Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

#pwn2own — news, CVEs and analysis · ZeroHour

today 46 visits · 59 views · 7 reads·all time 17K views

07:57 UTC· 7m ago

Tag

#pwn2own

1 stories this week · 5 this month · 20 in 6 months · mostly security

stories per day · 30 days

Related#zdi 5 #codex 4 #openai 4 #rce 4 #agent-security 3 #vulnerability 3 #ai-agent 1 #canon 1 #cve-2024-0244 1 #fax 1 #heap-overflow 1 #printer 1

17 stories, newest first · one card per story

Zero Day Initiative Blog·3d ago

CVE-2024-0244 – A heap buffer overflow in the Canon MF753Cdw printer

#canon #printer #heap-overflow

7 min

ZDI Published Advisories·17d ago

ZDI-26-648: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution Vulnerability

#ai-agent #codex #openai

CVE-2026-19590

ZDI Published Advisories·Aug 12, 2026

ZDI-26-563: (Pwn2Own) Home Assistant Green Simple Service Discovery Protocol Server-Side Request Forgery Vulnerability

#home-assistant #iot #pwn2own

Advisory

ZDI Published Advisories·Aug 12, 2026

ZDI-26-562: (Pwn2Own) Home Assistant Green mDNS Server-Side Request Forgery Vulnerability

#home-assistant #iot #mdns

Vulnerability

ZDI Published Advisories·Aug 12, 2026

ZDI-26-558: (Pwn2Own) Amazon Smart Plug OTA Update Process Improper Certificate Validation Vulnerability

#amazon #certificate-validation #iot

Advisory

ZDI Published Advisories·Aug 12, 2026

ZDI-26-560: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability

#command-injection #go2rtc #home-assistant

Advisory

ZDI Published Advisories·Aug 12, 2026

ZDI-26-561: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability

#command-injection #go2rtc #home-assistant

Advisory

ZDI Published Advisories·Aug 12, 2026

ZDI-26-557: (Pwn2Own) Amazon Smart Plug Insecure Fallback Information Disclosure Vulnerability

#amazon #information-disclosure #iot

Advisory

ZDI Published Advisories·Aug 12, 2026

ZDI-26-559: (Pwn2Own) Amazon Smart Plug OTA Update Process Out-Of-Bounds Write Remote Code Execution Vulnerability

#amazon #ota #out-of-bounds-write

Advisory

ZDI Published Advisories·Aug 11, 2026 high

ZDI-26-537: (Pwn2Own) Microsoft Windows storport Integer Overflow Local Privilege Escalation Vulnerability

#integer-overflow #microsoft #privilege-escalation

CVE-2026-65814

1

ZDI Published Advisories·Aug 11, 2026 high

ZDI-26-541: (Pwn2Own) Microsoft Windows win32kfull Use-After-Free Local Privilege Escalation Vulnerability

#microsoft #privilege-escalation #pwn2own

CVE-2026-65775

1

ZDI Published Advisories·Aug 11, 2026

ZDI-26-540: (Pwn2Own) Microsoft Windows win32kfull Use-After-Free Information Disclosure Vulnerability

#information-disclosure #microsoft #pwn2own

CVE-2026-65776

ZDI Published Advisories·Aug 11, 2026

ZDI-26-536: (Pwn2Own) Microsoft Windows http.sys Integer Overflow Local Privilege Escalation Vulnerability

#http-sys #integer-overflow #microsoft

CVE-2026-62735

2

ZDI Published Advisories·Aug 11, 2026 high

ZDI-26-534: (Pwn2Own) Microsoft Exchange Capture-Replay Authentication Bypass Vulnerability

#authentication-bypass #capture-replay #exchange

CVE-2026-62911

ZDI Published Advisories·Aug 11, 2026 high

ZDI-26-535: (Pwn2Own) Microsoft Exchange External Control of File Path Remote Code Execution Vulnerability

#advisory #authentication-bypass #exchange

CVE-2026-62911

ZDI Published Advisories·Aug 11, 2026 high

ZDI-26-538: (Pwn2Own) Microsoft Exchange Improper Authorization Privilege Escalation Vulnerability

#exchange #improper-authorization #microsoft

CVE-2026-62911

ZDI Published Advisories·Aug 11, 2026

ZDI-26-539: (Pwn2Own) Microsoft Windows ipt.sys Incorrect Permission Assignment Local Privilege Escalation Vulnerability

#advisory #local-privilege-escalation #microsoft

CVE-2026-65773

1