the affected vendor on: 2026-10-09, 19 days ago. The vendor is given until 2027-02-06 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 8 Oct

  ZDI-CAN-31705: Avira

  A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'YJK(@YJK0805) of ZUSO ART' was reported to the affected vendor on: 2026-10-08, 20 days ago. The vendor is given until 2027-02-05 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 8 Oct

  ZDI-CAN-34061: Fuji Electric

  A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'KMG' was reported to the affected vendor on: 2026-10-08, 20 days ago. The vendor is given until 2027-02-05 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 8 Oct

  ZDI-CAN-32740: Parallels

  A CVSS score 8.8 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Ankur Saini' was reported to the affected vendor on: 2026-10-08, 20 days ago. The vendor is given until 2027-02-05 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
• Zero Day Initiative: upcoming advisories 8 Oct

  ZDI-CAN-33457: Apple

  A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Musaab Khan (@bxff)' was reported to the affected vendor on: 2026-10-08, 20 days ago. The vendor is given until 2027-02-05 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

Older