Indicators of Compromise

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-361: Adobe Acrobat Reader DC Field signatureInfo Use-After-Free Remote Code Execution Vulnerability

CVEs: CVE-2026-27278

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-365: FlowiseAI Flowise CSV Agent customReadCSV Code Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-41137

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-364: FlowiseAI Flowise CSV Agent Prompt Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-41264

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-363: Docker MCP Plugin OCI Image Label Parsing Argument Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-55887

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-362: Oracle VirtualBox VMSVGA Stack-based Buffer Overflow Local Privilege Escalation Vulnerability

CVEs: CVE-2026-46873

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-397: X.Org Server CreateSaverWindow Use-After-Free Information Disclosure Vulnerability

CVEs: CVE-2026-50263

Domains: x.org

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-396: X.Org Server ChangeDrawableAttributes Out-Of-Bounds Read Information Disclosure Vulnerability

CVEs: CVE-2026-50262

Domains: x.org

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-395: X.Org Server SyncChangeCounter Use-After-Free Privilege Escalation Vulnerability

CVEs: CVE-2026-50261

Domains: x.org

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-394: X.Org Server FreeCounter Use-After-Free Privilege Escalation Vulnerability

CVEs: CVE-2026-50260

Domains: x.org

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-393: X.Org Server SetMap Request Stack-based Buffer Overflow Privilege Escalation Vulnerability

CVEs: CVE-2026-50259

Domains: x.org

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-392: X.Org Server Xkb Key Types Stack-based Buffer Overflow Privilege Escalation Vulnerability

CVEs: CVE-2026-50258

Domains: x.org

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-391: X.Org Server miSyncDestroyFence Use-After-Free Privilege Escalation Vulnerability

CVEs: CVE-2026-50257

Domains: x.org

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-390: X.Org Server Font Alias Stack-based Buffer Overflow Privilege Escalation Vulnerability

CVEs: CVE-2026-50256

Domains: x.org

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-389: Oracle PeopleSoft ExecuteProcessActivityCommand External Control of File Path Remote Code Execution Vulnerability

CVEs: CVE-2026-35273

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-388: Oracle PeopleSoft HubMBeanPersistance Deserialization of Untrusted Data Remote Code Execution Vulnerability

CVEs: CVE-2026-35273

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-387: Oracle PeopleSoft HttpListeningConnector Server-Side Request Forgery Vulnerability

CVEs: CVE-2026-35273

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-386: Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-9773

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-385: Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-9772

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-384: MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability

CVEs: CVE-2026-10043

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-383: ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

CVEs: CVE-2026-9779

Zero Day Initiative →