Radar
A personal hobby project. Radar aggregates security advisories from CISA, Zero Day Initiative and CERT-EU and adds short editorial highlights on what I find notable from a European infrastructure perspective — not a threat-intel service, not exhaustive, just what catches my eye.
-
ZDI-26-784: FreeBSD Kernel kqueue Use-After-Free Local Privilege Escalation Vulnerability
The advisory reports a use-after-free bug in the FreeBSD kernel’s kqueue implementation that enables local privilege escalation.
Read more → -
ZDI-26-785: FreeBSD Kernel Shared Memory Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
The advisory notes a local privilege escalation in the FreeBSD kernel via a shared memory TOCTOU bug.
Read more → -
ZDI-26-781: LibreOffice EMF+ Brush Integer Overflow Remote Code Execution Vulnerability
LibreOffice contains an integer overflow in EMF+ brush handling that can be triggered remotely. Exploitation requires a user to open a malicious file or visit a malicious page.
Read more → -
ZDI-26-782: LibreOffice PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
LibreOffice's PDF parser contains a heap-based buffer overflow that can be triggered remotely.
Read more → -
ZDI-26-783: LibreOffice PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
LibreOffice's PDF parser has an out-of-bounds write that can be triggered by a crafted PDF.
Read more → -
ZDI-26-779: (0Day) Sparx Systems Enterprise Architect XSLT Debugger XML External Entity Processing Information Disclosure Vulnerability
The XSLT debugger in Sparx Systems Enterprise Architect processes external entities, enabling information disclosure.
Read more → -
ZDI-26-780: X.Org Server GestureBuildSprite Use-After-Free Information Disclosure Vulnerability
The advisory reports a use-after-free in X.Org Server’s GestureBuildSprite function that can disclose information.
Read more → -
ZDI-26-777: Adobe Photoshop AdobePDFL PDF JPEG Parsing Integer Overflow Remote Code Execution Vulnerability
Adobe Photoshop's PDF JPEG parsing suffers an integer overflow that can lead to remote code execution.
Read more → -
ZDI-26-778: Adobe Photoshop DCM Pixel Data Parsing Integer Overflow Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious file or visit a malicious page.
Read more → -
ZDI-26-758: Docker Buildx Filesystem Entitlements Protection Mechanism Failure Remote Code Execution Vulnerability
Docker Buildx can be remotely compromised if a user visits a malicious page or opens a malicious file.
Read more → -
ZDI-26-759: X.Org Server XKB TextDoodad Double Free Privilege Escalation Vulnerability
The issue is a double-free in X.Org Server’s XKB TextDoodad handling.
Read more → -
ZDI-26-760: X.Org Server Present Extension Use-After-Free Information Disclosure Vulnerability
The advisory reports a use-after-free in X.Org Server’s Present extension that can disclose information.
Read more → -
ZDI-26-761: X.Org Server XInput Passive Grab Use-After-Free Information Disclosure Vulnerability
A use-after-free in X.Org Server’s XInput passive grab handling can lead to information disclosure.
Read more → -
ZDI-26-762: X.Org Server GLX RenderLarge Heap-based Buffer Overflow Privilege Escalation Vulnerability
A heap-based buffer overflow in X.Org Server’s GLX RenderLarge path can be used for local privilege escalation.
Read more → -
ZDI-26-763: X.Org Server XKB XkbResizeKeyType Numeric Truncation Privilege Escalation Vulnerability
The XkbResizeKeyType function in X.Org Server contains a numeric truncation that can be exploited for local privilege escalation.
Read more → -
ZDI-26-764: X.Org Server XFixes Pointer Barrier Heap-based Buffer Overflow Privilege Escalation Vulnerability
Heap-based buffer overflow in X.Org Server's XFixes Pointer Barrier can enable local privilege escalation.
Read more → -
ZDI-26-765: X.Org Server XKB Heap-based Buffer Overflow Privilege Escalation Vulnerability
A heap-based buffer overflow in X.Org Server's XKB handling enables local privilege escalation.
Read more → -
ZDI-26-766: X.Org Server RandR Heap-based Buffer Overflow Privilege Escalation Vulnerability
The advisory notes a heap-based buffer overflow in the RandR extension of X.Org Server that can be used for local privilege escalation.
Read more → -
ZDI-26-767: X.Org Server Glamor CopyArea Heap-based Buffer Overflow Privilege Escalation Vulnerability
A heap-based buffer overflow in the Glamor CopyArea function of X.Org Server enables local privilege escalation.
Read more → -
ZDI-26-768: X.Org Server XInput ProcXIPassiveUngrabDevice Heap-based Buffer Overflow Privilege Escalation Vulnerability
Heap-based buffer overflow in X.Org Server’s XInput ProcXIPassiveUngrabDevice function enables local privilege escalation.
Read more → -
ZDI-26-769: X.Org Server XKB XkbSetMap Request Out-Of-Bounds Read Information Disclosure Vulnerability
The X.Org Server XKB XkbSetMap request can trigger an out-of-bounds read, resulting in information disclosure.
Read more → -
ZDI-26-770: SonicWall Secure Mobile Access unzip Directory Traversal Remote Code Execution Vulnerability
Authentication is required to exploit the directory traversal remote code execution in SonicWall Secure Mobile Access.
Read more → -
ZDI-26-771: Fortinet FortiSandbox login_user_profile Hard-Coded Credentials Authentication Bypass Vulnerability
Remote attackers can bypass authentication on FortiSandbox without credentials.
Read more → -
ZDI-26-772: Fortinet FortiSandbox Admin Profile Improper Handling of Exceptional Conditions Denial-of-Service Vulnerability
Authenticated remote attackers can cause a denial-of-service on FortiSandbox.
Read more → -
ZDI-26-773: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability
The advisory notes that the NoMachine named pipe is assigned overly permissive permissions, enabling local privilege escalation.
Read more → -
ZDI-26-774: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
The advisory notes that the flaw permits local privilege escalation on NoMachine. Exploitation requires prior low-privileged code execution.
Read more → -
ZDI-26-775: GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
Heap-based buffer overflow in GStreamer’s rtpL16depay element enables remote code execution.
Read more → -
ZDI-26-776: QNAP TS-453E syslog log_message Format String Remote Code Execution Vulnerability
Unauthenticated remote code execution via a syslog format-string flaw on QNAP TS-453E devices.
Read more → -
ZDI-26-757: (0Day) Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability
Telegram's rlottie library has a numeric truncation flaw that can enable remote code execution when a user opens a crafted file or visits a malicious page.
Read more → -
ZDI-26-756: (0Day) Genesis World load_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
Remote code execution is possible via deserialization of untrusted data in Genesis World's load_checkpoint library.
Read more → -
ZDI-26-752: (0Day) Genesis World decompress_usdz Directory Traversal Remote Code Execution Vulnerability
Remote code execution is possible via the decompress_usdz function in Genesis World.
Read more → -
ZDI-26-753: (0Day) Genesis World MJCF Directory Traversal Information Disclosure Vulnerability
The advisory reports a directory traversal in Genesis World's MJCF library that can disclose sensitive information.
Read more → -
ZDI-26-754: (0Day) Genesis World URDF Directory Traversal Information Disclosure Vulnerability
Remote attackers can disclose sensitive information via a directory traversal in Genesis World.
Read more → -
ZDI-26-755: (0Day) Genesis World glTF Server-Side Request Forgery Vulnerability
Genesis World’s glTF library is vulnerable to SSRF, enabling remote attackers to trigger arbitrary server-side requests.
Read more → -
ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
The advisory reports a TOCTOU privilege escalation flaw in the Windows dxgkrnl driver.
Read more → -
ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution Vulnerability
Exploitation requires write access to the samld session directory.
Read more → -
ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution Vulnerability
Remote code execution is possible via a stack-based buffer overflow in WatchGuard FireWare OS's spamd statushdlr, but authentication is required.
Read more → -
ZDI-26-720: Foxit PDF Reader activeDocs Missing Authorization Information Disclosure Vulnerability
Foxit PDF Reader's activeDocs component can disclose sensitive information when a user opens a crafted file or visits a malicious page.
Read more → -
ZDI-26-721: Foxit PDF Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability
An integer overflow in Foxit PDF Reader’s U3D parser can be triggered by opening a crafted PDF or visiting a malicious page.
Read more → -
ZDI-26-722: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
Exploitation requires the victim to open a crafted PDF or visit a malicious webpage.
Read more → -
ZDI-26-723: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability
Exploitation requires the victim to open a malicious PDF file or visit a crafted web page.
Read more → -
ZDI-26-724: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
The vulnerability is a use-after-free in Foxit PDF Reader’s annotation handling that requires the victim to open a malicious PDF or visit a malicious page.
Read more → -
ZDI-26-725: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability
Foxit PDF Reader contains a use-after-free that can disclose data, but exploitation requires a user to open a malicious PDF or visit a malicious page.
Read more → -
ZDI-26-726: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability
Foxit PDF Reader contains a use-after-free information disclosure that requires user interaction.
Read more → -
ZDI-26-727: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
Exploitation requires the victim to open a crafted PDF or load a malicious page.
Read more → -
ZDI-26-728: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability
The use-after-free leads to information disclosure, but exploitation requires user interaction.
Read more → -
ZDI-26-729: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability
Foxit PDF Reader contains a use-after-free that can disclose information.
Read more → -
ZDI-26-730: Foxit PDF Reader DeviceN Colorspace Out-Of-Bounds Write Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious PDF file or visit a malicious web page.
Read more → -
ZDI-26-731: Foxit PDF Reader FileOpen Uninitialized Variable Remote Code Execution Vulnerability
Exploitation requires the victim to open a crafted PDF file or visit a malicious web page.
Read more → -
ZDI-26-732: Foxit PDF Reader importIcon NTLM Response Information Disclosure Vulnerability
Foxit PDF Reader may disclose NTLM response data when processing a malicious page or file.
Read more → -
ZDI-26-733: Foxit PDF Reader Portfolio Directory Traversal Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious PDF file or visit a crafted web page.
Read more → -
ZDI-26-734: Foxit PDF Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability
Foxit PDF Reader can be remotely compromised via a RichMedia annotation directory traversal that requires user interaction.
Read more → -
ZDI-26-735: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability
A use-after-free in Foxit PDF Reader can disclose sensitive data.
Read more → -
ZDI-26-736: Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
The advisory reports an out-of-bounds read in Foxit PDF Reader's PDF parsing that can disclose information.
Read more → -
ZDI-26-737: Foxit PDF Reader JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Foxit PDF Reader can disclose sensitive data via an out-of-bounds read when parsing crafted JPEG files.
Read more → -
ZDI-26-738: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability
The vulnerability is a use-after-free in Foxit PDF Reader’s annotation handling that can disclose information.
Read more → -
ZDI-26-739: Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability
Foxit PDF Reader can be exploited via an out-of-bounds read to disclose information.
Read more → -
ZDI-26-740: Foxit PDF Reader PRC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Exploitation requires the victim to open a crafted PDF file or visit a malicious web page.
Read more → -
ZDI-26-741: Foxit PDF Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability
A network-adjacent attacker can achieve arbitrary code execution by convincing a user to open a malicious file or visit a malicious page.
Read more → -
ZDI-26-742: Foxit PDF Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerability
The advisory notes a race condition in FoxitUpdater that can be leveraged for local privilege escalation.
Read more → -
ZDI-26-743: Foxit PDF Reader JPEG2000 Parsing Memory Corruption Remote Code Execution Vulnerability
Foxit PDF Reader can be remotely exploited via crafted JPEG2000 data when a user opens a malicious file or visits a malicious page.
Read more → -
ZDI-26-744: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Exploitation requires the victim to open a crafted PDF file or load a malicious webpage.
Read more → -
ZDI-26-745: Foxit PDF Reader AcroForm Out-of-Bounds Read Remote Code Execution Vulnerability
The vulnerability is an out-of-bounds read in Foxit PDF Reader’s AcroForm handling.
Read more → -
ZDI-26-746: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious PDF file or visit a malicious page.
Read more → -
ZDI-26-747: Wireshark RF4CE Packet Parsing Buffer Overflow Remote Code Execution Vulnerability
Wireshark's RF4CE packet parser contains a buffer overflow that can lead to remote code execution when a user opens a crafted page or file.
Read more → -
ZDI-26-748: Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability
KeyShot’s BIP file parser does not validate search-path elements, enabling remote code execution when a crafted file is opened.
Read more → -
ZDI-26-719: Cisco ThousandEyes Virtual Appliance DHCP Client Command Injection Remote Code Execution Vulnerability
Remote code execution is possible on Cisco ThousandEyes Virtual Appliance. Exploitation requires authentication.
Read more → -
ZDI-26-715: Linux Mint Xreader PDF File Parsing Type Confusion Remote Code Execution Vulnerability
Xreader can be remotely compromised via a crafted PDF file. Exploitation requires the victim to open the malicious file or visit a malicious page.
Read more → -
ZDI-26-716: Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution Vulnerability
The createDBLink command in Cisco Identity Services Engine is vulnerable to command injection, requiring authentication for exploitation.
Read more → -
ZDI-26-717: Cisco Identity Services Engine AlarmMessageDiskQueue Deserialization of Untrusted Data Remote Code Execution Vulnerability
Exploitation requires valid authentication credentials.
Read more → -
ZDI-26-718: Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure Vulnerability
The issue exploits XML external entity processing in the MnTRESTLivelogService to disclose data after authentication.
Read more → -
ZDI-26-714: Samsung rlottie Stack-based Buffer Overflow Remote Code Execution Vulnerability
A stack-based buffer overflow in Samsung rlottie enables remote code execution.
Read more → -
ZDI-26-709: Cisco Secure Firewall Management Center CommandSinkRmi Deserialization of Untrusted Data Remote Code Execution Vulnerability
Unauthenticated remote code execution via CommandSinkRmi deserialization in Cisco Secure Firewall Management Center.
Read more → -
ZDI-26-710: NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability
Unauthenticated remote code execution via a heap-based buffer overflow in NoMachine's mDNS handling.
Read more → -
ZDI-26-711: NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability
The vulnerability permits local privilege escalation on NoMachine installations via improper authentication in the Redis component.
Read more → -
ZDI-26-712: NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability
Unauthenticated attackers can exploit an SSRF flaw in NoMachine’s nxhtd service to issue arbitrary server-side requests.
Read more → -
ZDI-26-713: GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
GIMP's APNG parser contains a stack-based buffer overflow.
Read more → -
ZDI-26-703: (0Day) Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability
The Airbyte SharePoint connector’s _get_shared_drive_object endpoint can be abused for SSRF.
Read more → -
ZDI-26-704: (0Day) Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability
Airbyte's OneDrive connector can be abused for SSRF when authenticated.
Read more → -
ZDI-26-705: (0Day) BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability
BusyBox's libarchive component can be abused via a symlink directory traversal to create arbitrary files.
Read more → -
ZDI-26-706: (0Day) CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability
Remote attackers can execute code by loading a malicious agent configuration.
Read more → -
ZDI-26-707: (0Day) MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability
Remote code execution is possible on MindsDB OpenBBtable installations, but exploitation requires authentication.
Read more → -
ZDI-26-708: (0Day) Microsoft Windows HTTP Proxy Privilege Escalation Vulnerability
Local privilege escalation via the Windows HTTP Proxy component.
Read more → -
ZDI-26-680: Linux Kernel Crypto Subsystem Use-After-Free Local Privilege Escalation Vulnerability
A use-after-free in the Linux kernel crypto subsystem enables local privilege escalation.
Read more → -
ZDI-26-681: Linux Kernel FUSE Subsystem Race Condition Local Privilege Escalation Vulnerability
A race condition in the Linux kernel FUSE subsystem permits local privilege escalation.
Read more → -
ZDI-26-682: Linux Kernel IPv6 Neighbour Discovery Uninitialized Memory Information Disclosure Vulnerability
Local exploitation requires high-privileged code execution to disclose information.
Read more → -
ZDI-26-683: Linux Kernel IPv6 VTI Subsystem Use-After-Free Local Privilege Escalation Vulnerability
The advisory reports a use-after-free flaw in the Linux kernel IPv6 VTI subsystem (CVE-2026-72463) with a CVSS score of 7.5.
Read more → -
ZDI-26-684: Linux Kernel KSMBD Query Directory Request Race Condition Remote Code Execution Vulnerability
Remote code execution is possible without authentication on Linux kernels with KSMBD enabled.
Read more → -
ZDI-26-685: Linux Kernel NFC NCI UART Driver Race Condition Local Privilege Escalation Vulnerability
A race condition in the Linux kernel NFC NCI UART driver can be used for local privilege escalation.
Read more → -
ZDI-26-686: Linux Kernel nftables Race Condition Local Privilege Escalation Vulnerability
A race condition in the nftables subsystem of the Linux kernel enables local privilege escalation.
Read more → -
ZDI-26-687: Linux Kernel Open vSwitch Flow Delete Use-After-Free Information Disclosure Vulnerability
A use-after-free in the Linux kernel's Open vSwitch flow-delete path can disclose kernel memory to a local low-privileged attacker.
Read more → -
ZDI-26-688: Linux Kernel OpenvSwitch Race Condition Local Privilege Escalation Vulnerability
The vulnerability is a race condition in the Linux kernel's OpenvSwitch component that enables local privilege escalation.
Read more → -
ZDI-26-689: Linux Kernel SCTP Subsystem Race Condition Information Disclosure Vulnerability
A race condition in the Linux kernel SCTP subsystem can disclose information to a local low-privileged attacker.
Read more → -
ZDI-26-690: Linux Kernel MCTP Routing Uninitialized Memory Information Disclosure Vulnerability
Local attackers can read sensitive data if they have high-privileged code execution on the target Linux kernel.
Read more → -
ZDI-26-691: Linux Kernel Netlink-based Wireless Configuration Integer Overflow Local Privilege Escalation Vulnerability
Integer overflow in the Linux kernel netlink-based wireless configuration can lead to local privilege escalation. Exploitation requires the attacker to have already executed code with high privileges.
Read more → -
ZDI-26-692: Linux Kernel eMPIA USB Device Driver Race Condition Code Execution Vulnerability
The vulnerability is a race condition in the eMPIA USB device driver that allows physically present attackers to execute arbitrary code.
Read more → -
ZDI-26-693: Linux Kernel ksmbd Share Configuration Race Condition Remote Code Execution Vulnerability
Only Linux kernels with ksmbd enabled are vulnerable, and exploitation requires authentication.
Read more → -
ZDI-26-694: Linux Kernel Net Scheduler Clsact Qdisc Use-After-Free Local Privilege Escalation Vulnerability
The advisory reports a use-after-free in the Linux kernel’s net scheduler clsact qdisc. It enables local privilege escalation.
Read more → -
ZDI-26-695: Linux Kernel NFSv4 Server Race Condition Remote Code Execution Vulnerability
The vulnerability allows remote attackers to execute arbitrary code on Linux Kernel installations with nfsd enabled, but authentication is required.
Read more → -
ZDI-26-696: Linux Kernel NTFS3 Journal Heap-based Buffer Overflow Code Execution Vulnerability
Local low-privilege code can trigger a heap-based overflow in the NTFS3 journal handling.
Read more →
Page 1 of 7 · 690 advisories