Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,611 stories synthesized.
A heap-based buffer overflow in Canon imageCLASS MF654Cdw printers, disclosed at Pwn2Own, lets network-adjacent attackers execute arbitrary code without authentication via a crafted PJCC request.
A critical out-of-bounds write vulnerability in Canon imageCLASS MF654Cdw printers, demonstrated at Pwn2Own, allows network-adjacent attackers to execute arbitrary code without authentication.
A critical VMware ESXi vulnerability disclosed at Pwn2Own allows local attackers with guest privileges to escalate to hypervisor-level code execution via an integer underflow in the VMCI implementation.
Microsoft has released a patch for CVE-2026-21527, a security feature bypass vulnerability in Exchange's InterceptorSmtpAgent that allows remote unauthenticated attackers to bypass a security feature via improper SMTP header parsing.
A vulnerability disclosed at Pwn2Own in the Samsung Members app on the Galaxy S25 allows remote attackers to redirect users to malicious sites and chain the flaw to launch arbitrary Android activities.
A hard-coded credentials vulnerability in the QNAP TS-453E Hyper Data Protector Plugin, discovered at Pwn2Own, lets network-adjacent attackers bypass authentication without any credentials.
A stack-based buffer overflow in Delta Electronics ASDA-Soft (CVE-2026-1361) allows remote code execution via malicious PAR files, with a CVSS score of 7.8.
A high-severity information disclosure vulnerability in ChargePoint Home Flex EV chargers allows unauthenticated remote attackers to extract stored credentials by exploiting a hardcoded cryptographic seed in the device's password generation script.
A critical stack-based buffer overflow in the ChargePoint Home Flex EV charger's OCPP message handling, demonstrated at Pwn2Own, allows network-adjacent attackers to execute arbitrary code as root without authentication.
A critical integer overflow vulnerability in VMware ESXi's VMXNET3 virtual device, disclosed at Pwn2Own, allows a local attacker with high-privileged guest access to escalate privileges to the hypervisor level.
A hard-coded password vulnerability (CVE-2025-13957) in Schneider Electric's EcoStruxure Data Center Expert allows authenticated remote attackers to execute arbitrary code via the PostgreSQL service.
A stack-based buffer overflow in Canon imageCLASS MF654Cdw printers (CVE-2025-14236) allows network-adjacent attackers to execute arbitrary code without authentication, with a patch now available.
A critical heap-based buffer overflow vulnerability in GIMP's LBM file parsing has been disclosed, allowing remote attackers to execute arbitrary code by tricking users into opening a malicious file.
A stack-based buffer overflow in the Canon imageCLASS MF654Cdw printer's XPS parser, disclosed through Pwn2Own, lets network-adjacent attackers execute arbitrary code without authentication.
Canon has released a security update for a critical heap-based buffer overflow in the imageCLASS MF654Cdw printer that was demonstrated at Pwn2Own Berlin 2026, allowing unauthenticated network-adjacent attackers to achieve remote code execution.
A heap-based buffer overflow in VMware Workstation's PVSCSI virtual device, CVE-2025-41238, disclosed at Pwn2Own, allows a local attacker with high-privileged guest access to escalate privileges to the hypervisor level.
A security feature bypass vulnerability in the Samsung Members app on the Galaxy S25, disclosed at Pwn2Own, lets remote attackers open a WebView with a custom URL without authentication.
A use-after-free vulnerability in the Linux kernel's nf_tables subsystem, discovered at Pwn2Own and tracked as CVE-2022-32250, lets local attackers escalate privileges to root.
A SQL injection vulnerability in the QNAP TS-453E Hyper Data Protector Plugin, discovered at Pwn2Own, lets authenticated attackers bypass authentication and execute arbitrary code as root.
A critical unauthenticated remote code execution vulnerability (CVE-2026-4149) in Sonos Era 300 speakers allows attackers to execute arbitrary code at the kernel level via a flaw in SMB response handling.
A critical integer overflow in Canon imageCLASS MF654Cdw printers, discovered at Pwn2Own, lets unauthenticated attackers execute arbitrary code by sending a crafted TrueType font.
A critical heap-based buffer overflow vulnerability in GIMP's HDR file parsing, tracked as CVE-2026-2049, allows remote code execution when a user opens a malicious HDR file.
A critical buffer overflow in Synology DiskStation Manager's Netatalk library, discovered at Pwn2Own, lets unauthenticated remote attackers execute arbitrary code as root.
Zero Day Initiative has disclosed CVE-2022-1972, a Linux kernel vulnerability in nf_tables_newset that allows local attackers to write past the end of an allocated buffer, potentially enabling privilege escalation to root.