60
60
Microsoft Patch Tuesday for March 2025 — Snort rules and prominent vulnerabilities
60
Microsoft Patch Tuesday for April 2023 — Snort rules and prominent vulnerabilities
60
ZDI-26-590: libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI disclosed CVE-2026-19773, an unauthenticated out-of-bounds write allowing remote code execution in libwebsockets HTTP/2 HPACK parsing, rated CVSS 9.8.
The Zero Day Initiative published advisory ZDI-26-590 for an out-of-bounds write vulnerability in libwebsockets' HTTP/2 HPACK path header parsing. A remote attacker can execute arbitrary code on affected installations without authentication. The flaw is tracked as CVE-2026-19773 and carries a CVSS score of 9.8.
60
60
Microsoft Releases Patches for 60 Flaws—Two Under Active Attack
60
60
Microsoft Patch Tuesday for March 2023 — Snort rules and prominent vulnerabilities
60
Microsoft discloses 5 critical vulnerabilities in June's Patch Tuesday, no zero
60
Microsoft September 2022 Patch Tuesday fixed actively exploited zero
60
60
60
60
Network Attack Trends: February
60
60
60
Zoom Patches “Zoomsday” Zero-Click Flaw Enabling Remote Code Execution
Zoom patched CVE-2026-53413, a zero-click annotation flaw dubbed "Zoomsday" allowing remote code execution on meeting participants' devices across all platforms.
Zoom patched four vulnerabilities, including CVE-2026-53413, a stack buffer overflow in CAnnoFormatBlock::Deserialize in the annotation protocol that allows zero-click remote code execution on another participant's device. A Security also found CVE-2026-53414, a buffer overread enabling denial-of-service crashes, and CVE-2026-53415, a use-after-free Zoom had already discovered internally. Updates shipped for Workplace 7.1.5 and 7.0.6, Rooms 7.1.5, and Meeting SDK 7.1.5 across all supported platforms.
70
60
UNISOC Modem Flaw Enables Remote Code Execution via Video Calls
A UNISOC modem flaw allows attackers to achieve kernel-level remote code execution through malicious video calls on affected devices.
UNISOC, whose modems are widely deployed in Android smartphones, has a flaw that enables kernel-level code execution triggered via video calls. Successful exploitation would give an attacker deep control over affected handsets. No exploitation activity is mentioned in the report.
65
60
Zero Day Initiative — CVE-2026-33824: Remote Code Execution in Windows ...
ZDI details CVE-2026-33824, a double-free in Windows IKEv2 fragment reassembly enabling unauthenticated remote code execution as SYSTEM on Windows.
Zero Day Initiative published technical analysis of CVE-2026-33824, a double-free in the Windows IKE Extension (ikeext.dll) caused by improper ownership handling of a heap blob pointer during IKEv2 fragment reassembly in IkeReinjectReassembledPacket(). A remote unauthenticated attacker can send a crafted IKE_SA_INIT message with a Security Realm Vendor ID followed by fragmented IKE_AUTH payloads to trigger the double free. Successful exploitation could yield arbitrary code execution under the IKEEXT service context (SYSTEM). ZDI also provided IDS detection guidance correlating the two-packet sequence on UDP ports 500 and 4500.
65
60
60
60
60
60
60
60
Apache OFBiz Update Fixes High-Severity Flaw Leading to Remote Code Execution
60
HPE Issues Security Patch for StoreOnce Bug Allowing Remote Authentication Bypass
60
60
60
60
60
60
60
60
60
60