Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,559 stories synthesized.
A simple browser back-button flaw in the UK's Companies House WebFiling portal let authenticated users view and modify registration details of any of five million companies, exposing directors' emails and dates of birth to potential fraud.
A SQL injection vulnerability in the QNAP TS-453E Hyper Data Protector Plugin, discovered at Pwn2Own, lets authenticated attackers bypass authentication and execute arbitrary code as root.
A use-after-free vulnerability in the Linux kernel's nf_tables subsystem, discovered at Pwn2Own and tracked as CVE-2022-32250, lets local attackers escalate privileges to root.
A critical code injection vulnerability in the malware_remover.cgi endpoint of QNAP TS-453E devices, disclosed at Pwn2Own, allows unauthenticated network-adjacent attackers to execute arbitrary Python code with root privileges.
Canon has released a security update for a critical heap-based buffer overflow in the imageCLASS MF654Cdw printer that was demonstrated at Pwn2Own Berlin 2026, allowing unauthenticated network-adjacent attackers to achieve remote code execution.
A critical heap-based buffer overflow vulnerability in GIMP's LBM file parsing has been disclosed, allowing remote attackers to execute arbitrary code by tricking users into opening a malicious file.
A critical integer overflow vulnerability in VMware ESXi's VMXNET3 virtual device, disclosed at Pwn2Own, allows a local attacker with high-privileged guest access to escalate privileges to the hypervisor level.
A critical stack-based buffer overflow in the ChargePoint Home Flex EV charger's OCPP message handling, demonstrated at Pwn2Own, allows network-adjacent attackers to execute arbitrary code as root without authentication.
A stack-based buffer overflow in Delta Electronics ASDA-Soft (CVE-2026-1361) allows remote code execution via malicious PAR files, with a CVSS score of 7.8.
A high-severity information disclosure vulnerability in ChargePoint Home Flex EV chargers allows unauthenticated remote attackers to extract stored credentials by exploiting a hardcoded cryptographic seed in the device's password generation script.
A stack-based buffer overflow in the Canon imageCLASS MF654Cdw printer's XPS parser, disclosed through Pwn2Own, lets network-adjacent attackers execute arbitrary code without authentication.
A vulnerability disclosed at Pwn2Own in the Samsung Members app on the Galaxy S25 allows remote attackers to redirect users to malicious sites and chain the flaw to launch arbitrary Android activities.
Microsoft has released a patch for CVE-2026-21527, a security feature bypass vulnerability in Exchange's InterceptorSmtpAgent that allows remote unauthenticated attackers to bypass a security feature via improper SMTP header parsing.
A heap-based buffer overflow in VMware Workstation's PVSCSI virtual device, CVE-2025-41238, disclosed at Pwn2Own, allows a local attacker with high-privileged guest access to escalate privileges to the hypervisor level.
A local privilege escalation vulnerability in KeePassXC's OpenSSL configuration, tracked as CVE-2026-4158, allows attackers with low-privileged code execution to load arbitrary configuration and escalate to SYSTEM-level access.
A critical VMware ESXi vulnerability disclosed at Pwn2Own allows local attackers with guest privileges to escalate to hypervisor-level code execution via an integer underflow in the VMCI implementation.
A security feature bypass vulnerability in the Samsung Members app on the Galaxy S25, disclosed at Pwn2Own, lets remote attackers open a WebView with a custom URL without authentication.
A stack-based buffer overflow in Canon imageCLASS MF654Cdw printers (CVE-2025-14236) allows network-adjacent attackers to execute arbitrary code without authentication, with a patch now available.
A critical out-of-bounds write vulnerability in Canon imageCLASS MF654Cdw printers, demonstrated at Pwn2Own, allows network-adjacent attackers to execute arbitrary code without authentication.
A heap-based buffer overflow in Canon imageCLASS MF654Cdw printers, disclosed at Pwn2Own, lets network-adjacent attackers execute arbitrary code without authentication via a crafted PJCC request.
A critical SQL injection vulnerability in QNAP TS-453E NAS devices, discovered during Pwn2Own Berlin 2026, allows authenticated network-adjacent attackers to execute arbitrary code as admin.
A format string vulnerability in QNAP TS-453E NAS devices, disclosed at Pwn2Own, allows network-adjacent attackers to execute arbitrary code as admin.
A command injection vulnerability in the revssh service of ChargePoint Home Flex EV chargers, disclosed at Pwn2Own, allows unauthenticated network-adjacent attackers to execute arbitrary code as root via a crafted OCPP message.
Zero Day Initiative has disclosed CVE-2022-1972, a Linux kernel vulnerability in nf_tables_newset that allows local attackers to write past the end of an allocated buffer, potentially enabling privilege escalation to root.