advisories

Zero Day Initiative advisories Microsoft Jul 15

ZDI-26-416: Microsoft Hyper-V netvsc Out-Of-Bounds Read Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Hyper-V. An attacker must first obtain the ability to...

T1548 T1068 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Microsoft Jul 15

ZDI-26-415: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to...

T1548 T1068 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Microsoft Jul 15

ZDI-26-414: Microsoft PowerShell Help Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft PowerShell. User interaction is required to explo...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Microsoft Jul 15

ZDI-26-413: (Pwn2Own) Microsoft SharePoint Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint. Authentication is not required to exp...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Microsoft Jul 15

ZDI-26-412: (Pwn2Own) Microsoft SharePoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint. Authentication is not required to exp...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories NVIDIA Jul 15

ZDI-26-411: NVIDIA NVTabular Pickle File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA NVTabular. User interaction is required to exploit t...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories NVIDIA Jul 15

ZDI-26-410: NVIDIA NeMo Framework Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA NeMo Framework. User interaction is required to expl...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Jul 15

ZDI-26-409: X.Org Server Glamor Font Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server.

T1548 2 IOCs

Zero Day Initiative → Details

Zero Day Initiative advisories Jul 15

ZDI-26-408: X.Org Server ComputeScaledProperties Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server.

T1548 2 IOCs

Zero Day Initiative → Details

Zero Day Initiative advisories Jul 15

ZDI-26-407: X.Org Server PCF Font Parsing Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server.

T1548 2 IOCs

Zero Day Initiative → Details

Zero Day Initiative advisories Jul 15

ZDI-26-406: X.Org Server BitmapScaleBitmaps Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server.

T1548 2 IOCs

Zero Day Initiative → Details

Zero Day Initiative advisories Jul 15

ZDI-26-405: X.Org Server GLX Extension Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server.

T1548 2 IOCs

Zero Day Initiative → Details

Zero Day Initiative advisories Jul 15

ZDI-26-404: Delta Electronics DTM Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DTM Soft. User interaction is required to...

T1190 1 IOC

Zero Day Initiative → Details

CISA Advisories advisories Jul 14

ABB Advant Master Online Builder

View CSAF Summary ABB became aware of vulnerability in the products versions listed as affected in the advisory, where an incorrect version of Online Builder...

T1598 1 IOC

CISA Advisories → Details

CISA Advisories advisories Linux Docker Jul 14

ABB Ability Edgenius

View CSAF Summary ABB is aware of public reports of a vulnerability CVE‑2026‑31431 (Copy Fail) in the product versions listed as affected in the advisory. An...

CISA Advisories → Details

CISA Advisories advisories Jul 14

Rockwell Automation 1715-AENTR EtherNet/IP Adapter

View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to read or delete files, stop tasks, modify memory, and change I/O st...

1 IOC

CISA Advisories → Details

CISA Advisories advisories Jul 14

CISA Urges SharePoint Hardening After New Exploitations

Update July 16, 2026: CISA has updated this Alert to reflect the addition of CVE-2026-58644 to its Known Exploited Vulnerabilities (KEV) Catalog on July 16, ...

4 IOCs

CISA Advisories → Details

CISA Advisories advisories Microsoft SonicWall Jul 14

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

4 IOCs

CISA Advisories → Details

Zero Day Initiative advisories Jul 13

ZDI-26-400: (0Day) AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the abi...

1 IOC

Zero Day Initiative → Details

US-CERT Alerts advisories Jul 8

Improve Router Hygiene to Protect Against Russian State-Sponsored Targeting

Russian Government-Sponsored Activity Targets Poorly Configured and Vulnerable Devices Across Critical Sectors Executive summary Russian Federal Security Ser...

US-CERT Alerts → Details