CVE Program partner

zdi

Zero Day Initiative

API
CVEs, 365 days3323,433 all time, 6 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationZero Day Initiative
RoleCNA
TypeBug Bounty Provider, Researcher
Reports tomitre
ScopeProducts and projects covered by its bug bounty programs that are not in another CNA’s scope.
Advisorieshttps://www.zerodayinitiative.com/advisories/published/

Latest CVEs · RSS

  • CVE-2026-111105 2026-10-15 · CVSS 7.0
    Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected instal
  • CVE-2026-92176 2026-09-15 · CVSS 7.8
    pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code o
  • CVE-2026-92177 2026-09-15 · CVSS 7.8
    pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary
  • CVE-2026-92178 2026-09-15 · CVSS 7.8
    pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary c
  • CVE-2026-92179 2026-09-15 · CVSS 7.8
    pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary
  • CVE-2026-92180 2026-09-15 · CVSS 7.8
    pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows lo
  • CVE-2026-19781 2026-09-15 · CVSS 7.8
    Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbit
  • CVE-2026-19886 2026-09-15 · CVSS 7.8
    OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary
  • CVE-2026-19885 2026-09-15 · CVSS 7.8
    OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra
  • CVE-2026-19774 2026-09-15 · CVSS 7.1
    BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on af
  • CVE-2026-19773 2026-09-15 · CVSS 9.8
    libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute ar
  • CVE-2026-19504 2026-09-15 · CVSS 4.0
    Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected insta
  • CVE-2026-19780 2026-09-15 · CVSS 8.8
    Koha Eval Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of
  • CVE-2026-18263 2026-08-20 · CVSS 7.8
    Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escal
  • CVE-2026-18262 2026-08-20 · CVSS 7.8
    Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escal
  • CVE-2026-13121 2026-08-20 · CVSS 7.8
    Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escal
  • CVE-2026-15686 2026-08-20 · CVSS 7.2
    Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrar
  • CVE-2026-15679 2026-08-20 · CVSS 7.8
    Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers t
  • CVE-2026-18309 2026-08-20 · CVSS 7.8
    GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in
  • CVE-2026-18308 2026-08-20 · CVSS 7.8
    GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected ins
  • CVE-2026-18307 2026-08-20 · CVSS 7.8
    GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af
  • CVE-2026-18306 2026-08-20 · CVSS 7.8
    GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected ins
  • CVE-2026-18305 2026-08-20 · CVSS 7.8
    GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected ins
  • CVE-2026-18304 2026-08-20 · CVSS 7.8
    GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected ins
  • CVE-2026-18303 2026-08-20 · CVSS 7.8
    GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a

All CVE Program partners