Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 6,167 stories synthesized.
A 0-day vulnerability in Docker Desktop for Windows lets attackers with high-privileged container access escalate to arbitrary code execution on the host, after Docker rejected the report as outside its threat model.
Zero Day Initiative discloses a privilege escalation zero-day in Docker Desktop for Windows that lets attackers escape a container and execute arbitrary code on the host.
A critical directory traversal vulnerability in Adobe ColdFusion, tracked as CVE-2026-27305, allows unauthenticated remote attackers to read arbitrary files from the server, and Adobe has released an emergency security update to patch the flaw.
A deserialization vulnerability in Microsoft Qlib's fit function, disclosed as ZDI-26-274, allows remote code execution via untrusted data, with a CVSS score of 7.8.
A high-severity remote code execution vulnerability in Microsoft Windows Snipping Tool, tracked as CVE-2026-32183, has been disclosed by Zero Day Initiative with a CVSS score of 7.5.
A race condition in the Linux kernel's ETS scheduler (CVE-2025-71066) allows local attackers to escalate privileges to kernel-level code execution, with a patch now available.
A high-severity vulnerability in Avast Premium Security's Gen Self Protection driver lets local attackers with low-privileged code execution escalate privileges to SYSTEM.
Threat actors compromised CPUID's download API on April 9, 2026, serving trojanized CPU-Z, HWMonitor, and PerfMonitor binaries through the official download button for 19 hours, with SentinelOne's AI EDR autonomously blocking the attack.
Microsoft's April 2026 Patch Tuesday addresses 167 vulnerabilities, including three zero-days: an actively exploited SharePoint spoofing flaw, a publicly disclosed Defender privilege escalation, and a critical for VPN-adjacent IKE remote code execution.
Microsoft's April 2026 Patch Tuesday addresses 167 vulnerabilities, including a SharePoint Server zero-day under active attack and a publicly disclosed Windows Defender privilege-escalation bug, while Adobe and Google also release emergency patches for exploited flaws.
Microsoft's April 2026 Patch Tuesday addresses 165 vulnerabilities, eight rated critical, with one SharePoint spoofing flaw already under active exploitation.
GitHub Security Lab released Season 4 of its Secure Code Game, a free open-source course where players hack a deliberately vulnerable AI assistant to learn agentic AI security risks.
Security researchers at Socket have uncovered a campaign of 108 malicious Chrome extensions that steal session cookies, harvest Google account data via OAuth2, and inject ads, affecting roughly 20,000 users.
Fortinet has disclosed multiple relative path traversal vulnerabilities in FortiWeb that could allow a local privileged attacker to execute unauthorized code on the underlying system.
Fortinet has disclosed a server-side request forgery vulnerability in FortiSOAR that could allow authenticated attackers to probe local ports and discover services running on the host.
The Axios npm package was compromised on March 31, 2026, via a maintainer account takeover, with malicious versions deploying a cross-platform RAT on Windows, macOS, and Linux.
Fortinet disclosed a stored cross-site scripting vulnerability in FortiSOAR that allows authenticated remote attackers to execute malicious scripts via crafted HTTP requests.
Fortinet disclosed a critical OS command injection vulnerability in FortiSandbox, allowing unauthenticated attackers to execute arbitrary code via crafted HTTP requests.
Fortinet disclosed an improper authentication vulnerability in FortiSOAR's web GUI that allows unauthenticated attackers to bypass two-factor authentication by replaying a captured request.
Fortinet disclosed a missing authentication vulnerability in the CAPWAP daemon of FortiOS and FortiSwitchManager, allowing local unauthenticated attackers to write device configuration.
Fortinet has disclosed a high-severity SQL injection vulnerability in FortiDDoS-F that could allow authenticated attackers to execute arbitrary SQL queries via crafted HTTP requests.
Fortinet disclosed an information exposure vulnerability in FortiNDR and FortiVoice that allows authenticated attackers with read-only access to retrieve backup files via crafted HTTP requests.
Fortinet has disclosed a stored cross-site scripting vulnerability in FortiSandbox and FortiSandbox Cloud that allows a privileged attacker to execute malicious scripts via crafted HTTP requests.
Fortinet disclosed a path traversal vulnerability in FortiSandbox that allows privileged attackers with super-admin profiles and CLI access to delete arbitrary directories via crafted HTTP requests.