Search: “Zero Day Initiative”

4,062 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 1299 Ransomware 772 Vulnerability 763 Malware 343 Data breach 253 Threat actor 214 Policy & legal 198 Phishing & fraud 90 Industry 45 Advisory 33 AI safety & security 24 Research 11 AI tools & infra 8 Model release 8

SeverityAll critical 3414 high 336 medium 185 low 89 info 51

Zero Day Initiative — CVE-2026-33824: Remote Code Execution in Windows ...

ZDI details CVE-2026-33824, a double-free in Windows IKEv2 fragment reassembly enabling unauthenticated remote code execution as SYSTEM on Windows.

Zero Day Initiative published technical analysis of CVE-2026-33824, a double-free in the Windows IKE Extension (ikeext.dll) caused by improper ownership handling of a heap blob pointer during IKEv2 fragment reassembly in IkeReinjectReassembledPacket(). A remote unauthenticated attacker can send a crafted IKE_SA_INIT message with a Security Realm Vendor ID followed by fragmented IKE_AUTH payloads to trigger the double free. Successful exploitation could yield arbitrary code execution under the IKEEXT service context (SYSTEM). ZDI also provided IDS detection guidance correlating the two-packet sequence on UDP ports 500 and 4500.

Web discovery (articles for new exploits & KEV entries)Sep 7, 19:06 UTC · 8d agoVulnerability CVE-2026-33824

65

Tesla, Microsoft and Ubuntu bugs found during Pwn2Own hacking competition

The RecordJan 12, 00:00 UTC · Jan 12, 2023Exploit / PoC

60

Pwn2Own 2021 hacking contest ends with a three

The RecordNov 17, 00:00 UTC · Nov 17, 2022Vulnerability

42

How did Clop get its hands on the MOVEit zero day?

The RecordAug 30, 12:50 UTC · Aug 30, 2023Ransomware

60

ZDI discloses four zero

Security AffairsNov 3, 23:11 UTC · Nov 3, 2023Exploit / PoC

60

Synology fixes multiple critical vulnerabilities in its routers

Security AffairsJan 3, 21:19 UTC · Jan 3, 2023Vulnerability CVE-2022-43931

60

Pwn2Own Vancouver 2024: participants earned $1,132,500 for 29 unique 0

Security AffairsMar 22, 10:53 UTC · Mar 22, 2024Exploit / PoC

60

Researchers earn thousands for exposing mobile device exploits at Pwn2Own

CyberScoopNov 14, 19:06 UTC · Nov 14, 2018Exploit / PoC in the wild

60

White hat hackers earn over $1 Million at Pwn2Own Austin 2021

Security AffairsNov 6, 12:23 UTC · Nov 6, 2021Exploit / PoC

60

Safari, Microsoft Edge exploits earn hackers $162k at Pwn2Own

CyberScoopMar 15, 00:57 UTC · Mar 15, 2018Exploit / PoC in the wild

60

Mozilla Firefox, Microsoft Edge succumb in web browser competition at Pwn2Own

CyberScoopMar 22, 14:44 UTC · Mar 22, 2019Exploit / PoC in the wild

60

Apple, Oracle, VMware products successfully hacked at Pwn2Own

CyberScoopMar 21, 18:12 UTC · Mar 21, 2019Exploit / PoC in the wild

60

Meta Offers $1M bounty at Pwn2Own Ireland 2025 for WhatsApp exploits

Security AffairsAug 1, 15:50 UTC · Aug 1, 2025Vulnerability

42

Pwn2Own 2020 - Participants hacked Adobe Reader, Oracle VirtualBox, and Windows

Security AffairsMar 20, 10:08 UTC · Mar 20, 2020Vulnerability

30

April 2023 Patch Tuesday forecast: The vulnerability discovery race

Help Net SecurityApr 7, 00:00 UTC · Apr 7, 2023Vulnerability CVE-2013-3900

60

Adobe fixed the CVE-2018-5002 Flash Zero-Day exploited in targeted attacks in the Middle East

Security AffairsJun 7, 14:17 UTC · Jun 7, 2018Exploit / PoC CVE-2018-5002 CVE-2018-4945 CVE-2018-5000+2 CVEs

60

Two Foxit Reader RCE zero-day vulnerabilities disclosed

Help Net SecurityAug 18, 00:00 UTC · Aug 18, 2017Exploit / PoC CVE-2017-10951 CVE-2017-10952

60

Participants earned +$1.3M at Pwn2Own Automotive competition

Security AffairsJan 27, 10:40 UTC · Jan 27, 2024Exploit / PoC

60

Pwn2Own Toronto 2022 Day 3:Participants earned nearly $1 million

Security AffairsDec 9, 14:39 UTC · Dec 9, 2022Exploit / PoC

60

Pwn2Own Miami hacking contest awarded 400K for 26 unique ICS exploits

Security AffairsApr 22, 08:21 UTC · Apr 22, 2022Exploit / PoC

60

Recent DarkGate campaign exploited Microsoft Windows zero

Security AffairsMar 14, 20:57 UTC · Mar 14, 2024Threat actor in the wildCVE-2024-21412

60

Adobe addresses several critical flaws in Illustrator, Bridge, and Magento

Security AffairsApr 29, 07:56 UTC · Apr 29, 2020Vulnerability CVE-2020-9553 CVE-2020-9568 CVE-2020-9554+19 CVEs

60

oPatch community released micro patches for Microsoft JET Database Zero

Security AffairsSep 26, 05:49 UTC · Sep 26, 2018Vulnerability

55

VMware finally fixed critical CVE-2020

Security AffairsNov 5, 08:36 UTC · Nov 5, 2020Vulnerability CVE-2020-3992

60

Russian cybercrooks exploiting 7-Zip zero-day vulnerability (CVE-2025-0411)

Help Net SecurityNov 19, 15:20 UTC · Nov 19, 2025Exploit / PoC CVE-2025-0411

60

Pwn2Own 2021, more than $1,500,000 in cash and prizes for contestants

Security AffairsJan 27, 19:14 UTC · Jan 27, 2021Industry

30

Microsoft Patch Tuesday for January 2021 fixes 83 flaws, including an actively exploited issue

Security AffairsJan 13, 14:25 UTC · Jan 13, 2021Vulnerability in the wildCVE-2021-1647 CVE-2021-1648 CVE-2021-1665+10 CVEs

60

Pwn2Own Automotive 2025 Day 1: organizers awarded $382,750 for 16 zero

Security AffairsJan 22, 22:01 UTC · Jan 22, 2025Exploit / PoC

60

VMware fixes critical flaws in virtualization software (CVE-2023-20869, CVE-2023-20870)

Help Net SecurityApr 26, 00:00 UTC · Apr 26, 2023Vulnerability CVE-2023-20869 CVE-2023-20870 CVE-2023-20871+1 CVEs1

60

White hat hackers earn over $500,000 for mobile exploits at Mobile Pwn2Own 2017 competition

Security AffairsNov 2, 13:32 UTC · Nov 2, 2017Vulnerability

30

Researchers disclose five Microsoft Windows zero

Security AffairsMay 20, 11:45 UTC · May 20, 2020Exploit / PoC CVE-2020-0916 CVE-2020-0986 CVE-2020-0915

60

Adobe addresses two critical vulnerabilities in Photoshop

Security AffairsApr 13, 17:56 UTC · Apr 13, 2021Vulnerability CVE-2021-28548 CVE-2021-28549 CVE-2021-21091+7 CVEs

60

0-Days Found in iPhone X, Samsung Galaxy S9, Xiaomi Mi6 Phones

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2018Exploit / PoC

60

Adobe fixed multiple critical flaws in Acrobat and Reader

Security AffairsMay 15, 10:46 UTC · May 15, 2024Vulnerability CVE-2024-30284 CVE-2024-30310 CVE-2024-34094+9 CVEs

60

CISA warns of flaws in Fuji Electric Tellus Lite V

Security AffairsJan 28, 08:16 UTC · Jan 28, 2021Advisory CVE-2021-22637 CVE-2021-22655 CVE-2021-22653+2 CVEs

60

Patch Tuesday: Microsoft Releases Update to Fix 53 Vulnerabilities

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2017Vulnerability CVE-2017-8700 CVE-2017-11827 CVE-2017-11848+12 CVEs

60

Experts at ZDI reported two critical Zero

Security AffairsAug 22, 07:57 UTC · Aug 22, 2017Exploit / PoC CVE-2017-10951 CVE-2017-10952

60

SolarWinds fixed critical RCE CVE-2024

Security AffairsSep 16, 10:59 UTC · Sep 16, 2024Vulnerability CVE-2024-28991 CVE-2024-28990

60

It's a mystery ... alleged unpatched Telegram zero-day allows device takeover, but Telegram denies

Security AffairsMar 30, 14:15 UTC · Mar 30, 2026Exploit / PoC

60

Pwn2Own 2016 - Keen Team won $215k by hacking Nexus 6p & iPhone6S

Security AffairsNov 20, 10:19 UTC · Nov 20, 2017Exploit / PoC

60