https://knutmichael.com/radar/2026-07-15-establishing-a-coordinated-vulnerability-disclosure-program-to-work-with-security-researchers Knut Michael Haugland en 2026-07-15T12:00:00+02:00 Establishing a Coordinated Vulnerability Disclosure Program to Work With Security Researchers https://knutmichael.com/radar/2026-07-15-cisa-adds-two-known-exploited-vulnerabilities-to-catalog Knut Michael Haugland en 2026-07-15T12:00:00+02:00 CISA Adds Two Known Exploited Vulnerabilities to Catalog https://knutmichael.com/radar/2026-07-15-zdi-26-424-synology-diskstation-ds925-mailplus-improper-restriction-of-communication-channel-to-intended-endpoints-vulne Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-424: Synology DiskStation DS925+ MailPlus Improper Restriction of Communication Channel to Intended Endpoints Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-420-adobe-creative-cloud-agsservice-incorrect-permission-assignment-local-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-420: Adobe Creative Cloud AGSService Incorrect Permission Assignment Local Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-441-dnsmasq-dns-response-heap-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-441: dnsmasq DNS Response Heap-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-416-microsoft-hyper-v-netvsc-out-of-bounds-read-local-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-416: Microsoft Hyper-V netvsc Out-Of-Bounds Read Local Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-437-pwn2own-autel-maxicharger-ac-elite-home-websockets-integer-underflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-437: (Pwn2Own) Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-412-pwn2own-microsoft-sharepoint-deserialization-of-untrusted-data-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-412: (Pwn2Own) Microsoft SharePoint Deserialization of Untrusted Data Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-433-pwn2own-autel-maxicharger-ac-elite-home-software-update-improper-verification-of-cryptographic-signature-arbi Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-433: (Pwn2Own) Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-408-xorg-server-computescaledproperties-heap-based-buffer-overflow-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-408: X.Org Server ComputeScaledProperties Heap-based Buffer Overflow Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-428-watchguard-fireware-os-admd-stack-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-428: WatchGuard FireWare OS admd Stack-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-444-7-zip-xz-decompression-heap-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-444: 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-423-synology-diskstation-ds925-mailplus-redis-weak-cryptography-for-passwords-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-423: Synology DiskStation DS925+ MailPlus Redis Weak Cryptography for Passwords Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-404-delta-electronics-dtm-soft-project-file-parsing-deserialization-of-untrusted-data-remote-code-execution-vulne Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-404: Delta Electronics DTM Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-419-adobe-creative-cloud-adobeupdateservice-uncontrolled-search-path-element-local-privilege-escalation-vulnerabi Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-419: Adobe Creative Cloud AdobeUpdateService Uncontrolled Search Path Element Local Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-440-fuji-electric-tellus-pcid64-driver-untrusted-pointer-dereference-denial-of-service-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-440: Fuji Electric Tellus pcid64 Driver Untrusted Pointer Dereference Denial of Service Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-415-microsoft-windows-wmi-providers-incorrect-authorization-local-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-415: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-436-pwn2own-autel-maxicharger-ac-elite-home-usb-heap-based-buffer-overflow-arbitrary-code-execution-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-436: (Pwn2Own) Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-411-nvidia-nvtabular-pickle-file-parsing-deserialization-of-untrusted-data-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-411: NVIDIA NVTabular Pickle File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-432-g-data-total-security-backup-service-link-following-local-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-432: G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-407-xorg-server-pcf-font-parsing-heap-based-buffer-overflow-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-407: X.Org Server PCF Font Parsing Heap-based Buffer Overflow Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-427-watchguard-fireware-os-iked-ike2hmac-null-pointer-dereference-denial-of-service-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-427: WatchGuard FireWare OS iked ike2_hmac Null Pointer Dereference Denial-of-Service Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-422-samsung-rlottie-numeric-truncation-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-422: Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-443-linux-kernel-vmwgfx-integer-overflow-local-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-443: Linux Kernel vmwgfx Integer Overflow Local Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-418-microsoft-sharepoint-spfieldmultilinetext-cross-site-scripting-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-418: Microsoft SharePoint SPFieldMultiLineText Cross-Site Scripting Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-439-fuji-electric-tellus-pcid64-driver-exposed-dangerous-method-local-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-439: Fuji Electric Tellus pcid64 Driver Exposed Dangerous Method Local Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-414-microsoft-powershell-help-directory-traversal-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-414: Microsoft PowerShell Help Directory Traversal Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-435-pwn2own-autel-maxicharger-ac-elite-home-nfc-stack-based-buffer-overflow-arbitrary-code-execution-vulnerabilit Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-435: (Pwn2Own) Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-410-nvidia-nemo-framework-deserialization-of-untrusted-data-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-410: NVIDIA NeMo Framework Deserialization of Untrusted Data Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-430-msi-center-ntiolibx64-origin-validation-error-local-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-430: MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-406-xorg-server-bitmapscalebitmaps-integer-overflow-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-406: X.Org Server BitmapScaleBitmaps Integer Overflow Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-426-openssl-x509-email-validation-out-of-bounds-read-information-disclosure-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-426: OpenSSL X.509 Email Validation Out-Of-Bounds Read Information Disclosure Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-421-cisco-identity-services-engine-validfilenameorpath-directory-traversal-information-disclosure-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-421: Cisco Identity Services Engine validFileNameOrPath Directory Traversal Information Disclosure Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-442-linux-kernel-can-iso-tp-protocol-race-condition-local-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-442: Linux Kernel CAN ISO-TP Protocol Race Condition Local Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-417-microsoft-windows-servermanager-exposed-dangerous-method-local-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-417: Microsoft Windows ServerManager Exposed Dangerous Method Local Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-438-rockwell-automation-arena-simulation-doe-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-438: Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-413-pwn2own-microsoft-sharepoint-improper-verification-of-cryptographic-signature-remote-code-execution-vulnerabi Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-413: (Pwn2Own) Microsoft SharePoint Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-434-pwn2own-autel-maxicharger-ac-elite-home-usb-authentication-bypass-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-434: (Pwn2Own) Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-409-xorg-server-glamor-font-heap-based-buffer-overflow-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-409: X.Org Server Glamor Font Heap-based Buffer Overflow Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-429-nvidia-nemo-framework-deserialization-of-untrusted-data-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-429: NVIDIA NeMo Framework Deserialization of Untrusted Data Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-405-xorg-server-glx-extension-use-after-free-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-405: X.Org Server GLX Extension Use-After-Free Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-15-zdi-26-425-openssl-ocsp-stapling-verification-double-free-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-15T00:00:00+02:00 ZDI-26-425: OpenSSL OCSP Stapling Verification Double Free Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-14-cisa-adds-four-known-exploited-vulnerabilities-to-catalog Knut Michael Haugland en 2026-07-14T12:00:00+02:00 CISA Adds Four Known Exploited Vulnerabilities to Catalog https://knutmichael.com/radar/2026-07-14-rockwell-automation-1715-aentr-ethernetip-adapter Knut Michael Haugland en 2026-07-14T12:00:00+02:00 Rockwell Automation 1715-AENTR EtherNet/IP Adapter https://knutmichael.com/radar/2026-07-14-abb-ability-edgenius Knut Michael Haugland en 2026-07-14T12:00:00+02:00 ABB Ability Edgenius https://knutmichael.com/radar/2026-07-14-abb-advant-master-online-builder Knut Michael Haugland en 2026-07-14T12:00:00+02:00 ABB Advant Master Online Builder https://knutmichael.com/radar/2026-07-14-cisa-urges-sharepoint-hardening-after-new-exploitations Knut Michael Haugland en 2026-07-14T12:00:00+02:00 CISA Urges SharePoint Hardening After New Exploitations https://knutmichael.com/radar/2026-07-14-abb-t-mac-plus Knut Michael Haugland en 2026-07-14T12:00:00+02:00 ABB T-MAC Plus