Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

07:57 UTC· 7m ago

#vulnerability-disclosure — news, CVEs and analysis · ZeroHour

today 46 visits · 59 views · 7 reads·all time 17K views

Tag

#vulnerability-disclosure

2 stories this week · 16 this month · 25 in 6 months · mostly security

stories per day · 30 days

Related#adobe 3 #bug-bounty 3 #remote-code-execution 3 #use-after-free 3 #wordfence 3 #wordpress 3 #zdi 3 #acrobat-reader-dc 2 #ai 2 #kernel 2 #linux 2 #local-privilege-escalation 2 #lpe 2 #opinion 2 #oss-security 2 #acrobat-pro-dc 1 #agentic-ai 1 #ai-agents 1

23 stories, newest first · one card per story

Wordfence·1d ago

Wordfence Bug Bounty Program Monthly Report – June 2026

#wordfence #wordpress #bug-bounty

DataBreaches.net·1d ago

DIVD Dutch Institute for Vulnerability Disclosure investigating agentic AI-powered attack

#divd #netherlands #agentic-ai

Data breach

oss-security·8d ago

Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill

#kernel #linux #local-privilege-escalation

Vulnerability

oss-security·9d ago high

A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill

#dirtyah6 #kernel #linux

CVE-2026-80844

1

Wordfence·9d ago

Wordfence Intelligence Weekly WordPress Vulnerability Report (September 7, 2026 to September 13, 2026)

#plugins #vulnerability-disclosure #weekly-report

Lobsters · security·10d ago

From Report to Patch, the OpenBSD Errata Process

#bsd #errata #openbsd

Research

Wordfence·12d ago

Wordfence Bug Bounty Program Monthly Report – May 2026

#bug-bounty #plugin-security #vulnerability-disclosure

Hacker News · security·15d ago

HuggingFace: Security.txt

#hugging-face #rfc-9116 #security-txt

Industry

Schneier on Security·16d ago

AIs Compress Exploit Timeline

#ai-agents #automation #exploits

AI safety & security

ZDI Published Advisories·17d ago

ZDI-26-664: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

#acrobat-reader-dc #adobe #remote-code-execution

CVE-2026-81986

oss-security·17d ago

AI slops from Eve

#ai-generated #ai-slop #automated-security-research

Industry

Dark Reading·17d ago

Mythos Vulnerability Firehose Hits a Human Bottleneck

#mythos #project-glasswing #research

Dark Reading·22d ago

AI Is Ending the Era of Hidden Vulnerabilities — Are Vendors Ready?

#ai #opinion #secure-by-design

1

Dark Reading·29d ago

The Vulnpocalypse Is Repricing the Bug Bounty Economy

#ai #bug-bounty #industry

ZDI Published Advisories·Aug 24, 2026

ZDI-26-585: OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

#originlab #origin-viewer #out-of-bounds-write

CVE-2026-19885

ZDI Published Advisories·Aug 24, 2026

ZDI-26-602: Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

#foxit #pdf-reader #rce

CVE-2026-13128

ZDI Published Advisories·Aug 24, 2026

ZDI-26-607: Microsoft Office HTML Injection Information Disclosure Vulnerability

#html-injection #information-disclosure #microsoft

Vulnerability

1

ZDI Published Advisories·Aug 24, 2026

ZDI-26-606: Microsoft Windows Compatibility Appraiser Link Following Local Privilege Escalation Vulnerability

#compatibility-appraiser #microsoft #privilege-escalation

Vulnerability

2

ZDI Published Advisories·Aug 24, 2026

ZDI-26-588: Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability

#fabricjs #information-disclosure #javascript-library

CVE-2026-19504

1

ZDI Published Advisories·Aug 24, 2026 high

ZDI-26-610: Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability

#apple #javascriptcore #rce

CVE-2026-64715

Infosecurity Magazine·Aug 19, 2026

Exclusive: Linux Foundation's Akrites to Go Live in September

#ai #linux-foundation #open-source

Tools

Infosecurity Magazine·Aug 18, 2026 high

Wiz AI Agent Finds Critical Snowflake GitHub Repo Flaw Advanced Security Missed

#ci-cd #github-actions #snowflake

Vulnerability

The Hacker News·Aug 11, 2026 high

Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client

#annotation #buffer-overflow #use-after-free

4 min