[ { "id": "apple-cve-2023-41974", "kind": "incident", "vendorSlug": "apple", "title": "Apple iOS and iPadOS Use-After-Free Vulnerability", "priority": 1, "reasons": [ "the vendor's original advisory is outside our collected window (the vendor's own CVE record was published 2024-01-10, 790 days before the earliest vendor item we hold); automated vendor and patch moments are left unknown", "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/apple-cve-2023-41974/", "candidateDate": null }, { "id": "apple-cve-2023-43000", "kind": "incident", "vendorSlug": "apple", "title": "Apple Multiple products Use-After-Free Vulnerability", "priority": 1, "reasons": [ "the vendor's original advisory is outside our collected window (the vendor's own CVE record was published 2025-11-05, 125 days before the earliest vendor item we hold); automated vendor and patch moments are left unknown", "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/apple-cve-2023-43000/", "candidateDate": null }, { "id": "cisco-cve-2008-4128", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco IOS 12.4 HTTP administration cross-site request forgery", "priority": 1, "reasons": [ "exposure over 365 days; needs human review", "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2008-4128/", "candidateDate": null }, { "id": "cisco-cve-2023-20118", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco Small Business RV016, RV042, RV042G, RV082, RV320 and RV325 Routers remote command execution (end of life, no fix)", "priority": 1, "reasons": [ "exposure over 365 days; needs human review", "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "3 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2023-20118/", "candidateDate": null }, { "id": "fortinet-cve-2019-6693", "kind": "incident", "vendorSlug": "fortinet", "title": "FortiOS hard-coded key used to encrypt secrets in configuration backups", "priority": 1, "reasons": [ "the vendor's original advisory is outside our collected window (the vendor's own CVE record was published 2019-11-21, 221 days before the earliest vendor item we hold); automated vendor and patch moments are left unknown", "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "4 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/fortinet-cve-2019-6693/", "candidateDate": null }, { "id": "google-cve-2024-43093", "kind": "incident", "vendorSlug": "google", "title": "Android Framework Privilege Escalation Vulnerability", "priority": 1, "reasons": [ "the vendor's original advisory is outside our collected window (the vendor's own CVE record was published 2024-11-13, 109 days before the earliest vendor item we hold); automated vendor and patch moments are left unknown", "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/google-cve-2024-43093/", "candidateDate": null }, { "id": "ivanti-cve-2026-104935", "kind": "incident", "vendorSlug": "ivanti", "title": "Ivanti Connect Secure zero-day exploit chain (auth bypass + RCE, root privilege escalation)", "priority": 1, "reasons": [ "Open in the recorded evidence for 13 days since the first public report: recheck fixes and supported branches", "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/ivanti-cve-2026-104935/", "candidateDate": null }, { "id": "juniper-cve-2025-21590", "kind": "incident", "vendorSlug": "juniper", "title": "Junos OS kernel isolation flaw used by UNC3886 to implant backdoors on Juniper routers", "priority": 1, "reasons": [ "Open in the recorded evidence for 594 days since the first public report: recheck fixes and supported branches", "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/juniper-cve-2025-21590/", "candidateDate": null }, { "id": "zyxel-cve-2024-40890", "kind": "incident", "vendorSlug": "zyxel", "title": "Zyxel legacy DSL CPE command injection flaws exploited by Mirai; end-of-life, no fix", "priority": 1, "reasons": [ "exposure over 365 days; needs human review", "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/zyxel-cve-2024-40890/", "candidateDate": null }, { "id": "adobe-cve-2009-3459", "kind": "incident", "vendorSlug": "adobe", "title": "Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/adobe-cve-2009-3459/", "candidateDate": null }, { "id": "adobe-cve-2017-3066", "kind": "incident", "vendorSlug": "adobe", "title": "Adobe ColdFusion Deserialization Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/adobe-cve-2017-3066/", "candidateDate": null }, { "id": "adobe-cve-2020-9715", "kind": "incident", "vendorSlug": "adobe", "title": "Adobe Acrobat Use-After-Free Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/adobe-cve-2020-9715/", "candidateDate": null }, { "id": "adobe-cve-2024-20767", "kind": "incident", "vendorSlug": "adobe", "title": "Adobe ColdFusion Improper Access Control Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/adobe-cve-2024-20767/", "candidateDate": null }, { "id": "adobe-cve-2025-54236", "kind": "incident", "vendorSlug": "adobe", "title": "Adobe Commerce and Magento Improper Input Validation Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/adobe-cve-2025-54236/", "candidateDate": null }, { "id": "adobe-cve-2026-34621", "kind": "incident", "vendorSlug": "adobe", "title": "Adobe Acrobat and Reader Prototype Pollution Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/adobe-cve-2026-34621/", "candidateDate": null }, { "id": "adobe-cve-2026-48282", "kind": "incident", "vendorSlug": "adobe", "title": "Adobe ColdFusion Path Traversal Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/adobe-cve-2026-48282/", "candidateDate": null }, { "id": "adobe-cve-2026-71362", "kind": "incident", "vendorSlug": "adobe", "title": "Adobe Commerce and Magento Incorrect Authorization Vulnerability ", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/adobe-cve-2026-71362/", "candidateDate": null }, { "id": "adobe-cve-2026-75650", "kind": "incident", "vendorSlug": "adobe", "title": "Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/adobe-cve-2026-75650/", "candidateDate": null }, { "id": "apple-cve-2021-30952", "kind": "incident", "vendorSlug": "apple", "title": "Apple Multiple Products Integer Overflow or Wraparound Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/apple-cve-2021-30952/", "candidateDate": null }, { "id": "apple-cve-2022-48503", "kind": "incident", "vendorSlug": "apple", "title": "Apple Multiple Products Unspecified Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/apple-cve-2022-48503/", "candidateDate": null }, { "id": "apple-cve-2024-44308", "kind": "incident", "vendorSlug": "apple", "title": "Apple Multiple Products Code Execution Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/apple-cve-2024-44308/", "candidateDate": null }, { "id": "apple-cve-2025-24085", "kind": "incident", "vendorSlug": "apple", "title": "Apple Multiple Products Use-After-Free Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/apple-cve-2025-24085/", "candidateDate": null }, { "id": "apple-cve-2025-24201", "kind": "incident", "vendorSlug": "apple", "title": "Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/apple-cve-2025-24201/", "candidateDate": null }, { "id": "apple-cve-2025-31200", "kind": "incident", "vendorSlug": "apple", "title": "Apple Multiple Products Memory Corruption Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/apple-cve-2025-31200/", "candidateDate": null }, { "id": "apple-cve-2025-31201", "kind": "incident", "vendorSlug": "apple", "title": "Apple Multiple Products Arbitrary Read and Write Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/apple-cve-2025-31201/", "candidateDate": null }, { "id": "apple-cve-2025-31277", "kind": "incident", "vendorSlug": "apple", "title": "Apple Multiple Products Buffer Overflow Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/apple-cve-2025-31277/", "candidateDate": null }, { "id": "apple-cve-2025-43300", "kind": "incident", "vendorSlug": "apple", "title": "Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/apple-cve-2025-43300/", "candidateDate": null }, { "id": "apple-cve-2025-43510", "kind": "incident", "vendorSlug": "apple", "title": "Apple Multiple Products Improper Locking Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/apple-cve-2025-43510/", "candidateDate": null }, { "id": "apple-cve-2025-43529", "kind": "incident", "vendorSlug": "apple", "title": "WebKit/ANGLE flaws exploited against targeted iPhone users, publicly flagged by Google two days before Apple's fix", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "7 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/apple-cve-2025-43529/", "candidateDate": null }, { "id": "apple-cve-2026-20700", "kind": "incident", "vendorSlug": "apple", "title": "Apple Multiple Buffer Overflow Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/apple-cve-2026-20700/", "candidateDate": null }, { "id": "apple-cve-2026-65400", "kind": "incident", "vendorSlug": "apple", "title": "Apple macOS Improper Authentication Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/apple-cve-2026-65400/", "candidateDate": null }, { "id": "apple-cve-2026-86950", "kind": "incident", "vendorSlug": "apple", "title": "Apple Multiple Products Out-of-Bounds Write Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/apple-cve-2026-86950/", "candidateDate": null }, { "id": "atlassian-cve-2021-26086", "kind": "incident", "vendorSlug": "atlassian", "title": "Jira Server and Data Center limited remote file read via path traversal (JRASERVER-72695)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "3 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/atlassian-cve-2021-26086/", "candidateDate": null }, { "id": "beyondtrust-cve-2026-1731", "kind": "incident", "vendorSlug": "beyondtrust", "title": "BeyondTrust Remote Support and Privileged Remote Access pre-authentication remote code execution (BT26-02)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/beyondtrust-cve-2026-1731/", "candidateDate": null }, { "id": "broadcom-vmware-cve-2024-37079", "kind": "incident", "vendorSlug": "broadcom-vmware", "title": "VMware vCenter Server DCERPC heap overflow (VMSA-2024-0012)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/broadcom-vmware-cve-2024-37079/", "candidateDate": null }, { "id": "broadcom-vmware-cve-2024-38812", "kind": "incident", "vendorSlug": "broadcom-vmware", "title": "VMware vCenter Server DCERPC heap overflow and privilege escalation (VMSA-2024-0019)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/broadcom-vmware-cve-2024-38812/", "candidateDate": null }, { "id": "broadcom-vmware-cve-2025-41244", "kind": "incident", "vendorSlug": "broadcom-vmware", "title": "VMware Tools and Aria Operations local privilege escalation (VMSA-2025-0015)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/broadcom-vmware-cve-2025-41244/", "candidateDate": null }, { "id": "broadcom-vmware-cve-2026-22719", "kind": "incident", "vendorSlug": "broadcom-vmware", "title": "VMware Aria Operations command injection (VMSA-2026-0001)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/broadcom-vmware-cve-2026-22719/", "candidateDate": null }, { "id": "broadcom-vmware-cve-2026-59310", "kind": "incident", "vendorSlug": "broadcom-vmware", "title": "VMware vCenter Syslog server directory-traversal vulnerability (VMSA-2026-0006)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/broadcom-vmware-cve-2026-59310/", "candidateDate": null }, { "id": "cisco-cve-2022-20775", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco SD-WAN Software CLI Privilege Escalation Vulnerability (2022), exploited in the UAT-8616 campaign", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2022-20775/", "candidateDate": null }, { "id": "cisco-cve-2024-20439", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco Smart Licensing Utility static administrative credential (cisco-sa-cslu-7gHMzWmw)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2024-20439/", "candidateDate": null }, { "id": "cisco-cve-2025-20281", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco Identity Services Engine Unauthenticated Remote Code Execution Vulnerabilities (CVE-2025-20281, CVE-2025-20337)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2025-20281/", "candidateDate": null }, { "id": "cisco-cve-2025-20333", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco Secure Firewall ASA and FTD VPN web server zero-days (ArcaneDoor: CVE-2025-20333 and CVE-2025-20362)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2025-20333/", "candidateDate": null }, { "id": "cisco-cve-2025-20352", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2025-20352/", "candidateDate": null }, { "id": "cisco-cve-2025-20393", "kind": "incident", "vendorSlug": "cisco", "title": "Cyberattacks against Cisco Secure Email Gateway and Secure Email and Web Manager (AsyncOS, UAT-9686)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2025-20393/", "candidateDate": null }, { "id": "cisco-cve-2026-20045", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco Unified Communications Products Remote Code Execution Vulnerability", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2026-20045/", "candidateDate": null }, { "id": "cisco-cve-2026-20079", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "4 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2026-20079/", "candidateDate": null }, { "id": "cisco-cve-2026-20127", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability (UAT-8616 campaign)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "3 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2026-20127/", "candidateDate": null }, { "id": "cisco-cve-2026-20128", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco Catalyst SD-WAN Manager Vulnerabilities (February 2026: CVE-2026-20128, CVE-2026-20122, CVE-2026-20133)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "3 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2026-20128/", "candidateDate": null }, { "id": "cisco-cve-2026-20131", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2026-20131/", "candidateDate": null }, { "id": "cisco-cve-2026-20182", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability (control connection handshaking, May 2026)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2026-20182/", "candidateDate": null }, { "id": "cisco-cve-2026-20230", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2026-20230/", "candidateDate": null }, { "id": "cisco-cve-2026-20245", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco Catalyst SD-WAN Controller, Manager, and Validator Authenticated Privilege Escalation Vulnerability", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "3 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2026-20245/", "candidateDate": null }, { "id": "cisco-cve-2026-20316", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco Secure Firewall Management Center Software Static Credential Vulnerability", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "3 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2026-20316/", "candidateDate": null }, { "id": "cisco-cve-2026-20349", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco Secure Firewall ASA and FTD Software Remote Access SSL VPN Denial of Service Vulnerability", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2026-20349/", "candidateDate": null }, { "id": "cisco-cve-2026-76461", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco Secure Email Gateway SQL Injection Vulnerability", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2026-76461/", "candidateDate": null }, { "id": "cisco-cve-2026-76504", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2026-76504/", "candidateDate": null }, { "id": "cisco-cve-2026-76519", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco Secure Email Gateway Arbitrary File Write Vulnerability", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2026-76519/", "candidateDate": null }, { "id": "commvault-cve-2025-34028", "kind": "incident", "vendorSlug": "commvault", "title": "Commvault Command Center Innovation Release pre-authentication path traversal RCE (CV_2025_04_1)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "4 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/commvault-cve-2025-34028/", "candidateDate": null }, { "id": "commvault-cve-2025-3928", "kind": "incident", "vendorSlug": "commvault", "title": "Commvault Web Server webshell vulnerability (CV_2025_03_1)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "4 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/commvault-cve-2025-3928/", "candidateDate": null }, { "id": "connectwise-cve-2024-1709", "kind": "incident", "vendorSlug": "connectwise", "title": "ConnectWise ScreenConnect authentication bypass and path traversal (ScreenConnect 23.9.8 security fix)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "7 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/connectwise-cve-2024-1709/", "candidateDate": null }, { "id": "connectwise-cve-2025-3935", "kind": "incident", "vendorSlug": "connectwise", "title": "ConnectWise ScreenConnect ViewState code injection (ScreenConnect 25.2.4 security patch)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/connectwise-cve-2025-3935/", "candidateDate": null }, { "id": "connectwise-cve-2026-84869", "kind": "incident", "vendorSlug": "connectwise", "title": "ConnectWise ScreenConnect client file transfer and execution without authorization (26.6.5 bulletin)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/connectwise-cve-2026-84869/", "candidateDate": null }, { "id": "crushftp-cve-2025-54309", "kind": "incident", "vendorSlug": "crushftp", "title": "CrushFTP unauthenticated admin access via HTTP(S) (AS2 validation flaw, July 2025)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "3 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/crushftp-cve-2025-54309/", "candidateDate": null }, { "id": "fortinet-cve-2024-47575", "kind": "incident", "vendorSlug": "fortinet", "title": "FortiManager fgfmd missing authentication allowing unauthenticated RCE (\"FortiJump\")", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "3 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/fortinet-cve-2024-47575/", "candidateDate": null }, { "id": "fortinet-cve-2024-55591", "kind": "incident", "vendorSlug": "fortinet", "title": "FortiOS and FortiProxy super-admin authentication bypass via Node.js websocket and CSF proxy", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "4 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/fortinet-cve-2024-55591/", "candidateDate": null }, { "id": "fortinet-cve-2025-25249", "kind": "incident", "vendorSlug": "fortinet", "title": "FortiOS and FortiSwitchManager cw_acd (CAPWAP) heap overflow allowing unauthenticated RCE", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/fortinet-cve-2025-25249/", "candidateDate": null }, { "id": "fortinet-cve-2025-25257", "kind": "incident", "vendorSlug": "fortinet", "title": "FortiWeb Fabric Connector unauthenticated SQL injection leading to RCE", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/fortinet-cve-2025-25257/", "candidateDate": null }, { "id": "fortinet-cve-2025-32756", "kind": "incident", "vendorSlug": "fortinet", "title": "Fortinet API stack overflow (FortiVoice, FortiMail, FortiNDR, FortiRecorder, FortiCamera) exploited on FortiVoice", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/fortinet-cve-2025-32756/", "candidateDate": null }, { "id": "fortinet-cve-2025-58034", "kind": "incident", "vendorSlug": "fortinet", "title": "FortiWeb authenticated OS command injection exploited in the wild", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/fortinet-cve-2025-58034/", "candidateDate": null }, { "id": "fortinet-cve-2025-61624", "kind": "incident", "vendorSlug": "fortinet", "title": "FortiOS CLI path traversal used to escalate admin access to root (PEERSTITCH)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "5 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/fortinet-cve-2025-61624/", "candidateDate": null }, { "id": "fortinet-cve-2025-64446", "kind": "incident", "vendorSlug": "fortinet", "title": "FortiWeb GUI path confusion letting unauthenticated attackers run admin commands (fixed before public disclosure)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/fortinet-cve-2025-64446/", "candidateDate": null }, { "id": "fortinet-cve-2025-68686", "kind": "incident", "vendorSlug": "fortinet", "title": "FortiOS SSL-VPN symlink persistence patch bypass (information disclosure)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/fortinet-cve-2025-68686/", "candidateDate": null }, { "id": "fortinet-cve-2026-104286", "kind": "incident", "vendorSlug": "fortinet", "title": "FortiMail unauthenticated arbitrary file write via IBE path traversal", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/fortinet-cve-2026-104286/", "candidateDate": null }, { "id": "fortinet-cve-2026-21643", "kind": "incident", "vendorSlug": "fortinet", "title": "FortiClient EMS 7.4.4 unauthenticated SQL injection in the administrative interface", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/fortinet-cve-2026-21643/", "candidateDate": null }, { "id": "fortinet-cve-2026-24858", "kind": "incident", "vendorSlug": "fortinet", "title": "FortiCloud SSO authentication bypass used against fully patched FortiGates", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "5 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/fortinet-cve-2026-24858/", "candidateDate": null }, { "id": "fortinet-cve-2026-35616", "kind": "incident", "vendorSlug": "fortinet", "title": "FortiClient EMS API authentication and authorization bypass (zero-day)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/fortinet-cve-2026-35616/", "candidateDate": null }, { "id": "gitlab-cve-2021-22175", "kind": "incident", "vendorSlug": "gitlab", "title": "GitLab unauthenticated server-side request forgery via webhooks / CI lint API (2021)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "4 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/gitlab-cve-2021-22175/", "candidateDate": null }, { "id": "gitlab-cve-2021-39935", "kind": "incident", "vendorSlug": "gitlab", "title": "GitLab CI Lint API server-side request forgery by unauthorized external users (2021)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/gitlab-cve-2021-39935/", "candidateDate": null }, { "id": "gitlab-cve-2026-85706", "kind": "incident", "vendorSlug": "gitlab", "title": "GitLab CE/EE path traversal in repository commits API (critical patch release 19.3.2, 19.2.6, 19.1.8)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/gitlab-cve-2026-85706/", "candidateDate": null }, { "id": "google-cve-2025-10585", "kind": "incident", "vendorSlug": "google", "title": "Google Chromium V8 Type Confusion Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/google-cve-2025-10585/", "candidateDate": null }, { "id": "google-cve-2025-13223", "kind": "incident", "vendorSlug": "google", "title": "Google Chromium V8 Type Confusion Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/google-cve-2025-13223/", "candidateDate": null }, { "id": "google-cve-2025-2783", "kind": "incident", "vendorSlug": "google", "title": "Google Chromium Mojo Sandbox Escape Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/google-cve-2025-2783/", "candidateDate": null }, { "id": "google-cve-2025-48543", "kind": "incident", "vendorSlug": "google", "title": "Android Runtime Use-After-Free Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/google-cve-2025-48543/", "candidateDate": null }, { "id": "google-cve-2025-48572", "kind": "incident", "vendorSlug": "google", "title": "Android Framework Privilege Escalation Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/google-cve-2025-48572/", "candidateDate": null }, { "id": "google-cve-2025-48595", "kind": "incident", "vendorSlug": "google", "title": "Android Framework Integer Overflow Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/google-cve-2025-48595/", "candidateDate": null }, { "id": "google-cve-2025-5419", "kind": "incident", "vendorSlug": "google", "title": "Google Chromium V8 Out-of-Bounds Read and Write Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/google-cve-2025-5419/", "candidateDate": null }, { "id": "google-cve-2025-6554", "kind": "incident", "vendorSlug": "google", "title": "Google Chromium V8 Type Confusion Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/google-cve-2025-6554/", "candidateDate": null }, { "id": "google-cve-2025-6558", "kind": "incident", "vendorSlug": "google", "title": "Google Chromium ANGLE and GPU Improper Input Validation Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/google-cve-2025-6558/", "candidateDate": null }, { "id": "google-cve-2026-11645", "kind": "incident", "vendorSlug": "google", "title": "Google Chromium V8 Out-of-Bounds Read and Write Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/google-cve-2026-11645/", "candidateDate": null }, { "id": "google-cve-2026-2441", "kind": "incident", "vendorSlug": "google", "title": "Google Chromium CSS Use-After-Free Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/google-cve-2026-2441/", "candidateDate": null }, { "id": "google-cve-2026-3909", "kind": "incident", "vendorSlug": "google", "title": "Google Skia Out-of-Bounds Write Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/google-cve-2026-3909/", "candidateDate": null }, { "id": "google-cve-2026-3910", "kind": "incident", "vendorSlug": "google", "title": "Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/google-cve-2026-3910/", "candidateDate": null }, { "id": "google-cve-2026-5281", "kind": "incident", "vendorSlug": "google", "title": "Google Dawn Use-After-Free Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/google-cve-2026-5281/", "candidateDate": null }, { "id": "google-cve-2026-58704", "kind": "incident", "vendorSlug": "google", "title": "Google Pixel Improper Authorization Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/google-cve-2026-58704/", "candidateDate": null }, { "id": "google-cve-2026-85046", "kind": "incident", "vendorSlug": "google", "title": "Google Chromium V8 Type Confusion Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/google-cve-2026-85046/", "candidateDate": null }, { "id": "google-cve-2026-87491", "kind": "incident", "vendorSlug": "google", "title": "Google Chromium V8 Out of Bounds Write Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/google-cve-2026-87491/", "candidateDate": null }, { "id": "ZDI-25-652,ZDI-25-653", "kind": "private_case", "vendorSlug": "microsoft", "title": "SharePoint", "priority": 2, "reasons": [ "the linked vendor advisory https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53771 is dated 2025-07-20, before the report date 2025-07-24: it describes an earlier fix; the linked vendor advisory https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53770 is dated 2025-07-19, before the report date 2025-07-24: it describes an earlier fix" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-964", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 2, "reasons": [ "the linked vendor advisory https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50154 is dated 2025-08-12, before the report date 2025-09-10: it describes an earlier fix" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-253", "kind": "private_case", "vendorSlug": "microsoft", "title": "Visual Studio Code", "priority": 2, "reasons": [ "the linked vendor advisory https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21518 is dated 2026-02-10, before the report date 2026-03-05: it describes an earlier fix" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-329,ZDI-26-330,ZDI-26-331", "kind": "private_case", "vendorSlug": "microsoft", "title": "Edge", "priority": 2, "reasons": [ "the linked vendor advisory https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45492 is dated 2026-05-15, before the report date 2026-05-20: it describes an earlier fix; the linked vendor advisory https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45494 is dated 2026-05-15, before the report date 2026-05-20: it describes an earlier fix; the linked vendor advisory https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45495 is dated 2026-05-15, before the report dat" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-445,ZDI-26-446", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 2, "reasons": [ "the linked vendor advisory https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50325 is dated 2026-07-14, before the report date 2026-07-21: it describes an earlier fix; the linked vendor advisory https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50297 is dated 2026-07-14, before the report date 2026-07-21: it describes an earlier fix" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "microsoft-cve-2007-0671", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2007-0671/", "candidateDate": null }, { "id": "microsoft-cve-2008-0015", "kind": "incident", "vendorSlug": "microsoft", "title": " Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2008-0015/", "candidateDate": null }, { "id": "microsoft-cve-2008-4250", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Buffer Overflow Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2008-4250/", "candidateDate": null }, { "id": "microsoft-cve-2009-0238", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Office Remote Code Execution", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2009-0238/", "candidateDate": null }, { "id": "microsoft-cve-2009-0556", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Office PowerPoint Code Injection Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2009-0556/", "candidateDate": null }, { "id": "microsoft-cve-2009-1537", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft DirectX NULL Byte Overwrite Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2009-1537/", "candidateDate": null }, { "id": "microsoft-cve-2010-0249", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Internet Explorer Use-After-Free Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2010-0249/", "candidateDate": null }, { "id": "microsoft-cve-2010-0806", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Internet Explorer Use-After-Free Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2010-0806/", "candidateDate": null }, { "id": "microsoft-cve-2010-3962", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2010-3962/", "candidateDate": null }, { "id": "microsoft-cve-2011-3402", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Remote Code Execution Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2011-3402/", "candidateDate": null }, { "id": "microsoft-cve-2012-1854", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2012-1854/", "candidateDate": null }, { "id": "microsoft-cve-2013-3893", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Internet Explorer Resource Management Errors Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2013-3893/", "candidateDate": null }, { "id": "microsoft-cve-2013-3918", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Out-of-Bounds Write Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2013-3918/", "candidateDate": null }, { "id": "microsoft-cve-2018-8639", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2018-8639/", "candidateDate": null }, { "id": "microsoft-cve-2019-1068", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft SQL Server Remote Code Execution Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2019-1068/", "candidateDate": null }, { "id": "microsoft-cve-2021-43226", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Privilege Escalation Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2021-43226/", "candidateDate": null }, { "id": "microsoft-cve-2023-21529", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2023-21529/", "candidateDate": null }, { "id": "microsoft-cve-2023-36424", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Out-of-Bounds Read Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2023-36424/", "candidateDate": null }, { "id": "microsoft-cve-2024-21413", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Outlook Improper Input Validation Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2024-21413/", "candidateDate": null }, { "id": "microsoft-cve-2024-29059", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft .NET Framework Information Disclosure Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2024-29059/", "candidateDate": null }, { "id": "microsoft-cve-2024-35250", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability ", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2024-35250/", "candidateDate": null }, { "id": "microsoft-cve-2024-43468", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Configuration Manager SQL Injection Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2024-43468/", "candidateDate": null }, { "id": "microsoft-cve-2024-49035", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Partner Center Improper Access Control Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2024-49035/", "candidateDate": null }, { "id": "microsoft-cve-2024-49039", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Task Scheduler Privilege Escalation Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2024-49039/", "candidateDate": null }, { "id": "microsoft-cve-2024-49138", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2024-49138/", "candidateDate": null }, { "id": "microsoft-cve-2025-21333", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-21333/", "candidateDate": null }, { "id": "microsoft-cve-2025-21334", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-21334/", "candidateDate": null }, { "id": "microsoft-cve-2025-21335", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-21335/", "candidateDate": null }, { "id": "microsoft-cve-2025-21391", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Storage Link Following Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-21391/", "candidateDate": null }, { "id": "microsoft-cve-2025-21418", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-21418/", "candidateDate": null }, { "id": "microsoft-cve-2025-24983", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Win32k Use-After-Free Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-24983/", "candidateDate": null }, { "id": "microsoft-cve-2025-24985", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-24985/", "candidateDate": null }, { "id": "microsoft-cve-2025-24989", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Power Pages Improper Access Control Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-24989/", "candidateDate": null }, { "id": "microsoft-cve-2025-24990", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Untrusted Pointer Dereference Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-24990/", "candidateDate": null }, { "id": "microsoft-cve-2025-24993", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-24993/", "candidateDate": null }, { "id": "microsoft-cve-2025-26633", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-26633/", "candidateDate": null }, { "id": "microsoft-cve-2025-30397", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Scripting Engine Type Confusion Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-30397/", "candidateDate": null }, { "id": "microsoft-cve-2025-30400", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows DWM Core Library Use-After-Free Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-30400/", "candidateDate": null }, { "id": "microsoft-cve-2025-32701", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-32701/", "candidateDate": null }, { "id": "microsoft-cve-2025-32706", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-32706/", "candidateDate": null }, { "id": "microsoft-cve-2025-32709", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-32709/", "candidateDate": null }, { "id": "microsoft-cve-2025-33053", "kind": "incident", "vendorSlug": "microsoft", "title": " Microsoft Windows External Control of File Name or Path Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-33053/", "candidateDate": null }, { "id": "microsoft-cve-2025-33073", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows SMB Client Improper Access Control Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-33073/", "candidateDate": null }, { "id": "microsoft-cve-2025-59230", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Improper Access Control Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-59230/", "candidateDate": null }, { "id": "microsoft-cve-2025-60710", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Link Following Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-60710/", "candidateDate": null }, { "id": "microsoft-cve-2025-62215", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Race Condition Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-62215/", "candidateDate": null }, { "id": "microsoft-cve-2025-62221", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Use After Free Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-62221/", "candidateDate": null }, { "id": "microsoft-cve-2026-20963", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-20963/", "candidateDate": null }, { "id": "microsoft-cve-2026-21509", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Office Security Feature Bypass Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-21509/", "candidateDate": null }, { "id": "microsoft-cve-2026-21510", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Shell Protection Mechanism Failure Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-21510/", "candidateDate": null }, { "id": "microsoft-cve-2026-21513", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-21513/", "candidateDate": null }, { "id": "microsoft-cve-2026-21514", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-21514/", "candidateDate": null }, { "id": "microsoft-cve-2026-21519", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Type Confusion Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-21519/", "candidateDate": null }, { "id": "microsoft-cve-2026-21533", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Improper Privilege Management Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-21533/", "candidateDate": null }, { "id": "microsoft-cve-2026-33824", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-33824/", "candidateDate": null }, { "id": "microsoft-cve-2026-33825", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Defender Insufficient Granularity of Access Control Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-33825/", "candidateDate": null }, { "id": "microsoft-cve-2026-41091", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Defender Link Following Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-41091/", "candidateDate": null }, { "id": "microsoft-cve-2026-45659", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-45659/", "candidateDate": null }, { "id": "microsoft-cve-2026-50522", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability ", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-50522/", "candidateDate": null }, { "id": "microsoft-cve-2026-55040", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft SharePoint Weak Authentication Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-55040/", "candidateDate": null }, { "id": "microsoft-cve-2026-56155", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability ", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-56155/", "candidateDate": null }, { "id": "microsoft-cve-2026-58644", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-58644/", "candidateDate": null }, { "id": "microsoft-cve-2026-65660", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft SharePoint Code Injection Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-65660/", "candidateDate": null }, { "id": "microsoft-cve-2026-68820", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-68820/", "candidateDate": null }, { "id": "microsoft-cve-2026-81963", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Link Following Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-81963/", "candidateDate": null }, { "id": "microsoft-cve-2026-85880", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Heap-Based Buffer Overflow Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-85880/", "candidateDate": null }, { "id": "microsoft-cve-2026-96951", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Command Injection Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-96951/", "candidateDate": null }, { "id": "ZDI-25-291,ZDI-25-292", "kind": "private_case", "vendorSlug": "mozilla", "title": "Firefox", "priority": 2, "reasons": [ "the linked vendor advisory https://www.mozilla.org/en-US/security/advisories/mfsa2025-36/ is dated 2025-05-17, before the report date 2025-05-21: it describes an earlier fix" ], "lastReviewed": null, "path": "/vendors/mozilla/#cases-title", "candidateDate": null }, { "id": "mozilla-cve-2010-3765", "kind": "incident", "vendorSlug": "mozilla", "title": "Mozilla Multiple Products Remote Code Execution Vulnerability", "priority": 2, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/mozilla-cve-2010-3765/", "candidateDate": null }, { "id": "oracle-cve-2025-61882", "kind": "incident", "vendorSlug": "oracle", "title": "Oracle E-Business Suite zero-day exploited in Clop data-theft campaign (CVE-2025-61882)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/oracle-cve-2025-61882/", "candidateDate": null }, { "id": "oracle-cve-2025-61884", "kind": "incident", "vendorSlug": "oracle", "title": "Oracle E-Business Suite Configurator SSRF used by the leaked ShinyHunters exploit (CVE-2025-61884)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "3 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/oracle-cve-2025-61884/", "candidateDate": null }, { "id": "palo-alto-networks-cve-2024-0012", "kind": "incident", "vendorSlug": "palo-alto-networks", "title": "PAN-OS management interface auth bypass chained with privilege escalation (Operation Lunar Peek)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "10 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/palo-alto-networks-cve-2024-0012/", "candidateDate": null }, { "id": "palo-alto-networks-cve-2024-3393", "kind": "incident", "vendorSlug": "palo-alto-networks", "title": "PAN-OS DNS Security denial of service from a crafted packet (exploited)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "5 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/palo-alto-networks-cve-2024-3393/", "candidateDate": null }, { "id": "palo-alto-networks-cve-2024-5910", "kind": "incident", "vendorSlug": "palo-alto-networks", "title": "Expedition missing authentication allowing admin account takeover", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/palo-alto-networks-cve-2024-5910/", "candidateDate": null }, { "id": "palo-alto-networks-cve-2024-9463", "kind": "incident", "vendorSlug": "palo-alto-networks", "title": "Expedition OS command injection and SQL injection exposing firewall credentials (PAN-SA-2024-0010)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "4 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/palo-alto-networks-cve-2024-9463/", "candidateDate": null }, { "id": "palo-alto-networks-cve-2025-0108", "kind": "incident", "vendorSlug": "palo-alto-networks", "title": "PAN-OS management web interface authentication bypass, chained with file read and CVE-2024-9474", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "6 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/palo-alto-networks-cve-2025-0108/", "candidateDate": null }, { "id": "palo-alto-networks-cve-2026-0257", "kind": "incident", "vendorSlug": "palo-alto-networks", "title": "PAN-OS GlobalProtect authentication override cookie bypass", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "3 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/palo-alto-networks-cve-2026-0257/", "candidateDate": null }, { "id": "palo-alto-networks-cve-2026-0300", "kind": "incident", "vendorSlug": "palo-alto-networks", "title": "PAN-OS User-ID Authentication Portal unauthenticated buffer overflow (zero-day)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "6 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/palo-alto-networks-cve-2026-0300/", "candidateDate": null }, { "id": "solarwinds-cve-2025-26399", "kind": "incident", "vendorSlug": "solarwinds", "title": "SolarWinds Web Help Desk AjaxProxy Deserialization of Untrusted Data Remote Code Execution Vulnerability", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/solarwinds-cve-2025-26399/", "candidateDate": null }, { "id": "solarwinds-cve-2025-40551", "kind": "incident", "vendorSlug": "solarwinds", "title": "SolarWinds Web Help Desk deserialization RCE and security control bypass (WHD 2026.1)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/solarwinds-cve-2025-40551/", "candidateDate": null }, { "id": "sonicwall-cve-2021-20035", "kind": "incident", "vendorSlug": "sonicwall", "title": "SonicWall SMA 100 management interface command injection (2021 bug exploited in 2025)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/sonicwall-cve-2021-20035/", "candidateDate": null }, { "id": "sonicwall-cve-2023-44221", "kind": "incident", "vendorSlug": "sonicwall", "title": "SonicWall SMA 100 post-authentication OS command injection (2023 bug exploited in 2025)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/sonicwall-cve-2023-44221/", "candidateDate": null }, { "id": "sonicwall-cve-2024-53704", "kind": "incident", "vendorSlug": "sonicwall", "title": "SonicOS SSLVPN authentication bypass enabling session hijacking", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/sonicwall-cve-2024-53704/", "candidateDate": null }, { "id": "sonicwall-cve-2025-23006", "kind": "incident", "vendorSlug": "sonicwall", "title": "SonicWall SMA1000 AMC/CMC pre-auth deserialization RCE (zero-day)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/sonicwall-cve-2025-23006/", "candidateDate": null }, { "id": "sonicwall-cve-2025-40602", "kind": "incident", "vendorSlug": "sonicwall", "title": "SonicWall SMA1000 AMC local privilege escalation chained with CVE-2025-23006", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "1 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/sonicwall-cve-2025-40602/", "candidateDate": null }, { "id": "ZDI-24-836", "kind": "private_case", "vendorSlug": "synology", "title": "BC500", "priority": 2, "reasons": [ "the linked vendor advisory https://www.synology.com/en-id/security/advisory/Synology_SA_23_15 is dated 2023-11-20, before the report date 2024-02-21: it describes an earlier fix" ], "lastReviewed": null, "path": "/vendors/synology/#cases-title", "candidateDate": null }, { "id": "ZDI-25-1039", "kind": "private_case", "vendorSlug": "synology", "title": "BeeStation Plus", "priority": 2, "reasons": [ "the linked vendor advisory https://www.synology.com/en-us/security/advisory/Synology_SA_25_12 is dated 2025-11-10, before the report date 2025-11-20: it describes an earlier fix" ], "lastReviewed": null, "path": "/vendors/synology/#cases-title", "candidateDate": null }, { "id": "ZDI-25-207,ZDI-25-208,ZDI-25-209,ZDI-25-210,ZDI-25-211,ZDI-25-212,ZDI-25-213,ZDI-25-214,ZDI-25-216,ZDI-25-269", "kind": "private_case", "vendorSlug": "synology", "title": "BeeStation BST150-4T; DiskStation DS1823xs+; TC500", "priority": 2, "reasons": [ "the linked vendor advisory https://www.synology.com/en-us/security/advisory/Synology_SA_24_18 is dated 2024-10-25, before the report date 2024-12-02: it describes an earlier fix; the linked vendor advisory https://www.synology.com/en-us/security/advisory/Synology_SA_24_22 is dated 2024-11-05, before the report date 2024-12-02: it describes an earlier fix; the linked vendor advisory https://www.synology.com/en-us/security/advisory/Synology_SA_24_20 is dated 2024-11-05, before the report date 2024" ], "lastReviewed": null, "path": "/vendors/synology/#cases-title", "candidateDate": null }, { "id": "ZDI-26-187", "kind": "private_case", "vendorSlug": "synology", "title": "DiskStation Manager", "priority": 2, "reasons": [ "the linked vendor advisory https://www.synology.com/en-global/security/advisory/Synology_SA_22_23 is dated 2022-12-08, before the report date 2022-12-29: it describes an earlier fix" ], "lastReviewed": null, "path": "/vendors/synology/#cases-title", "candidateDate": null }, { "id": "trend-micro-cve-2025-54948", "kind": "incident", "vendorSlug": "trend-micro", "title": "Trend Micro Apex One (on-prem) management console command injection exploited before patch", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "3 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/trend-micro-cve-2025-54948/", "candidateDate": null }, { "id": "watchguard-cve-2025-14733", "kind": "incident", "vendorSlug": "watchguard", "title": "WatchGuard Firebox iked IKEv2 out-of-bounds write (unauthenticated RCE), exploited at disclosure", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "3 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/watchguard-cve-2025-14733/", "candidateDate": null }, { "id": "watchguard-cve-2025-9242", "kind": "incident", "vendorSlug": "watchguard", "title": "WatchGuard Firebox iked IKEv2 out-of-bounds write (unauthenticated RCE)", "priority": 2, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded", "2 detected advisory change candidates need review (on/after the review date, or review date unknown)" ], "lastReviewed": null, "path": "/incidents/watchguard-cve-2025-9242/", "candidateDate": null }, { "id": "ZDI-24-1444", "kind": "private_case", "vendorSlug": "apple", "title": "SceneKit", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2024-10-28" }, { "id": "ZDI-24-1445,ZDI-24-1446", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2024-10-28" }, { "id": "ZDI-24-1447,ZDI-24-1448,ZDI-24-1449,ZDI-24-1450,ZDI-24-1451", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2024-10-28" }, { "id": "ZDI-25-020,ZDI-25-021,ZDI-25-727", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2025-01-09" }, { "id": "ZDI-25-167,ZDI-25-196", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2025-03-18" }, { "id": "ZDI-25-188,ZDI-25-189", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2025-03-31" }, { "id": "ZDI-25-190,ZDI-25-191,ZDI-25-192", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2025-03-31" }, { "id": "ZDI-25-193", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2025-03-31" }, { "id": "ZDI-25-194,ZDI-25-305", "kind": "private_case", "vendorSlug": "apple", "title": "macOS; XNU kernel", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2025-05-12" }, { "id": "ZDI-25-195", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2025-03-31" }, { "id": "ZDI-25-298", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2025-05-12" }, { "id": "ZDI-25-299,ZDI-25-300,ZDI-25-728", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2025-05-12" }, { "id": "ZDI-25-304", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2025-05-12" }, { "id": "ZDI-25-674,ZDI-25-675,ZDI-25-682,ZDI-25-684,ZDI-25-685,ZDI-25-687,ZDI-25-878", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2025-07-29" }, { "id": "ZDI-25-677,ZDI-25-678,ZDI-25-846", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2025-07-29" }, { "id": "ZDI-25-825", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2025-03-31" }, { "id": "ZDI-25-900", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2025-09-15" }, { "id": "ZDI-26-174", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2026-02-11" }, { "id": "ZDI-26-175", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2026-02-11" }, { "id": "ZDI-26-315,ZDI-26-492", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2026-07-27" }, { "id": "ZDI-26-491", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2026-07-27" }, { "id": "ZDI-26-493", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2026-07-27" }, { "id": "ZDI-26-494", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2026-07-27" }, { "id": "ZDI-26-610", "kind": "private_case", "vendorSlug": "apple", "title": "Safari", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": "2026-08-18" }, { "id": "apple-cve-2024-44309", "kind": "incident", "vendorSlug": "apple", "title": "Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability", "priority": 3, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/apple-cve-2024-44309/", "candidateDate": null }, { "id": "apple-cve-2025-24200", "kind": "incident", "vendorSlug": "apple", "title": "Apple iOS and iPadOS Incorrect Authorization Vulnerability", "priority": 3, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/apple-cve-2025-24200/", "candidateDate": null }, { "id": "apple-cve-2025-43200", "kind": "incident", "vendorSlug": "apple", "title": "Apple Multiple Products Unspecified Vulnerability", "priority": 3, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/apple-cve-2025-43200/", "candidateDate": null }, { "id": "apple-cve-2025-43520", "kind": "incident", "vendorSlug": "apple", "title": "Apple Multiple Products Classic Buffer Overflow Vulnerability", "priority": 3, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/apple-cve-2025-43520/", "candidateDate": null }, { "id": "ZDI-25-270,ZDI-25-275,ZDI-25-276,ZDI-25-277,ZDI-25-278,ZDI-25-279,ZDI-25-280,ZDI-25-281", "kind": "private_case", "vendorSlug": "cisco", "title": "IOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/cisco/#cases-title", "candidateDate": "2025-02-05" }, { "id": "ZDI-25-271,ZDI-25-272,ZDI-25-273,ZDI-25-274", "kind": "private_case", "vendorSlug": "cisco", "title": "IOS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/cisco/#cases-title", "candidateDate": "2025-02-05" }, { "id": "ZDI-25-966", "kind": "private_case", "vendorSlug": "cisco", "title": "Snort", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/cisco/#cases-title", "candidateDate": "2025-10-15" }, { "id": "ZDI-26-045,ZDI-26-046", "kind": "private_case", "vendorSlug": "cisco", "title": "Snort", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/cisco/#cases-title", "candidateDate": "2026-01-07" }, { "id": "ZDI-26-533", "kind": "private_case", "vendorSlug": "cisco", "title": "Secure Firewall Management Center", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/cisco/#cases-title", "candidateDate": "2026-07-29" }, { "id": "ZDI-26-709,ZDI-26-716", "kind": "private_case", "vendorSlug": "cisco", "title": "Secure Firewall Management Center; Identity Services Engine", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/cisco/#cases-title", "candidateDate": "2026-09-16" }, { "id": "ZDI-26-719", "kind": "private_case", "vendorSlug": "cisco", "title": "ThousandEyes", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/cisco/#cases-title", "candidateDate": "2026-09-16" }, { "id": "ZDI-26-788", "kind": "private_case", "vendorSlug": "cisco", "title": "Snort", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/cisco/#cases-title", "candidateDate": "2026-10-21" }, { "id": "ZDI-25-918,ZDI-25-1014", "kind": "private_case", "vendorSlug": "fortinet", "title": "FortiWeb", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/fortinet/#cases-title", "candidateDate": "2025-11-18" }, { "id": "ZDI-26-645", "kind": "private_case", "vendorSlug": "fortinet", "title": "FortiSandbox", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/fortinet/#cases-title", "candidateDate": "2026-09-08" }, { "id": "ZDI-26-771,ZDI-26-772", "kind": "private_case", "vendorSlug": "fortinet", "title": "FortiSandbox", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/fortinet/#cases-title", "candidateDate": "2026-10-13" }, { "id": "google-cve-2025-48633", "kind": "incident", "vendorSlug": "google", "title": "Android Framework Information Disclosure Vulnerability", "priority": 3, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/google-cve-2025-48633/", "candidateDate": null }, { "id": "ZDI-24-1511", "kind": "private_case", "vendorSlug": "microsoft", "title": "Office PowerPoint", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2024-11-12" }, { "id": "ZDI-24-1658,ZDI-25-090", "kind": "private_case", "vendorSlug": "microsoft", "title": "Edge", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2025-02-06" }, { "id": "ZDI-25-028", "kind": "private_case", "vendorSlug": "microsoft", "title": "Office Word", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2025-01-14" }, { "id": "ZDI-25-029", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2025-01-14" }, { "id": "ZDI-25-030", "kind": "private_case", "vendorSlug": "microsoft", "title": "Office Word", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2025-01-14" }, { "id": "ZDI-25-091", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2025-02-11" }, { "id": "ZDI-25-1099", "kind": "private_case", "vendorSlug": "microsoft", "title": "Edge", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2025-10-31" }, { "id": "ZDI-25-293", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2025-05-13" }, { "id": "ZDI-25-334", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2025-05-13" }, { "id": "ZDI-25-582,ZDI-25-584,ZDI-25-845", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2025-08-12" }, { "id": "ZDI-25-838,ZDI-25-840,ZDI-25-841,ZDI-25-843", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2025-08-12" }, { "id": "ZDI-25-839", "kind": "private_case", "vendorSlug": "microsoft", "title": "Teams", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2025-08-12" }, { "id": "ZDI-25-842", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2025-08-12" }, { "id": "ZDI-25-844", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2025-08-12" }, { "id": "ZDI-26-081", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2026-02-10" }, { "id": "ZDI-26-082,ZDI-26-194", "kind": "private_case", "vendorSlug": "microsoft", "title": "Exchange", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2026-02-10" }, { "id": "ZDI-26-276", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2026-04-14" }, { "id": "ZDI-26-278", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2026-04-14" }, { "id": "ZDI-26-339,ZDI-26-416,ZDI-26-605", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows; Hyper-V", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2026-07-14" }, { "id": "ZDI-26-414", "kind": "private_case", "vendorSlug": "microsoft", "title": "PowerShell", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2026-07-14" }, { "id": "ZDI-26-415,ZDI-26-417", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2026-07-14" }, { "id": "ZDI-26-542,ZDI-26-618,ZDI-26-619,ZDI-26-620,ZDI-26-621,ZDI-26-622", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2026-08-11" }, { "id": "ZDI-26-617", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2026-08-11" }, { "id": "ZDI-26-751", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": "2026-07-14" }, { "id": "microsoft-cve-2024-43451", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability", "priority": 3, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2024-43451/", "candidateDate": null }, { "id": "microsoft-cve-2025-24054", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability", "priority": 3, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-24054/", "candidateDate": null }, { "id": "microsoft-cve-2025-24984", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows NTFS Information Disclosure Vulnerability", "priority": 3, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-24984/", "candidateDate": null }, { "id": "microsoft-cve-2025-24991", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability", "priority": 3, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-24991/", "candidateDate": null }, { "id": "microsoft-cve-2026-20805", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Information Disclosure Vulnerability", "priority": 3, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-20805/", "candidateDate": null }, { "id": "microsoft-cve-2026-21525", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows NULL Pointer Dereference Vulnerability", "priority": 3, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-21525/", "candidateDate": null }, { "id": "microsoft-cve-2026-32201", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft SharePoint Server Improper Input Validation Vulnerability", "priority": 3, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-32201/", "candidateDate": null }, { "id": "microsoft-cve-2026-32202", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Windows Protection Mechanism Failure Vulnerability", "priority": 3, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-32202/", "candidateDate": null }, { "id": "microsoft-cve-2026-45498", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft Defender Denial of Service Vulnerability", "priority": 3, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-45498/", "candidateDate": null }, { "id": "microsoft-cve-2026-56164", "kind": "incident", "vendorSlug": "microsoft", "title": "Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability", "priority": 3, "reasons": [ "Exploited incident awaiting its first timeline review" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-56164/", "candidateDate": null }, { "id": "ZDI-26-252", "kind": "private_case", "vendorSlug": "mozilla", "title": "Firefox", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/mozilla/#cases-title", "candidateDate": "2026-03-24" }, { "id": "ZDI-26-292", "kind": "private_case", "vendorSlug": "qnap", "title": "TS-453E", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/qnap/#cases-title", "candidateDate": "2026-03-21" }, { "id": "ZDI-25-104", "kind": "private_case", "vendorSlug": "solarwinds", "title": "Platform", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/solarwinds/#cases-title", "candidateDate": "2025-02-11" }, { "id": "ZDI-25-906", "kind": "private_case", "vendorSlug": "solarwinds", "title": "Web Help Desk", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/solarwinds/#cases-title", "candidateDate": "2025-09-17" }, { "id": "ZDI-25-011,ZDI-25-012,ZDI-25-013,ZDI-25-014", "kind": "private_case", "vendorSlug": "sonicwall", "title": "NSv", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/sonicwall/#cases-title", "candidateDate": "2025-01-07" }, { "id": "ZDI-25-253", "kind": "private_case", "vendorSlug": "sonicwall", "title": "Connect Tunnel", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/sonicwall/#cases-title", "candidateDate": "2025-04-16" }, { "id": "ZDI-26-770", "kind": "private_case", "vendorSlug": "sonicwall", "title": "Secure Mobile Access", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/sonicwall/#cases-title", "candidateDate": "2026-10-06" }, { "id": "ZDI-24-832", "kind": "private_case", "vendorSlug": "synology", "title": "RT6600ax", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/synology/#cases-title", "candidateDate": "2023-11-21" }, { "id": "ZDI-24-833,ZDI-24-834,ZDI-24-835", "kind": "private_case", "vendorSlug": "synology", "title": "BC500", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/synology/#cases-title", "candidateDate": "2023-11-20" }, { "id": "ZDI-25-1040", "kind": "private_case", "vendorSlug": "synology", "title": "DiskStation DS925+", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/synology/#cases-title", "candidateDate": "2025-11-19" }, { "id": "ZDI-25-215", "kind": "private_case", "vendorSlug": "synology", "title": "DiskStation DS1823xs+", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/synology/#cases-title", "candidateDate": "2025-02-04" }, { "id": "ZDI-26-423,ZDI-26-424", "kind": "private_case", "vendorSlug": "synology", "title": "DiskStation DS925+", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/synology/#cases-title", "candidateDate": "2026-06-26" }, { "id": "ZDI-25-004,ZDI-25-005,ZDI-25-006,ZDI-25-362", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": "2025-06-09" }, { "id": "ZDI-25-364", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": "2025-06-09" }, { "id": "ZDI-25-589", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Worry-Free Business Security", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": "2025-06-27" }, { "id": "ZDI-26-136,ZDI-26-137,ZDI-26-326", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One; Vision One", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": "2026-05-21" }, { "id": "ZDI-26-325", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Vision One", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": "2026-05-21" }, { "id": "ZDI-26-499,ZDI-26-500,ZDI-26-501,ZDI-26-749", "kind": "private_case", "vendorSlug": "watchguard", "title": "FireWare OS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/watchguard/#cases-title", "candidateDate": "2026-09-29" }, { "id": "ZDI-26-632", "kind": "private_case", "vendorSlug": "watchguard", "title": "FireWare OS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/watchguard/#cases-title", "candidateDate": "2026-08-27" }, { "id": "ZDI-26-750", "kind": "private_case", "vendorSlug": "watchguard", "title": "FireWare OS", "priority": 3, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/watchguard/#cases-title", "candidateDate": "2026-09-29" }, { "id": "ZDI-24-1130,ZDI-24-1138,ZDI-24-1605", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC; Bridge; InDesign", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1131,ZDI-24-1132", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1133", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1134", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1135", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1136", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1140,ZDI-24-1141", "kind": "private_case", "vendorSlug": "adobe", "title": "Dimension", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1196,ZDI-24-1203", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC; Photoshop", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-24-166", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Pro DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-24-167", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Pro DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-24-168,ZDI-24-284,ZDI-24-292", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Pro DC; Acrobat Reader DC; Premiere Pro", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-24-169,ZDI-24-291", "kind": "private_case", "vendorSlug": "adobe", "title": "Audition; Bridge", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-24-406", "kind": "private_case", "vendorSlug": "adobe", "title": "After Effects", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-24-422,ZDI-24-424,ZDI-24-425,ZDI-24-426,ZDI-24-427", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-24-423", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-24-477", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-24-478,ZDI-24-480,ZDI-24-481,ZDI-24-482", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-24-479", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-24-483", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-24-492,ZDI-24-493", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Pro DC; Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-24-599,ZDI-24-1137,ZDI-24-1139,ZDI-24-1142,ZDI-24-1143,ZDI-24-1144,ZDI-24-1197,ZDI-24-1198,ZDI-24-1199,ZDI-24-1200,ZDI-24-1201,ZDI-24-1202,ZDI-24-1331,ZDI-24-1332", "kind": "private_case", "vendorSlug": "adobe", "title": "Substance 3D Stager; Bridge; Dimension; Audition; Premiere Pro; After Effects; Media Encoder", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-25-046", "kind": "private_case", "vendorSlug": "adobe", "title": "Photoshop", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-25-1043", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-25-131,ZDI-25-132,ZDI-25-135,ZDI-25-149", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-25-133", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-25-134", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-25-258,ZDI-25-259", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-25-308", "kind": "private_case", "vendorSlug": "adobe", "title": "Dreamweaver", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-25-335", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-25-336,ZDI-25-338", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-25-337", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-25-992", "kind": "private_case", "vendorSlug": "adobe", "title": "USD-Fileformat-plugins", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-25-993,ZDI-25-994,ZDI-25-995,ZDI-25-996,ZDI-25-997,ZDI-25-998,ZDI-25-999,ZDI-25-1000", "kind": "private_case", "vendorSlug": "adobe", "title": "USD-Fileformat-plugins", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-070", "kind": "private_case", "vendorSlug": "adobe", "title": "ColdFusion", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-262,ZDI-26-420", "kind": "private_case", "vendorSlug": "adobe", "title": "ColdFusion; Creative Cloud", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-263", "kind": "private_case", "vendorSlug": "adobe", "title": "ColdFusion", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-264", "kind": "private_case", "vendorSlug": "adobe", "title": "ColdFusion", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-343,ZDI-26-344,ZDI-26-345,ZDI-26-346,ZDI-26-347,ZDI-26-348", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-349", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Pro DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-350", "kind": "private_case", "vendorSlug": "adobe", "title": "USD-Fileformat-plugins", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-351", "kind": "private_case", "vendorSlug": "adobe", "title": "USD-Fileformat-plugins", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-352,ZDI-26-353,ZDI-26-354", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Pro DC; Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-355", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-361", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-419", "kind": "private_case", "vendorSlug": "adobe", "title": "Creative Cloud", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-658,ZDI-26-661,ZDI-26-664,ZDI-26-668", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Pro DC; Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-659,ZDI-26-660,ZDI-26-671,ZDI-26-676", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-662,ZDI-26-663,ZDI-26-670,ZDI-26-673", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC; Acrobat Pro DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-665", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-666", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-667,ZDI-26-669,ZDI-26-672,ZDI-26-675", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-674", "kind": "private_case", "vendorSlug": "adobe", "title": "Acrobat Reader DC", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-677,ZDI-26-679", "kind": "private_case", "vendorSlug": "adobe", "title": "Photoshop", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-678", "kind": "private_case", "vendorSlug": "adobe", "title": "Photoshop", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-777", "kind": "private_case", "vendorSlug": "adobe", "title": "Photoshop", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "ZDI-26-778", "kind": "private_case", "vendorSlug": "adobe", "title": "Photoshop", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/adobe/#cases-title", "candidateDate": null }, { "id": "adobe-cve-2025-54253", "kind": "incident", "vendorSlug": "adobe", "title": "Adobe Experience Manager Forms on JEE pre-auth RCE disclosed with PoC before Adobe's out-of-band fix (CVE-2025-54253)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/adobe-cve-2025-54253/", "candidateDate": null }, { "id": "ZDI-24-1040,ZDI-24-1120,ZDI-24-1276,ZDI-24-1277,ZDI-24-1278,ZDI-24-1279,ZDI-24-1280,ZDI-24-1281,ZDI-24-1285,ZDI-24-1287", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1101", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1107,ZDI-24-1108,ZDI-24-1109,ZDI-24-1110", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1111,ZDI-24-1112,ZDI-24-1113,ZDI-24-1114,ZDI-24-1115,ZDI-24-1116,ZDI-24-1117,ZDI-24-1118,ZDI-24-1119,ZDI-24-1121,ZDI-24-1160,ZDI-24-1179,ZDI-24-1180", "kind": "private_case", "vendorSlug": "apple", "title": "macOS; WebKit", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1122", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1282,ZDI-24-1312,ZDI-24-1313", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1283", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1284,ZDI-24-1288", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1286", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1321,ZDI-25-048", "kind": "private_case", "vendorSlug": "apple", "title": "macOS; WebKit", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1442,ZDI-25-015,ZDI-25-016", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-24-206", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-24-207", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-24-283", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-24-404", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-24-578,ZDI-24-579", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-24-965", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-017,ZDI-25-018,ZDI-25-019,ZDI-25-166", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-022", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-092", "kind": "private_case", "vendorSlug": "apple", "title": "Safari", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-093", "kind": "private_case", "vendorSlug": "apple", "title": "Safari", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-1002,ZDI-25-1003,ZDI-25-1004,ZDI-25-1009", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-1005", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-1006", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-1007", "kind": "private_case", "vendorSlug": "apple", "title": "Safari", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-1008", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-1010", "kind": "private_case", "vendorSlug": "apple", "title": "Safari", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-1011", "kind": "private_case", "vendorSlug": "apple", "title": "Safari", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-1126,ZDI-26-057", "kind": "private_case", "vendorSlug": "apple", "title": "Safari", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-1127", "kind": "private_case", "vendorSlug": "apple", "title": "Safari", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-164", "kind": "private_case", "vendorSlug": "apple", "title": "SceneKit", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-165", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-168,ZDI-25-172", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-169", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-170", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-171", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-301,ZDI-25-302,ZDI-25-303,ZDI-25-418", "kind": "private_case", "vendorSlug": "apple", "title": "Safari; macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-673", "kind": "private_case", "vendorSlug": "apple", "title": "Safari", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-676,ZDI-25-688", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-679,ZDI-25-683,ZDI-25-689", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-680", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-681", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-686,ZDI-25-690,ZDI-25-691", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-709", "kind": "private_case", "vendorSlug": "apple", "title": "Safari", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-899", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-25-901", "kind": "private_case", "vendorSlug": "apple", "title": "Safari", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-26-056", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-26-173", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-26-176", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-26-230", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-26-231,ZDI-26-311,ZDI-26-312", "kind": "private_case", "vendorSlug": "apple", "title": "macOS; Safari", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-26-313", "kind": "private_case", "vendorSlug": "apple", "title": "Safari", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "ZDI-26-314", "kind": "private_case", "vendorSlug": "apple", "title": "macOS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/apple/#cases-title", "candidateDate": null }, { "id": "atlassian-cve-2026-21589", "kind": "incident", "vendorSlug": "atlassian", "title": "Arbitrary File Access Vulnerability impacts Multiple Atlassian Data Center Products", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/atlassian-cve-2026-21589/", "candidateDate": null }, { "id": "beyondtrust-cve-2024-12356", "kind": "incident", "vendorSlug": "beyondtrust", "title": "BeyondTrust Remote Support and Privileged Remote Access unauthenticated command injection (BT24-10)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/beyondtrust-cve-2024-12356/", "candidateDate": null }, { "id": "beyondtrust-cve-2024-12686", "kind": "incident", "vendorSlug": "beyondtrust", "title": "BeyondTrust Remote Support and Privileged Remote Access admin command injection (BT24-11)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/beyondtrust-cve-2024-12686/", "candidateDate": null }, { "id": "beyondtrust-cve-2026-102764", "kind": "incident", "vendorSlug": "beyondtrust", "title": "BeyondTrust Remote Support improper origin validation (BT26-05)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/beyondtrust-cve-2026-102764/", "candidateDate": null }, { "id": "ZDI-24-1421", "kind": "private_case", "vendorSlug": "broadcom-vmware", "title": "VMware HCX", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/broadcom-vmware/#cases-title", "candidateDate": null }, { "id": "ZDI-24-494", "kind": "private_case", "vendorSlug": "broadcom-vmware", "title": "Workstation", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/broadcom-vmware/#cases-title", "candidateDate": null }, { "id": "ZDI-24-526,ZDI-24-527,ZDI-24-528,ZDI-24-529", "kind": "private_case", "vendorSlug": "broadcom-vmware", "title": "Workstation", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/broadcom-vmware/#cases-title", "candidateDate": null }, { "id": "ZDI-24-882", "kind": "private_case", "vendorSlug": "broadcom-vmware", "title": "vCenter Server Appliance", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/broadcom-vmware/#cases-title", "candidateDate": null }, { "id": "ZDI-25-611", "kind": "private_case", "vendorSlug": "broadcom-vmware", "title": "ESXi", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/broadcom-vmware/#cases-title", "candidateDate": null }, { "id": "ZDI-26-188,ZDI-26-190", "kind": "private_case", "vendorSlug": "broadcom-vmware", "title": "ESXi; Workstation", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/broadcom-vmware/#cases-title", "candidateDate": null }, { "id": "ZDI-26-189", "kind": "private_case", "vendorSlug": "broadcom-vmware", "title": "ESXi", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/broadcom-vmware/#cases-title", "candidateDate": null }, { "id": "ZDI-26-495", "kind": "private_case", "vendorSlug": "broadcom-vmware", "title": "ESXi", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/broadcom-vmware/#cases-title", "candidateDate": null }, { "id": "ZDI-26-647", "kind": "private_case", "vendorSlug": "broadcom-vmware", "title": "Workstation", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/broadcom-vmware/#cases-title", "candidateDate": null }, { "id": "broadcom-vmware-cve-2025-1976", "kind": "incident", "vendorSlug": "broadcom-vmware", "title": "Brocade Fabric OS code injection by admin users (BSA-2025-2930)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/broadcom-vmware-cve-2025-1976/", "candidateDate": null }, { "id": "broadcom-vmware-cve-2025-22224", "kind": "incident", "vendorSlug": "broadcom-vmware", "title": "VMware ESXi, Workstation and Fusion VM-escape zero-days (VMSA-2025-0004)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/broadcom-vmware-cve-2025-22224/", "candidateDate": null }, { "id": "ZDI-24-1036", "kind": "private_case", "vendorSlug": "check-point", "title": "ZoneAlarm Extreme Security", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/check-point/#cases-title", "candidateDate": null }, { "id": "check-point-cve-2026-16232", "kind": "incident", "vendorSlug": "check-point", "title": "Check Point SmartConsole login authentication bypass via application token", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/check-point-cve-2026-16232/", "candidateDate": null }, { "id": "check-point-cve-2026-50751", "kind": "incident", "vendorSlug": "check-point", "title": "Check Point Remote Access VPN authentication bypass in deprecated IKEv1", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/check-point-cve-2026-50751/", "candidateDate": null }, { "id": "check-point-cve-2026-85102", "kind": "incident", "vendorSlug": "check-point", "title": "Check Point Security Gateway and Spark VPN certificate validation flaw allowing pre-auth RCE", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/check-point-cve-2026-85102/", "candidateDate": null }, { "id": "check-point-cve-2026-93616", "kind": "incident", "vendorSlug": "check-point", "title": "Check Point Management Server pre-auth path traversal and file upload (exploited since July)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/check-point-cve-2026-93616/", "candidateDate": null }, { "id": "ZDI-25-604,ZDI-25-605,ZDI-25-606,ZDI-25-607,ZDI-25-608", "kind": "private_case", "vendorSlug": "cisco", "title": "Identity Services Engine", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/cisco/#cases-title", "candidateDate": null }, { "id": "ZDI-25-609", "kind": "private_case", "vendorSlug": "cisco", "title": "Identity Services Engine", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/cisco/#cases-title", "candidateDate": null }, { "id": "ZDI-26-019", "kind": "private_case", "vendorSlug": "cisco", "title": "Identity Services Engine", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/cisco/#cases-title", "candidateDate": null }, { "id": "ZDI-26-421", "kind": "private_case", "vendorSlug": "cisco", "title": "Identity Services Engine", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/cisco/#cases-title", "candidateDate": null }, { "id": "ZDI-26-579,ZDI-26-580", "kind": "private_case", "vendorSlug": "cisco", "title": "Identity Services Engine", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/cisco/#cases-title", "candidateDate": null }, { "id": "ZDI-26-581,ZDI-26-582", "kind": "private_case", "vendorSlug": "cisco", "title": "Identity Services Engine", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/cisco/#cases-title", "candidateDate": null }, { "id": "ZDI-26-717,ZDI-26-718", "kind": "private_case", "vendorSlug": "cisco", "title": "Identity Services Engine", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/cisco/#cases-title", "candidateDate": null }, { "id": "cisco-cve-2014-2120", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco Adaptive Security Appliance WebVPN Login Page Cross-Site Scripting Vulnerability", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2014-2120/", "candidateDate": null }, { "id": "cisco-cve-2024-20481", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco ASA and FTD Software Remote Access VPN Brute Force Denial of Service Vulnerability", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2024-20481/", "candidateDate": null }, { "id": "cisco-cve-2026-20262", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2026-20262/", "candidateDate": null }, { "id": "cisco-cve-2026-76460", "kind": "incident", "vendorSlug": "cisco", "title": "Cisco Identity Services Engine Authentication Bypass Vulnerability", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/cisco-cve-2026-76460/", "candidateDate": null }, { "id": "citrix-cve-2024-8069", "kind": "incident", "vendorSlug": "citrix", "title": "Citrix Session Recording deserialization RCE and privilege escalation", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/citrix-cve-2024-8069/", "candidateDate": null }, { "id": "citrix-cve-2025-5777", "kind": "incident", "vendorSlug": "citrix", "title": "NetScaler ADC and Gateway out-of-bounds memory read (\"CitrixBleed 2\")", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/citrix-cve-2025-5777/", "candidateDate": null }, { "id": "citrix-cve-2025-6543", "kind": "incident", "vendorSlug": "citrix", "title": "NetScaler ADC and Gateway memory overflow exploited as a zero-day (June 2025)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/citrix-cve-2025-6543/", "candidateDate": null }, { "id": "citrix-cve-2025-7775", "kind": "incident", "vendorSlug": "citrix", "title": "NetScaler ADC and Gateway memory overflow RCE exploited at disclosure (August 2025)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/citrix-cve-2025-7775/", "candidateDate": null }, { "id": "citrix-cve-2026-19490", "kind": "incident", "vendorSlug": "citrix", "title": "NetScaler ADC and Gateway authentication bypass via alternate path (SAML/AAA)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/citrix-cve-2026-19490/", "candidateDate": null }, { "id": "citrix-cve-2026-3055", "kind": "incident", "vendorSlug": "citrix", "title": "NetScaler ADC and Gateway SAML IdP memory overread (\"CitrixBleed 3\")", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/citrix-cve-2026-3055/", "candidateDate": null }, { "id": "citrix-cve-2026-8452", "kind": "incident", "vendorSlug": "citrix", "title": "NetScaler ADC and Gateway memory overflow (Gateway/AAA) later exploited for RCE", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/citrix-cve-2026-8452/", "candidateDate": null }, { "id": "citrix-cve-2026-88771", "kind": "incident", "vendorSlug": "citrix", "title": "NetScaler ADC and Gateway zero-day RCE pair (input validation and DTLS memory overflow)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/citrix-cve-2026-88771/", "candidateDate": null }, { "id": "citrix-cve-2026-88779", "kind": "incident", "vendorSlug": "citrix", "title": "NetScaler ADC and Gateway SAML memory overflow exploited for denial of service", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/citrix-cve-2026-88779/", "candidateDate": null }, { "id": "crushftp-cve-2025-31161", "kind": "incident", "vendorSlug": "crushftp", "title": "CrushFTP unauthenticated HTTP(S) authentication bypass (March 2025)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/crushftp-cve-2025-31161/", "candidateDate": null }, { "id": "ZDI-24-1019", "kind": "private_case", "vendorSlug": "docker", "title": "Desktop", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/docker/#cases-title", "candidateDate": null }, { "id": "ZDI-24-966", "kind": "private_case", "vendorSlug": "docker", "title": "Desktop", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/docker/#cases-title", "candidateDate": null }, { "id": "ZDI-25-306", "kind": "private_case", "vendorSlug": "docker", "title": "Desktop", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/docker/#cases-title", "candidateDate": null }, { "id": "ZDI-26-067,ZDI-26-068", "kind": "private_case", "vendorSlug": "docker", "title": "Desktop", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/docker/#cases-title", "candidateDate": null }, { "id": "ZDI-26-123,ZDI-26-259", "kind": "private_case", "vendorSlug": "docker", "title": "Desktop", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/docker/#cases-title", "candidateDate": null }, { "id": "ZDI-26-125", "kind": "private_case", "vendorSlug": "docker", "title": "Desktop", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/docker/#cases-title", "candidateDate": null }, { "id": "ZDI-26-150", "kind": "private_case", "vendorSlug": "docker", "title": "Desktop", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/docker/#cases-title", "candidateDate": null }, { "id": "ZDI-26-152", "kind": "private_case", "vendorSlug": "docker", "title": "Docker", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/docker/#cases-title", "candidateDate": null }, { "id": "ZDI-26-258", "kind": "private_case", "vendorSlug": "docker", "title": "Desktop", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/docker/#cases-title", "candidateDate": null }, { "id": "ZDI-26-260", "kind": "private_case", "vendorSlug": "docker", "title": "Desktop", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/docker/#cases-title", "candidateDate": null }, { "id": "ZDI-26-261", "kind": "private_case", "vendorSlug": "docker", "title": "Desktop", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/docker/#cases-title", "candidateDate": null }, { "id": "ZDI-26-299", "kind": "private_case", "vendorSlug": "docker", "title": "Desktop", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/docker/#cases-title", "candidateDate": null }, { "id": "ZDI-26-327", "kind": "private_case", "vendorSlug": "docker", "title": "Desktop", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/docker/#cases-title", "candidateDate": null }, { "id": "ZDI-26-363", "kind": "private_case", "vendorSlug": "docker", "title": "MCP Plugin", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/docker/#cases-title", "candidateDate": null }, { "id": "ZDI-26-451", "kind": "private_case", "vendorSlug": "docker", "title": "Desktop", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/docker/#cases-title", "candidateDate": null }, { "id": "ZDI-26-758", "kind": "private_case", "vendorSlug": "docker", "title": "Buildx", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/docker/#cases-title", "candidateDate": null }, { "id": "f5-cve-2025-53521", "kind": "incident", "vendorSlug": "f5", "title": "BIG-IP APM flaw disclosed as DoS in Oct 2025, reclassified as exploited RCE in Mar 2026", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/f5-cve-2025-53521/", "candidateDate": null }, { "id": "f5-cve-2026-94127", "kind": "incident", "vendorSlug": "f5", "title": "BIG-IP APM OAuth authorization server heap overflow allowing unauthenticated RCE", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/f5-cve-2026-94127/", "candidateDate": null }, { "id": "ZDI-25-094,ZDI-25-095,ZDI-25-202", "kind": "private_case", "vendorSlug": "fortinet", "title": "FortiWeb", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/fortinet/#cases-title", "candidateDate": null }, { "id": "ZDI-25-1094", "kind": "private_case", "vendorSlug": "fortinet", "title": "FortiWeb", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/fortinet/#cases-title", "candidateDate": null }, { "id": "ZDI-25-1095,ZDI-25-1096,ZDI-25-1097,ZDI-25-1098,ZDI-26-048,ZDI-26-115", "kind": "private_case", "vendorSlug": "fortinet", "title": "FortiSandbox; FortiClient VPN", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/fortinet/#cases-title", "candidateDate": null }, { "id": "ZDI-25-288", "kind": "private_case", "vendorSlug": "fortinet", "title": "FortiWeb", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/fortinet/#cases-title", "candidateDate": null }, { "id": "ZDI-26-186", "kind": "private_case", "vendorSlug": "fortinet", "title": "FortiClient", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/fortinet/#cases-title", "candidateDate": null }, { "id": "ZDI-26-265,ZDI-26-266", "kind": "private_case", "vendorSlug": "fortinet", "title": "FortiWeb", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/fortinet/#cases-title", "candidateDate": null }, { "id": "fortinet-cve-2025-59718", "kind": "incident", "vendorSlug": "fortinet", "title": "FortiCloud SSO login authentication bypass via crafted SAML message", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/fortinet-cve-2025-59718/", "candidateDate": null }, { "id": "fortinet-cve-2026-25089", "kind": "incident", "vendorSlug": "fortinet", "title": "FortiSandbox second-order OS command injection via the start-VNC feature", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/fortinet-cve-2026-25089/", "candidateDate": null }, { "id": "fortinet-cve-2026-39808", "kind": "incident", "vendorSlug": "fortinet", "title": "FortiSandbox unauthenticated command injection and auth bypass (April 2026 advisories)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/fortinet-cve-2026-39808/", "candidateDate": null }, { "id": "ZDI-24-1041", "kind": "private_case", "vendorSlug": "google", "title": "Chrome", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/google/#cases-title", "candidateDate": null }, { "id": "ZDI-24-366,ZDI-25-027", "kind": "private_case", "vendorSlug": "google", "title": "Chrome", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/google/#cases-title", "candidateDate": null }, { "id": "ZDI-24-367", "kind": "private_case", "vendorSlug": "google", "title": "Chrome", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/google/#cases-title", "candidateDate": null }, { "id": "ZDI-24-369", "kind": "private_case", "vendorSlug": "google", "title": "cAdvisor", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/google/#cases-title", "candidateDate": null }, { "id": "ZDI-25-060", "kind": "private_case", "vendorSlug": "google", "title": "Chrome", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/google/#cases-title", "candidateDate": null }, { "id": "ZDI-25-773", "kind": "private_case", "vendorSlug": "google", "title": "Drive", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/google/#cases-title", "candidateDate": null }, { "id": "ZDI-25-774", "kind": "private_case", "vendorSlug": "google", "title": "Drive", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/google/#cases-title", "candidateDate": null }, { "id": "ZDI-25-775", "kind": "private_case", "vendorSlug": "google", "title": "Chrome", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/google/#cases-title", "candidateDate": null }, { "id": "ZDI-24-053,ZDI-24-054", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-055", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-056", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-057,ZDI-24-058", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-059,ZDI-24-060,ZDI-24-061", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-062,ZDI-24-063,ZDI-24-064,ZDI-24-065,ZDI-24-066,ZDI-24-067,ZDI-24-068,ZDI-24-069,ZDI-24-070", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-071", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1149", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1150", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1151,ZDI-24-1212", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche; Endpoint Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1211,ZDI-24-1501,ZDI-24-1503", "kind": "private_case", "vendorSlug": "ivanti", "title": "Endpoint Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1213,ZDI-24-1214,ZDI-24-1215,ZDI-24-1216,ZDI-24-1217,ZDI-24-1218,ZDI-24-1219,ZDI-24-1220,ZDI-24-1221,ZDI-24-1493,ZDI-24-1494,ZDI-24-1495,ZDI-24-1496,ZDI-24-1497,ZDI-24-1498,ZDI-24-1499,ZDI-24-1500", "kind": "private_case", "vendorSlug": "ivanti", "title": "Endpoint Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1222", "kind": "private_case", "vendorSlug": "ivanti", "title": "Workspace Control", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1223", "kind": "private_case", "vendorSlug": "ivanti", "title": "Endpoint Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1324,ZDI-24-1325,ZDI-24-1326,ZDI-24-1327", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1487,ZDI-24-1695", "kind": "private_case", "vendorSlug": "ivanti", "title": "Secure Access Client; Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1488,ZDI-24-1489", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1490,ZDI-24-1491,ZDI-24-1492,ZDI-24-1509,ZDI-24-1510,ZDI-25-031,ZDI-25-032,ZDI-25-033,ZDI-25-034,ZDI-25-035,ZDI-25-036,ZDI-25-037,ZDI-25-038,ZDI-25-039,ZDI-25-114", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche; Endpoint Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1502", "kind": "private_case", "vendorSlug": "ivanti", "title": "Endpoint Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1504,ZDI-24-1505", "kind": "private_case", "vendorSlug": "ivanti", "title": "Endpoint Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1506,ZDI-24-1507,ZDI-24-1508", "kind": "private_case", "vendorSlug": "ivanti", "title": "Endpoint Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-370,ZDI-24-371,ZDI-24-372,ZDI-24-373,ZDI-24-374,ZDI-24-375", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-376,ZDI-24-395", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-377,ZDI-24-378,ZDI-24-379,ZDI-24-380,ZDI-24-381,ZDI-24-382,ZDI-24-383,ZDI-24-384,ZDI-24-385", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-386,ZDI-24-387", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-388,ZDI-24-389,ZDI-24-391,ZDI-24-392,ZDI-24-393,ZDI-24-394", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-390", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-504", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-505,ZDI-24-506,ZDI-24-507,ZDI-24-508,ZDI-24-509,ZDI-24-510", "kind": "private_case", "vendorSlug": "ivanti", "title": "Endpoint Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-24-511,ZDI-24-512,ZDI-24-513,ZDI-24-514", "kind": "private_case", "vendorSlug": "ivanti", "title": "Endpoint Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-25-040,ZDI-25-947", "kind": "private_case", "vendorSlug": "ivanti", "title": "Endpoint Manager", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-25-041,ZDI-25-042,ZDI-25-043,ZDI-25-044", "kind": "private_case", "vendorSlug": "ivanti", "title": "Endpoint Manager; Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-25-1051,ZDI-25-1052", "kind": "private_case", "vendorSlug": "ivanti", "title": "Endpoint Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-25-235", "kind": "private_case", "vendorSlug": "ivanti", "title": "Endpoint Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-25-856,ZDI-25-857", "kind": "private_case", "vendorSlug": "ivanti", "title": "Avalanche", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-25-922", "kind": "private_case", "vendorSlug": "ivanti", "title": "Endpoint Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-25-935,ZDI-25-936", "kind": "private_case", "vendorSlug": "ivanti", "title": "Endpoint Manager", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-25-937,ZDI-25-938,ZDI-25-939,ZDI-25-940,ZDI-25-941,ZDI-25-942,ZDI-25-943,ZDI-25-944,ZDI-25-952", "kind": "private_case", "vendorSlug": "ivanti", "title": "Endpoint Manager", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-25-945,ZDI-25-946", "kind": "private_case", "vendorSlug": "ivanti", "title": "Endpoint Manager", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-26-079", "kind": "private_case", "vendorSlug": "ivanti", "title": "Endpoint Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ZDI-26-080,ZDI-26-308", "kind": "private_case", "vendorSlug": "ivanti", "title": "Endpoint Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/ivanti/#cases-title", "candidateDate": null }, { "id": "ivanti-cve-2024-13159", "kind": "incident", "vendorSlug": "ivanti", "title": "Ivanti Endpoint Manager absolute path traversal credential-coercion flaws (January 2025)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/ivanti-cve-2024-13159/", "candidateDate": null }, { "id": "ivanti-cve-2025-0282", "kind": "incident", "vendorSlug": "ivanti", "title": "Ivanti Connect Secure unauthenticated stack overflow exploited as a zero-day (January 2025)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/ivanti-cve-2025-0282/", "candidateDate": null }, { "id": "ivanti-cve-2025-22457", "kind": "incident", "vendorSlug": "ivanti", "title": "Ivanti Connect Secure stack overflow exploited by China-nexus actor (fixed in Feb 2025, before public disclosure)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/ivanti-cve-2025-22457/", "candidateDate": null }, { "id": "ivanti-cve-2025-4427", "kind": "incident", "vendorSlug": "ivanti", "title": "Ivanti EPMM API authentication bypass chained with RCE (May 2025 zero-days)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/ivanti-cve-2025-4427/", "candidateDate": null }, { "id": "ivanti-cve-2026-10520", "kind": "incident", "vendorSlug": "ivanti", "title": "Ivanti Sentry unauthenticated OS command injection (root RCE), exploited a day after the fix", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/ivanti-cve-2026-10520/", "candidateDate": null }, { "id": "ivanti-cve-2026-1281", "kind": "incident", "vendorSlug": "ivanti", "title": "Ivanti EPMM unauthenticated code injection zero-days (January 2026)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/ivanti-cve-2026-1281/", "candidateDate": null }, { "id": "ivanti-cve-2026-1603", "kind": "incident", "vendorSlug": "ivanti", "title": "Ivanti Endpoint Manager (EPM) authentication bypass leaking stored credentials", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/ivanti-cve-2026-1603/", "candidateDate": null }, { "id": "ivanti-cve-2026-6973", "kind": "incident", "vendorSlug": "ivanti", "title": "Ivanti EPMM authenticated admin RCE exploited as a zero-day (May 2026)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/ivanti-cve-2026-6973/", "candidateDate": null }, { "id": "juniper-cve-2015-7755", "kind": "incident", "vendorSlug": "juniper", "title": "Juniper ScreenOS unauthorized-code backdoor allowing administrative access (2015)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/juniper-cve-2015-7755/", "candidateDate": null }, { "id": "ZDI-24-020", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1018", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1161", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1182", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1194", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1454,ZDI-24-1642,ZDI-24-1648", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1455", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1456", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1688", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1726,ZDI-25-100", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-194,ZDI-24-195", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-227,ZDI-24-228,ZDI-24-586,ZDI-24-588,ZDI-24-589", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-229", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-297,ZDI-24-298,ZDI-24-299", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-587", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-590", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-591", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-592,ZDI-24-593", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-777", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-778", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-821", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-842", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-843", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-994,ZDI-24-995", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-996", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-24-997", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-25-307", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-25-310", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-25-610", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-25-873", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-25-915", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-25-916", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-25-917", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-191,ZDI-26-193", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-238", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-250", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-289", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-442,ZDI-26-568,ZDI-26-570,ZDI-26-573,ZDI-26-681", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel; Kernel KSMBD", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-443,ZDI-26-571,ZDI-26-576,ZDI-26-608", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-569", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-572,ZDI-26-683,ZDI-26-689,ZDI-26-697,ZDI-26-698,ZDI-26-699,ZDI-26-701", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-574,ZDI-26-693", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-575,ZDI-26-691", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-609,ZDI-26-686", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-623,ZDI-26-687", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-680", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-682,ZDI-26-690", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-684", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel KSMBD", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-685", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-688", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-692", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-694", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-695", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-696", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-700", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "ZDI-26-702", "kind": "private_case", "vendorSlug": "linux-kernel", "title": "Kernel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/linux-kernel/#cases-title", "candidateDate": null }, { "id": "linux-kernel-cve-2018-14634", "kind": "incident", "vendorSlug": "linux-kernel", "title": "Linux kernel create_elf_tables() integer overflow, 'Mutagen Astronomy' (CVE-2018-14634)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/linux-kernel-cve-2018-14634/", "candidateDate": null }, { "id": "linux-kernel-cve-2021-22555", "kind": "incident", "vendorSlug": "linux-kernel", "title": "Linux kernel netfilter x_tables heap out-of-bounds write (CVE-2021-22555)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/linux-kernel-cve-2021-22555/", "candidateDate": null }, { "id": "linux-kernel-cve-2022-0492", "kind": "incident", "vendorSlug": "linux-kernel", "title": "Linux kernel cgroups v1 release_agent privilege escalation / container escape (CVE-2022-0492)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/linux-kernel-cve-2022-0492/", "candidateDate": null }, { "id": "linux-kernel-cve-2022-0995", "kind": "incident", "vendorSlug": "linux-kernel", "title": "Linux kernel watch_queue out-of-bounds write (CVE-2022-0995)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/linux-kernel-cve-2022-0995/", "candidateDate": null }, { "id": "linux-kernel-cve-2023-0386", "kind": "incident", "vendorSlug": "linux-kernel", "title": "Linux kernel OverlayFS setuid copy-up privilege escalation (CVE-2023-0386)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/linux-kernel-cve-2023-0386/", "candidateDate": null }, { "id": "linux-kernel-cve-2024-53104", "kind": "incident", "vendorSlug": "linux-kernel", "title": "Linux kernel uvcvideo and HID bugs in Cellebrite's Android unlock chain (CVE-2024-53104, CVE-2024-50302)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/linux-kernel-cve-2024-53104/", "candidateDate": null }, { "id": "linux-kernel-cve-2024-53150", "kind": "incident", "vendorSlug": "linux-kernel", "title": "Linux kernel ALSA usb-audio out-of-bounds read when finding clock sources (CVE-2024-53150)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/linux-kernel-cve-2024-53150/", "candidateDate": null }, { "id": "linux-kernel-cve-2024-53197", "kind": "incident", "vendorSlug": "linux-kernel", "title": "Linux kernel ALSA usb-audio Extigy/Mbox out-of-bounds access used in Cellebrite's chain (CVE-2024-53197)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/linux-kernel-cve-2024-53197/", "candidateDate": null }, { "id": "linux-kernel-cve-2025-38352", "kind": "incident", "vendorSlug": "linux-kernel", "title": "Linux kernel posix-cpu-timers race (CVE-2025-38352), exploited on Android", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/linux-kernel-cve-2025-38352/", "candidateDate": null }, { "id": "linux-kernel-cve-2025-39682", "kind": "incident", "vendorSlug": "linux-kernel", "title": "Linux kernel TLS zero-length record handling on rx_list (CVE-2025-39682)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/linux-kernel-cve-2025-39682/", "candidateDate": null }, { "id": "linux-kernel-cve-2025-39964", "kind": "incident", "vendorSlug": "linux-kernel", "title": "Linux kernel AF_ALG concurrent-write race in af_alg_sendmsg (CVE-2025-39964)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/linux-kernel-cve-2025-39964/", "candidateDate": null }, { "id": "linux-kernel-cve-2026-31431", "kind": "incident", "vendorSlug": "linux-kernel", "title": "Linux kernel 'Copy Fail' AF_ALG authencesn page-cache write privilege escalation (CVE-2026-31431)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/linux-kernel-cve-2026-31431/", "candidateDate": null }, { "id": "linux-kernel-cve-2026-53266", "kind": "incident", "vendorSlug": "linux-kernel", "title": "Linux kernel netfilter ebtables SNAT ARP rewrite out-of-bounds write (CVE-2026-53266)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/linux-kernel-cve-2026-53266/", "candidateDate": null }, { "id": "linux-kernel-cve-2026-53362", "kind": "incident", "vendorSlug": "linux-kernel", "title": "Linux kernel IPv6 fraggap heap overflow, 'ipv6_frag_escape' container escape (CVE-2026-53362)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/linux-kernel-cve-2026-53362/", "candidateDate": null }, { "id": "ZDI-24-030", "kind": "private_case", "vendorSlug": "microsoft", "title": "Office Word", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-031,ZDI-24-164,ZDI-24-581", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows; Office Word; Azure", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1068,ZDI-24-1069,ZDI-24-1070", "kind": "private_case", "vendorSlug": "microsoft", "title": "Azure; Technical Case Studies; Partner Resources", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1088", "kind": "private_case", "vendorSlug": "microsoft", "title": "3D Viewer", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1089", "kind": "private_case", "vendorSlug": "microsoft", "title": "Office Visio", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1090", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1091", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1092,ZDI-24-1093,ZDI-24-1094,ZDI-24-1095,ZDI-24-1096", "kind": "private_case", "vendorSlug": "microsoft", "title": "Office Visio", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1097", "kind": "private_case", "vendorSlug": "microsoft", "title": "GitHub", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1145", "kind": "private_case", "vendorSlug": "microsoft", "title": "Office Visio", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1146,ZDI-24-1147,ZDI-24-1204,ZDI-25-812", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows; SharePoint", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1148,ZDI-25-818", "kind": "private_case", "vendorSlug": "microsoft", "title": "Office PowerPoint; Windows", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1205,ZDI-24-1291,ZDI-24-1292,ZDI-24-1293,ZDI-25-817", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows; Edge", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1206", "kind": "private_case", "vendorSlug": "microsoft", "title": "SharePoint", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1207", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1209", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1210", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1311", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1330,ZDI-25-421", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows; Azure", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1534", "kind": "private_case", "vendorSlug": "microsoft", "title": "SharePoint", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-165", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1657,ZDI-25-083", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows; Edge", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1694", "kind": "private_case", "vendorSlug": "microsoft", "title": "PC Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-208,ZDI-24-396,ZDI-24-980,ZDI-24-981,ZDI-24-982,ZDI-24-983,ZDI-24-985,ZDI-24-1058,ZDI-24-1059,ZDI-24-1060,ZDI-24-1061,ZDI-24-1062,ZDI-24-1063,ZDI-24-1064,ZDI-24-1065,ZDI-24-1066,ZDI-24-1067", "kind": "private_case", "vendorSlug": "microsoft", "title": "Azure; What The Hack; Fluid Framework; Reactor Workshops; AirSim", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-293", "kind": "private_case", "vendorSlug": "microsoft", "title": "Skype", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-294,ZDI-24-399,ZDI-24-1035", "kind": "private_case", "vendorSlug": "microsoft", "title": "Office; Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-361", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-362,ZDI-24-453", "kind": "private_case", "vendorSlug": "microsoft", "title": "Azure; SharePoint", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-363,ZDI-24-978", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows; PC Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-365,ZDI-24-602,ZDI-24-603,ZDI-24-604,ZDI-24-606,ZDI-24-607,ZDI-24-993", "kind": "private_case", "vendorSlug": "microsoft", "title": "Edge; Windows; Azure", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-400,ZDI-24-992", "kind": "private_case", "vendorSlug": "microsoft", "title": "uAMQP for Python; Azure VSTS CLI", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-439", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-451,ZDI-24-452,ZDI-24-986,ZDI-24-987,ZDI-24-988,ZDI-24-1071,ZDI-24-1072,ZDI-24-1073,ZDI-24-1074,ZDI-24-1075,ZDI-24-1098", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows; Azure; Object Detection Solution Accelerator; CameraTraps; PowerShell; PowerShell Reference for Office Products", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-495", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-580", "kind": "private_case", "vendorSlug": "microsoft", "title": "Artifact Registry", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-598", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-601", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-605,ZDI-25-815", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-608,ZDI-24-609,ZDI-24-816,ZDI-24-1076", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-975", "kind": "private_case", "vendorSlug": "microsoft", "title": "Excel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-976", "kind": "private_case", "vendorSlug": "microsoft", "title": "Office PowerPoint", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-977", "kind": "private_case", "vendorSlug": "microsoft", "title": "Office Excel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-979", "kind": "private_case", "vendorSlug": "microsoft", "title": "Office Visio", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-984", "kind": "private_case", "vendorSlug": "microsoft", "title": "Word", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-989", "kind": "private_case", "vendorSlug": "microsoft", "title": "Azure", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-990", "kind": "private_case", "vendorSlug": "microsoft", "title": "3D Builder", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-24-991", "kind": "private_case", "vendorSlug": "microsoft", "title": "Azure Arc Jumpstart", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-1046,ZDI-25-1047,ZDI-25-1048,ZDI-25-1049", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-1050", "kind": "private_case", "vendorSlug": "microsoft", "title": "Azure Virtual Desktop", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-1053", "kind": "private_case", "vendorSlug": "microsoft", "title": "SharePoint", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-1055", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-1056", "kind": "private_case", "vendorSlug": "microsoft", "title": ".NET", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-148", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-150,ZDI-25-234,ZDI-25-770,ZDI-25-823,ZDI-25-824", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows; Skype", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-294,ZDI-25-332,ZDI-25-579", "kind": "private_case", "vendorSlug": "microsoft", "title": "PC Manager; Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-333", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-359,ZDI-25-1057", "kind": "private_case", "vendorSlug": "microsoft", "title": "Visual Studio", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-422,ZDI-25-820,ZDI-25-892", "kind": "private_case", "vendorSlug": "microsoft", "title": "Azure; SharePoint; .NET", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-423", "kind": "private_case", "vendorSlug": "microsoft", "title": "WinJS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-577", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-578,ZDI-25-583,ZDI-25-1054", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-580,ZDI-25-581", "kind": "private_case", "vendorSlug": "microsoft", "title": "SharePoint", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-809,ZDI-25-813", "kind": "private_case", "vendorSlug": "microsoft", "title": "Exchange; PowerShell", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-810,ZDI-25-811", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows; Office", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-814", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-816", "kind": "private_case", "vendorSlug": "microsoft", "title": "Azure", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-819", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-821", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-822", "kind": "private_case", "vendorSlug": "microsoft", "title": "SharePoint", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-25-953,ZDI-25-1001,ZDI-25-1058", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-044", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-083,ZDI-26-178", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-179,ZDI-26-180,ZDI-26-182,ZDI-26-183,ZDI-26-185", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-181,ZDI-26-184", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-226", "kind": "private_case", "vendorSlug": "microsoft", "title": "Azure", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-273,ZDI-26-606", "kind": "private_case", "vendorSlug": "microsoft", "title": "Olive; Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-274,ZDI-26-275", "kind": "private_case", "vendorSlug": "microsoft", "title": "Qlib", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-277,ZDI-26-310", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-279,ZDI-26-607", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows; Office", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-281", "kind": "private_case", "vendorSlug": "microsoft", "title": "vcpkg", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-293", "kind": "private_case", "vendorSlug": "microsoft", "title": "Office", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-294", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-309", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-412,ZDI-26-413,ZDI-26-534,ZDI-26-535,ZDI-26-536,ZDI-26-537,ZDI-26-538,ZDI-26-539,ZDI-26-540,ZDI-26-541", "kind": "private_case", "vendorSlug": "microsoft", "title": "SharePoint; Exchange; Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-418,ZDI-26-708", "kind": "private_case", "vendorSlug": "microsoft", "title": "SharePoint; Windows", "priority": 4, "reasons": [ "Check the source's unpatched-at-publication outcome" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-543", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-544", "kind": "private_case", "vendorSlug": "microsoft", "title": "Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "ZDI-26-629", "kind": "private_case", "vendorSlug": "microsoft", "title": "Azure", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/microsoft/#cases-title", "candidateDate": null }, { "id": "microsoft-cve-2025-29824", "kind": "incident", "vendorSlug": "microsoft", "title": "Windows CLFS zero-day used by ransomware actor; Windows 10 fix a day after Patch Tuesday (CVE-2025-29824)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-29824/", "candidateDate": null }, { "id": "microsoft-cve-2025-53770", "kind": "incident", "vendorSlug": "microsoft", "title": "SharePoint Server 'ToolShell': July 8 fixes incomplete, full fixes July 20-21, 2025 (CVE-2025-53770, -53771, -49704, -49706)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-53770/", "candidateDate": null }, { "id": "microsoft-cve-2025-59287", "kind": "incident", "vendorSlug": "microsoft", "title": "WSUS deserialization RCE: Patch Tuesday fix incomplete, out-of-band fix nine days later (CVE-2025-59287)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2025-59287/", "candidateDate": null }, { "id": "microsoft-cve-2026-42897", "kind": "incident", "vendorSlug": "microsoft", "title": "Exchange Server OWA cross-site scripting zero-day: mitigation May 14, patch June 9, 2026 (CVE-2026-42897)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/microsoft-cve-2026-42897/", "candidateDate": null }, { "id": "ZDI-24-664", "kind": "private_case", "vendorSlug": "mozilla", "title": "Firefox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/mozilla/#cases-title", "candidateDate": null }, { "id": "ZDI-24-665", "kind": "private_case", "vendorSlug": "mozilla", "title": "Firefox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/mozilla/#cases-title", "candidateDate": null }, { "id": "ZDI-25-708", "kind": "private_case", "vendorSlug": "mozilla", "title": "Firefox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/mozilla/#cases-title", "candidateDate": null }, { "id": "n-able-cve-2025-8875", "kind": "incident", "vendorSlug": "n-able", "title": "N-able N-central insecure deserialization and command injection (CVE-2025-8875, CVE-2025-8876)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/n-able-cve-2025-8875/", "candidateDate": null }, { "id": "n-able-cve-2026-18577", "kind": "incident", "vendorSlug": "n-able", "title": "N-able N-central authentication bypass and account takeover (CVE-2026-18556 and its incomplete-fix bypass CVE-2026-18577)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/n-able-cve-2026-18577/", "candidateDate": null }, { "id": "n-able-cve-2026-86218", "kind": "incident", "vendorSlug": "n-able", "title": "N-able N-central pre-authentication remote code execution (static code injection)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/n-able-cve-2026-86218/", "candidateDate": null }, { "id": "ZDI-24-096", "kind": "private_case", "vendorSlug": "oracle", "title": "Product Lifecycle Management", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1034", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1412", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1413", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1414", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-24-408", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-24-409", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-24-410", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-24-411,ZDI-24-412,ZDI-24-413,ZDI-24-414,ZDI-24-415,ZDI-24-776,ZDI-25-257", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-25-598,ZDI-25-599", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-25-600,ZDI-25-601", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-25-602", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-25-692", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-25-957", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-25-958,ZDI-25-959,ZDI-25-960,ZDI-25-961,ZDI-25-962,ZDI-26-097,ZDI-26-098,ZDI-26-099,ZDI-26-102,ZDI-26-103", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-26-100,ZDI-26-101", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-26-306", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-26-362", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-26-387,ZDI-26-388,ZDI-26-389", "kind": "private_case", "vendorSlug": "oracle", "title": "PeopleSoft", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-26-635", "kind": "private_case", "vendorSlug": "oracle", "title": "Outside In Technology", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-26-636,ZDI-26-637,ZDI-26-638", "kind": "private_case", "vendorSlug": "oracle", "title": "Outside In Technology", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-26-639,ZDI-26-643", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-26-640,ZDI-26-641", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-26-642", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "ZDI-26-644", "kind": "private_case", "vendorSlug": "oracle", "title": "VirtualBox", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/oracle/#cases-title", "candidateDate": null }, { "id": "oracle-cve-2020-2883", "kind": "incident", "vendorSlug": "oracle", "title": "Oracle WebLogic Server T3/IIOP remote code execution (April 2020 CPU)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/oracle-cve-2020-2883/", "candidateDate": null }, { "id": "oracle-cve-2024-20953", "kind": "incident", "vendorSlug": "oracle", "title": "Oracle Agile PLM deserialization flaw (January 2024 CPU)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/oracle-cve-2024-20953/", "candidateDate": null }, { "id": "oracle-cve-2024-21182", "kind": "incident", "vendorSlug": "oracle", "title": "Oracle WebLogic Server T3/IIOP unauthenticated data-access flaw (July 2024 CPU)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/oracle-cve-2024-21182/", "candidateDate": null }, { "id": "oracle-cve-2024-21287", "kind": "incident", "vendorSlug": "oracle", "title": "Oracle Agile PLM unauthenticated file disclosure zero-day (CVE-2024-21287)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/oracle-cve-2024-21287/", "candidateDate": null }, { "id": "oracle-cve-2025-61757", "kind": "incident", "vendorSlug": "oracle", "title": "Oracle Identity Manager pre-authentication remote code execution (October 2025 CPU)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/oracle-cve-2025-61757/", "candidateDate": null }, { "id": "oracle-cve-2026-21962", "kind": "incident", "vendorSlug": "oracle", "title": "Oracle HTTP Server / WebLogic Server Proxy Plug-in access-control flaw (CVSS 10.0)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/oracle-cve-2026-21962/", "candidateDate": null }, { "id": "oracle-cve-2026-35273", "kind": "incident", "vendorSlug": "oracle", "title": "Oracle PeopleSoft PeopleTools zero-day exploited by ShinyHunters (CVE-2026-35273)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/oracle-cve-2026-35273/", "candidateDate": null }, { "id": "oracle-cve-2026-46817", "kind": "incident", "vendorSlug": "oracle", "title": "Oracle E-Business Suite (Oracle Payments) unauthenticated takeover flaw", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/oracle-cve-2026-46817/", "candidateDate": null }, { "id": "palo-alto-networks-cve-2026-0322", "kind": "incident", "vendorSlug": "palo-alto-networks", "title": "PAN-OS management interface authenticated remote code execution", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/palo-alto-networks-cve-2026-0322/", "candidateDate": null }, { "id": "ZDI-24-1184", "kind": "private_case", "vendorSlug": "progress", "title": "WS_FTP", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1185,ZDI-24-1186", "kind": "private_case", "vendorSlug": "progress", "title": "WhatsUp Gold", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1187", "kind": "private_case", "vendorSlug": "progress", "title": "WhatsUp Gold", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1645", "kind": "private_case", "vendorSlug": "progress", "title": "WhatsUp Gold", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1684,ZDI-24-1685,ZDI-24-1686,ZDI-24-1687", "kind": "private_case", "vendorSlug": "progress", "title": "WhatsUp Gold", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "ZDI-24-401", "kind": "private_case", "vendorSlug": "progress", "title": "Telerik Reporting", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "ZDI-24-402,ZDI-24-403,ZDI-24-561,ZDI-24-894", "kind": "private_case", "vendorSlug": "progress", "title": "Telerik Reporting; Telerik Report Server; WhatsUp Gold", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "ZDI-24-516,ZDI-24-517", "kind": "private_case", "vendorSlug": "progress", "title": "WhatsUp Gold", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "ZDI-24-518,ZDI-24-884,ZDI-24-886,ZDI-24-888,ZDI-24-889,ZDI-24-890,ZDI-24-892,ZDI-24-893,ZDI-24-1512", "kind": "private_case", "vendorSlug": "progress", "title": "Telerik Reporting; WhatsUp Gold", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "ZDI-24-885", "kind": "private_case", "vendorSlug": "progress", "title": "WhatsUp Gold", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "ZDI-24-887", "kind": "private_case", "vendorSlug": "progress", "title": "WhatsUp Gold", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "ZDI-24-891", "kind": "private_case", "vendorSlug": "progress", "title": "WhatsUp Gold", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "ZDI-24-895", "kind": "private_case", "vendorSlug": "progress", "title": "WhatsUp Gold", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "ZDI-25-151", "kind": "private_case", "vendorSlug": "progress", "title": "Kemp LoadMaster", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "ZDI-26-051,ZDI-26-052,ZDI-26-053,ZDI-26-055", "kind": "private_case", "vendorSlug": "progress", "title": "Kemp LoadMaster", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "ZDI-26-054", "kind": "private_case", "vendorSlug": "progress", "title": "Kemp LoadMaster", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "ZDI-26-318,ZDI-26-319", "kind": "private_case", "vendorSlug": "progress", "title": "Kemp LoadMaster", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "ZDI-26-340,ZDI-26-341,ZDI-26-342", "kind": "private_case", "vendorSlug": "progress", "title": "Kemp LoadMaster", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "ZDI-26-481", "kind": "private_case", "vendorSlug": "progress", "title": "Kemp LoadMaster", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "ZDI-26-482", "kind": "private_case", "vendorSlug": "progress", "title": "Kemp LoadMaster", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "ZDI-26-646", "kind": "private_case", "vendorSlug": "progress", "title": "Kemp LoadMaster", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/progress/#cases-title", "candidateDate": null }, { "id": "progress-cve-2024-1212", "kind": "incident", "vendorSlug": "progress", "title": "Progress Kemp LoadMaster unauthenticated OS command injection via the management API", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/progress-cve-2024-1212/", "candidateDate": null }, { "id": "progress-cve-2024-4885", "kind": "incident", "vendorSlug": "progress", "title": "Progress WhatsUp Gold unauthenticated remote code execution (GetFileWithoutZip, June 2024 bulletin)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/progress-cve-2024-4885/", "candidateDate": null }, { "id": "progress-cve-2026-8037", "kind": "incident", "vendorSlug": "progress", "title": "Progress Kemp LoadMaster pre-authentication OS command injection (LoadMaster Critical Security Bulletin June 2026)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/progress-cve-2026-8037/", "candidateDate": null }, { "id": "ZDI-24-470,ZDI-24-471,ZDI-24-473,ZDI-24-475,ZDI-24-476,ZDI-24-823,ZDI-24-824,ZDI-24-825,ZDI-24-826,ZDI-24-827", "kind": "private_case", "vendorSlug": "qnap", "title": "TS-464", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/qnap/#cases-title", "candidateDate": null }, { "id": "ZDI-24-472,ZDI-24-474,ZDI-24-1123", "kind": "private_case", "vendorSlug": "qnap", "title": "TS-464", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/qnap/#cases-title", "candidateDate": null }, { "id": "ZDI-25-734,ZDI-25-735,ZDI-25-736,ZDI-25-737,ZDI-25-738,ZDI-25-739,ZDI-25-740,ZDI-25-741,ZDI-25-743,ZDI-25-744,ZDI-25-745,ZDI-25-746,ZDI-25-747,ZDI-25-748,ZDI-25-749,ZDI-25-750,ZDI-25-751,ZDI-25-752,ZDI-25-753,ZDI-25-754,ZDI-25-755,ZDI-25-758,ZDI-25-759,ZDI-25-760", "kind": "private_case", "vendorSlug": "qnap", "title": "QHora-322; TS-464", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/qnap/#cases-title", "candidateDate": null }, { "id": "ZDI-25-742", "kind": "private_case", "vendorSlug": "qnap", "title": "TS-464", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/qnap/#cases-title", "candidateDate": null }, { "id": "ZDI-25-756,ZDI-25-757", "kind": "private_case", "vendorSlug": "qnap", "title": "QHora-322", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/qnap/#cases-title", "candidateDate": null }, { "id": "ZDI-25-871,ZDI-26-244", "kind": "private_case", "vendorSlug": "qnap", "title": "QHora-322", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/qnap/#cases-title", "candidateDate": null }, { "id": "ZDI-26-198,ZDI-26-199,ZDI-26-200,ZDI-26-201,ZDI-26-216,ZDI-26-237,ZDI-26-239,ZDI-26-240,ZDI-26-241,ZDI-26-242,ZDI-26-243", "kind": "private_case", "vendorSlug": "qnap", "title": "TS-453E; QHora-322", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/qnap/#cases-title", "candidateDate": null }, { "id": "ZDI-26-202", "kind": "private_case", "vendorSlug": "qnap", "title": "TS-453E", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/qnap/#cases-title", "candidateDate": null }, { "id": "ZDI-26-776", "kind": "private_case", "vendorSlug": "qnap", "title": "TS-453E", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/qnap/#cases-title", "candidateDate": null }, { "id": "sap-cve-2017-12637", "kind": "incident", "vendorSlug": "sap", "title": "SAP NetWeaver AS Java scheduler directory traversal (2017 bug, KEV 2025)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/sap-cve-2017-12637/", "candidateDate": null }, { "id": "sap-cve-2025-31324", "kind": "incident", "vendorSlug": "sap", "title": "SAP NetWeaver Visual Composer zero-day unrestricted file upload (CVE-2025-31324)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/sap-cve-2025-31324/", "candidateDate": null }, { "id": "sap-cve-2025-42999", "kind": "incident", "vendorSlug": "sap", "title": "SAP NetWeaver Visual Composer deserialization flaw chained with CVE-2025-31324 (CVE-2025-42999)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/sap-cve-2025-42999/", "candidateDate": null }, { "id": "ZDI-24-008,ZDI-24-350", "kind": "private_case", "vendorSlug": "solarwinds", "title": "Access Rights Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/solarwinds/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1224,ZDI-24-1225", "kind": "private_case", "vendorSlug": "solarwinds", "title": "Access Rights Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/solarwinds/#cases-title", "candidateDate": null }, { "id": "ZDI-24-170,ZDI-24-171", "kind": "private_case", "vendorSlug": "solarwinds", "title": "Orion Platform", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/solarwinds/#cases-title", "candidateDate": null }, { "id": "ZDI-24-215,ZDI-24-907,ZDI-24-908,ZDI-24-909,ZDI-24-910,ZDI-24-911", "kind": "private_case", "vendorSlug": "solarwinds", "title": "Security Event Manager; Access Rights Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/solarwinds/#cases-title", "candidateDate": null }, { "id": "ZDI-24-347", "kind": "private_case", "vendorSlug": "solarwinds", "title": "Access Rights Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/solarwinds/#cases-title", "candidateDate": null }, { "id": "ZDI-24-348", "kind": "private_case", "vendorSlug": "solarwinds", "title": "Access Rights Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/solarwinds/#cases-title", "candidateDate": null }, { "id": "ZDI-24-349,ZDI-24-351", "kind": "private_case", "vendorSlug": "solarwinds", "title": "Access Rights Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/solarwinds/#cases-title", "candidateDate": null }, { "id": "ZDI-24-454,ZDI-24-912,ZDI-24-913,ZDI-24-914,ZDI-24-915,ZDI-24-916", "kind": "private_case", "vendorSlug": "solarwinds", "title": "Access Rights Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/solarwinds/#cases-title", "candidateDate": null }, { "id": "ZDI-24-455", "kind": "private_case", "vendorSlug": "solarwinds", "title": "Access Rights Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/solarwinds/#cases-title", "candidateDate": null }, { "id": "ZDI-24-905,ZDI-24-1020", "kind": "private_case", "vendorSlug": "solarwinds", "title": "Access Rights Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/solarwinds/#cases-title", "candidateDate": null }, { "id": "ZDI-24-906", "kind": "private_case", "vendorSlug": "solarwinds", "title": "Access Rights Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/solarwinds/#cases-title", "candidateDate": null }, { "id": "ZDI-25-320", "kind": "private_case", "vendorSlug": "solarwinds", "title": "DameWare Mini Remote Control", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/solarwinds/#cases-title", "candidateDate": null }, { "id": "ZDI-25-406", "kind": "private_case", "vendorSlug": "solarwinds", "title": "Serv-U", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/solarwinds/#cases-title", "candidateDate": null }, { "id": "ZDI-25-407", "kind": "private_case", "vendorSlug": "solarwinds", "title": "Web Help Desk", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/solarwinds/#cases-title", "candidateDate": null }, { "id": "ZDI-25-654", "kind": "private_case", "vendorSlug": "solarwinds", "title": "TFTP Server", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/solarwinds/#cases-title", "candidateDate": null }, { "id": "ZDI-25-710", "kind": "private_case", "vendorSlug": "solarwinds", "title": "Platform", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/solarwinds/#cases-title", "candidateDate": null }, { "id": "solarwinds-cve-2026-28318", "kind": "incident", "vendorSlug": "solarwinds", "title": "SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/solarwinds-cve-2026-28318/", "candidateDate": null }, { "id": "ZDI-24-1334", "kind": "private_case", "vendorSlug": "sonicwall", "title": "Connect Tunnel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/sonicwall/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1335", "kind": "private_case", "vendorSlug": "sonicwall", "title": "Connect Tunnel", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/sonicwall/#cases-title", "candidateDate": null }, { "id": "ZDI-24-420,ZDI-24-421", "kind": "private_case", "vendorSlug": "sonicwall", "title": "GMS Virtual Appliance", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/sonicwall/#cases-title", "candidateDate": null }, { "id": "ZDI-26-530,ZDI-26-531,ZDI-26-532", "kind": "private_case", "vendorSlug": "sonicwall", "title": "Email Security; GMS Virtual Appliance", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/sonicwall/#cases-title", "candidateDate": null }, { "id": "sonicwall-cve-2026-15409", "kind": "incident", "vendorSlug": "sonicwall", "title": "SonicWall SMA1000 Work Place SSRF chained with AMC code injection (zero-day)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/sonicwall-cve-2026-15409/", "candidateDate": null }, { "id": "sonicwall-cve-2026-83548", "kind": "incident", "vendorSlug": "sonicwall", "title": "SonicWall SMA1000 pre-auth SSRF chained with AMC command injection", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/sonicwall-cve-2026-83548/", "candidateDate": null }, { "id": "sophos-cve-2020-15069", "kind": "incident", "vendorSlug": "sophos", "title": "Sophos XG Firewall v17.x User Portal bookmark buffer overflow (2020)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/sophos-cve-2020-15069/", "candidateDate": null }, { "id": "sophos-cve-2020-29574", "kind": "incident", "vendorSlug": "sophos", "title": "CyberoamOS WebAdmin SQL injection (2020), used to create rogue accounts", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/sophos-cve-2020-29574/", "candidateDate": null }, { "id": "ZDI-24-072", "kind": "private_case", "vendorSlug": "synology", "title": "RT6600ax", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/synology/#cases-title", "candidateDate": null }, { "id": "ZDI-24-021,ZDI-24-022,ZDI-24-023,ZDI-24-074", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex Central", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-024,ZDI-24-077", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex Central", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-025", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-026,ZDI-24-027", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-028,ZDI-24-029", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-051", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex Central", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-052,ZDI-24-568,ZDI-24-569", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex Central; Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-075", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Deep Security", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-076", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Deep Security", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-078,ZDI-24-079,ZDI-24-080", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Mobile Security for Enterprises", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1022", "kind": "private_case", "vendorSlug": "trend-micro", "title": "VPN Proxy One Pro", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1023", "kind": "private_case", "vendorSlug": "trend-micro", "title": "VPN Proxy One Pro", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1227,ZDI-24-1228", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Deep Discovery Inspector", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1418", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Cloud Edge", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1419", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Deep Security", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1516", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Deep Security", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-570", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-571", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-572,ZDI-24-575", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One; Deep Security", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-573", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-574", "kind": "private_case", "vendorSlug": "trend-micro", "title": "InterScan Web Security Virtual Appliance", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-576", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Maximum Security", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-577", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-585", "kind": "private_case", "vendorSlug": "trend-micro", "title": "VPN Proxy One Pro", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-24-897", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-001", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-002", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-003", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-007", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-008", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Deep Security", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-1125", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Cleaner One Pro", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-201", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Cleaner One Pro", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-236,ZDI-25-239,ZDI-25-240", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex Central; Deep Security", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-237", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex Central", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-238", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex Central", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-241", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Deep Security", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-295,ZDI-25-296,ZDI-25-297", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex Central", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-360", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Worry-Free Business Security", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-361", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Password Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-363,ZDI-26-138", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-365,ZDI-25-380,ZDI-25-398", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One; Maximum Security; Internet Security", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-366", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex Central", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-367", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex Central", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-368,ZDI-25-369,ZDI-25-370,ZDI-25-371,ZDI-25-372,ZDI-25-373,ZDI-25-374,ZDI-25-375", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Endpoint Encryption", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-585", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Maximum Security", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-586", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Password Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-588", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Cleaner One Pro", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-25-771,ZDI-25-772", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-26-139", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-26-140", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-26-141,ZDI-26-142,ZDI-26-143", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-26-144,ZDI-26-145,ZDI-26-146", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex Central", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-26-147,ZDI-26-148", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex Central", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-26-149", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Cleaner One Pro", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-26-269,ZDI-26-270", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-26-320,ZDI-26-321,ZDI-26-322,ZDI-26-323,ZDI-26-324,ZDI-26-653", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Vision One; Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-26-497", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Vision One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-26-498", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Vision One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-26-652", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "ZDI-26-654", "kind": "private_case", "vendorSlug": "trend-micro", "title": "Apex One", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/trend-micro/#cases-title", "candidateDate": null }, { "id": "trend-micro-cve-2026-34926", "kind": "incident", "vendorSlug": "trend-micro", "title": "Trend Micro Apex One (on-prem) server directory traversal, fixed before public disclosure (CVE-2026-34926)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/trend-micro-cve-2026-34926/", "candidateDate": null }, { "id": "ZDI-24-1472", "kind": "private_case", "vendorSlug": "veeam", "title": "Backup Enterprise Manager", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/veeam/#cases-title", "candidateDate": null }, { "id": "ZDI-25-625,ZDI-25-649", "kind": "private_case", "vendorSlug": "veeam", "title": "Backup Enterprise Manager; Veeam Agent for Microsoft Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/veeam/#cases-title", "candidateDate": null }, { "id": "ZDI-25-963", "kind": "private_case", "vendorSlug": "veeam", "title": "Veeam Agent for Microsoft Windows", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/veeam/#cases-title", "candidateDate": null }, { "id": "ZDI-26-427", "kind": "private_case", "vendorSlug": "watchguard", "title": "FireWare OS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/watchguard/#cases-title", "candidateDate": null }, { "id": "ZDI-26-428", "kind": "private_case", "vendorSlug": "watchguard", "title": "FireWare OS", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/watchguard/#cases-title", "candidateDate": null }, { "id": "ZDI-24-1369", "kind": "private_case", "vendorSlug": "zimbra", "title": "Zimbra", "priority": 4, "reasons": [ "Find release evidence covering every advisory; a publication date is only an upper bound" ], "lastReviewed": null, "path": "/vendors/zimbra/#cases-title", "candidateDate": null }, { "id": "zimbra-cve-2019-9621", "kind": "incident", "vendorSlug": "zimbra", "title": "Zimbra ProxyServlet server-side request forgery used in pre-auth RCE chains (CVE-2019-9621)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/zimbra-cve-2019-9621/", "candidateDate": null }, { "id": "zimbra-cve-2020-7796", "kind": "incident", "vendorSlug": "zimbra", "title": "Zimbra WebEx zimlet server-side request forgery (CVE-2020-7796)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/zimbra-cve-2020-7796/", "candidateDate": null }, { "id": "zimbra-cve-2023-34192", "kind": "incident", "vendorSlug": "zimbra", "title": "Zimbra 8.8.15 cross-site scripting in /h/autoSaveDraft (CVE-2023-34192)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/zimbra-cve-2023-34192/", "candidateDate": null }, { "id": "zimbra-cve-2024-27443", "kind": "incident", "vendorSlug": "zimbra", "title": "Zimbra CalendarInvite cross-site scripting used in Sednit's Operation RoundPress (CVE-2024-27443)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/zimbra-cve-2024-27443/", "candidateDate": null }, { "id": "zimbra-cve-2025-27915", "kind": "incident", "vendorSlug": "zimbra", "title": "Zimbra Classic Web Client stored XSS via ICS calendar files (CVE-2025-27915)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/zimbra-cve-2025-27915/", "candidateDate": null }, { "id": "zimbra-cve-2025-48700", "kind": "incident", "vendorSlug": "zimbra", "title": "Zimbra Classic UI cross-site scripting via crafted HTML (CVE-2025-48700)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/zimbra-cve-2025-48700/", "candidateDate": null }, { "id": "zimbra-cve-2025-66376", "kind": "incident", "vendorSlug": "zimbra", "title": "Zimbra Classic UI stored XSS via CSS @import, used by a Russian espionage group (CVE-2025-66376)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/zimbra-cve-2025-66376/", "candidateDate": null }, { "id": "zimbra-cve-2025-68645", "kind": "incident", "vendorSlug": "zimbra", "title": "Zimbra Webmail RestFilter unauthenticated local file inclusion (CVE-2025-68645)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/zimbra-cve-2025-68645/", "candidateDate": null }, { "id": "zimbra-cve-2026-73570", "kind": "incident", "vendorSlug": "zimbra", "title": "Zimbra SNMP notification command injection (CVE-2026-73570)", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/zimbra-cve-2026-73570/", "candidateDate": null }, { "id": "zyxel-cve-2024-11667", "kind": "incident", "vendorSlug": "zyxel", "title": "Zyxel ZLD firewall web management directory traversal used by Helldown ransomware", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/zyxel-cve-2024-11667/", "candidateDate": null }, { "id": "zyxel-cve-2026-7273", "kind": "incident", "vendorSlug": "zyxel", "title": "Zyxel GS1900 series switches CGI stack-based buffer overflow", "priority": 4, "reasons": [ "Patch quality has not been systematically reviewed", "Timeline was reviewed, but its review date was not recorded" ], "lastReviewed": null, "path": "/incidents/zyxel-cve-2026-7273/", "candidateDate": null } ]