Indicators of Compromise

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-188: (Pwn2Own) VMware ESXi VMCI Integer Underflow Local Privilege Escalation Vulnerability

CVEs: CVE-2025-41237

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-187: (Pwn2Own) Synology DiskStation Manager Netatalk Library Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2022-45188

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 10

ZDI-26-186: Fortinet FortiClient Link Following Local Privilege Escalation Vulnerability

CVEs: CVE-2026-24018

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 10

ZDI-26-185: Microsoft Windows GDI Bitmap Parsing Out-Of-Bound Read Information Disclosure Vulnerability

CVEs: CVE-2026-25181

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 10

ZDI-26-184: Microsoft Windows NDIS Driver Use-After-Free Local Privilege Escalation Vulnerability

CVEs: CVE-2026-24289

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 10

ZDI-26-183: Microsoft Windows win32full Improper Release Local Privilege Escalation Vulnerability

CVEs: CVE-2026-24285

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 10

ZDI-26-182: Microsoft Windows win32full Improper Release Local Privilege Escalation Vulnerability

CVEs: CVE-2026-24285

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 10

ZDI-26-181: Microsoft Windows win32full Improper Release Local Privilege Escalation Vulnerability

CVEs: CVE-2026-24285

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 10

ZDI-26-180: Microsoft Windows cdd Improper Locking Local Privilege Escalation Vulnerability

CVEs: CVE-2026-23668

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 10

ZDI-26-179: Microsoft Windows win32kfull Improper Locking Local Privilege Escalation Vulnerability

CVEs: CVE-2026-23668

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 10

ZDI-26-178: Microsoft Windows cdd Improper Locking Local Privilege Escalation Vulnerability

CVEs: CVE-2026-23668

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 10

ZDI-26-177: Array Networks MotionPro ArrayInstallManager Incorrect Permission Assignment Local Privilege Escalation Vulnerability

CVEs: CVE-2026-26364

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 10

ZDI-26-176: Apple macOS libusd_ms Alembic File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-20616

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 10

ZDI-26-175: Apple macOS ImageIO SGI File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

CVEs: CVE-2026-20634

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 10

ZDI-26-174: Apple macOS ImageIO SGI File Parsing Integer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-20675

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 10

ZDI-26-173: Apple macOS Audio APAC Frame Decoding Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-20611

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 9

ZDI-26-172: Unraid Authentication Request Path Traversal Authentication Bypass Vulnerability

CVEs: CVE-2026-3839

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 9

ZDI-26-171: Unraid Update Request Path Traversal Remote Code Execution Vulnerability

CVEs: CVE-2026-3838

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 6

ZDI-26-170: GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-3086

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 6

ZDI-26-169: GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability

CVEs: CVE-2026-3084

Zero Day Initiative →