Michael DePlante

~ /Users ls

izobashi

Blog Posts

Presentations

  • Mar 2019Speaker: "ICS HMI Research" @ InfoSec Southwest in Austin, Texas
  • Aug 2019Speaker: "Overflowing a Bug Bounty's Buffers with SCADA Vulnerabilities" @ ICSJWG Conference in Springfield, Massachusetts
  • Oct 2019Keynote Speaker: "The SCADA Vulnerability Landscape" @ 8.8 Computer Security Conference in Mexico City, Mexico

Upcoming Advisories

$ filter with "izobashi" @ zerodayinitiative.com/advisories/upcoming/

Published Vulnerabilities

*A single CVE assignment may contain several unique bugs · tap a CVE to see the credit

jump to: 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017

[ 2026 ]

  • CVE-2026-111105Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability
  • CVE-2026-43780Apple macOS ImageIO Numeric Truncation Remote Code Execution Vulnerability
  • CVE-2026-43733Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2026-43729Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2026-15551Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability
  • CVE-2026-20616Apple macOS libusd_ms Alembic File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2026-28941Apple macOS USD Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2026-28940Apple macOS USD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2026-15679Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
  • CVE-2026-10043MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability
  • CVE-2026-24149NVIDIA Megatron-LM load_base_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
  • CVE-2026-25656Siemens SINEC NMS Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
  • CVE-2026-25655Siemens SINEC NMS Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
  • CVE-2026-8916Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability

[ 2025 ]

  • CVE-2025-31219Apple XNU kernel vm_map Race Condition Local Privilege Escalation Vulnerability
  • CVE-2025-24149Apple SceneKit Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2025-43264Apple USD Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2025-43219Apple USD Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2025-31281Apple USD Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2025-43224Apple USD Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2025-43221Apple USD Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2025-31280Apple USD Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2025-43218Apple USD Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2025-43215Apple USD readColor Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2025-61838Adobe USD-Fileformat-plugins usdGltf Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2025-61839Adobe USD-Fileformat-plugins Out-Of-Bounds Read Remote Code Execution Vulnerability
  • CVE-2025-61842Adobe USD-Fileformat-plugins usdGltf Use-After-Free Information Disclosure Vulnerability
  • CVE-2025-61840Adobe USD-Fileformat-plugins usdGltf Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2025-61844Adobe USD-Fileformat-plugins usdGltf Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2025-61844Adobe USD-Fileformat-plugins usdGltf Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2025-61837Adobe USD-Fileformat-plugins usdGltf Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2025-61843Adobe USD-Fileformat-plugins usdGltf Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2025-61845Adobe USD-Fileformat-plugins usdGltf Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2025-61841Adobe USD-Fileformat-plugins usdGltf Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2025-43386Apple USD Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2025-43383Apple USD Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2025-43384Apple USD Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2025-43385Apple USD Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2025-149250-day Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability
  • CVE-2025-149240-day Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability
  • CVE-2025-27690-day Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

[ 2024 ]

  • CVE-2024-7571Ivanti Secure Access Client Pulse Secure Service Link Following Local Privilege Escalation Vulnerability
  • CVE-2024-54501Apple macOS WindowServer Denial-of-Service Vulnerability
  • CVE-2024-44218Apple SceneKit Improper Validation of Array Index Remote Code Execution Vulnerability
  • CVE-2024-27829Apple macOS AppleVADriver Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2024-27877Apple macOS AppleVADriver Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2024-27857Apple Metal Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2024-27857Apple Metal Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2024-40846Apple macOS AppleIntelKBLGraphicsMTLDriver Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2024-40841Apple macOS AppleIntelKBLGraphicsMTLDriver Out-Of-Bounds Read Remote Code Execution Vulnerability
  • CVE-2024-44160Apple macOS AppleVADriver Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2024-44161Apple macOS AppleGVA Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2024-44154Apple macOS VideoToolbox Uninitialized Memory Information Disclosure Vulnerability
  • CVE-2024-27861Apple macOS AppleVADriver Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2024-27860Apple macOS AppleVADriver Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2024-72490-day Comodo Firewall Link Following Local Privilege Escalation Vulnerability
  • CVE-2024-72380-day VIPRE Advanced Security SBAMSvc Link Following Local Privilege Escalation Vulnerability
  • CVE-2024-72400-day F-Secure Total Link Following Local Privilege Escalation Vulnerability
  • CVE-2024-72410-day Panda Security Dome Link Following Local Privilege Escalation Vulnerability
  • CVE-2024-72420-day Panda Security Dome Link Following Local Privilege Escalation Vulnerability
  • CVE-2024-72430-day Panda Security Dome Link Following Local Privilege Escalation Vulnerability
  • CVE-2024-72440-day Panda Security Dome VPN DLL Hijacking Local Privilege Escalation Vulnerability
  • CVE-2024-72450-day Panda Security Dome VPN Incorrect Permission Assignment Local Privilege Escalation Vulnerability
  • CVE-2024-72320-day Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability
  • CVE-2024-72370-day AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability
  • CVE-2024-72360-day AVG AntiVirus Free icarus Arbitrary File Creation Denial of Service Vulnerability
  • CVE-2024-72340-day AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability
  • CVE-2024-72270-day Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability
  • CVE-2024-61470-day Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability
  • CVE-2024-72350-day AVG AntiVirus Free Link Following Denial-of-Service Vulnerability
  • CVE-2024-72280-day Avast Free Antivirus Link Following Denial-of-Service Vulnerability
  • CVE-2024-0353ESET Smart Security Premium ekrn Link Following Local Privilege Escalation Vulnerability
  • CVE-2024-2003ESET Smart Security Premium Link Following Local Privilege Escalation Vulnerability
  • CVE-2024-4454WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability
  • CVE-2024-3037PaperCut NG pc-web-print Link Following Local Privilege Escalation Vulnerability
  • CVE-2024-3037PaperCut NG web-print-hot-folder Link Following Local Privilege Escalation Vulnerability
  • CVE-2024-8404PaperCut NG/MF web-print-hot-folder Arbitrary File Deletion Vulnerability
  • CVE-2024-32849Trend Micro Maximum Security Link Following Local Privilege Escalation Vulnerability
  • CVE-2024-7510Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
  • CVE-2024-3298Dassault Systèmes eDrawings DWG/DXF File Parsing Out-Of-Bounds Write and Type Confusion Remote Code Execution Vulnerability

[ 2023 ]

  • CVE-2023-42902Apple AppleGraphicsControl Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2023-42826Apple macOS Hydra File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2023-42856Apple macOS Hydra File Parsing Memory Corruption Remote Code Execution Vulnerability
  • CVE-2023-42888Apple ImageIO File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2023-32375Apple macOS Hydra USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2023-38421Apple macOS Hydra File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2023-28285Microsoft Office SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
  • CVE-2023-279110-day Microsoft 3D Viewer FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2023-6006PaperCut NG Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
  • CVE-2023-38627Trend Micro Apex Central modTXSO Server-Side Request Forgery Information Disclosure Vulnerability
  • CVE-2023-21582Adobe Digital Editions PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2023-44430Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
  • CVE-2023-40486Maxon Cinema 4D SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2023-40484Maxon Cinema 4D SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2023-25009Autodesk 3DS Max USD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2023-25006Autodesk 3DS Max USD File Parsing Use-After-Free Remote Code Execution Vulnerability
  • CVE-2023-25001Autodesk 3DS Max SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
  • CVE-2023-26336Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability
  • CVE-2023-25901Adobe Dimension USD File Parsing Memory Corruption Remote Code Execution Vulnerability
  • CVE-2023-25899Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability
  • CVE-2023-25898Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2023-25897Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2023-26330Adobe Dimension USD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

[ 2022 ]

  • CVE-2022-26751Apple AppleGraphicsControl Double Free Remote Code Execution Vulnerability
  • CVE-2022-47211Microsoft Word SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2022-21908Windows Installer Local Privilege Escalation Vulnerability
  • CVE-2022-35825Microsoft Visual Studio FBX File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2022-41107Microsoft Office FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2022-43653Bentley View SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2022-43651Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
  • CVE-2022-43655Bentley View FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2022-43656Bentley View FBX File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2022-43652Bentley View SKP File Parsing Use-After-Free Information Disclosure Vulnerability
  • CVE-2022-436170-day Corel CorelDRAW Graphics Suite PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2022-436180-day Corel CorelDRAW Graphics Suite PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2022-436160-day Corel CorelDRAW Graphics Suite EMF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
  • CVE-2022-436140-day Corel CorelDRAW Graphics Suite GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2022-436130-day Corel CorelDRAW Graphics Suite CGM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2022-43615Corel CorelDRAW Graphics Suite PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2022-43612Corel CorelDRAW Graphics Suite JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2022-43611Corel CorelDRAW Graphics Suite BMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2022-43610Corel CorelDRAW Graphics Suite GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2022-33882Autodesk Desktop App Link Following Local Privilege Escalation Vulnerability
  • CVE-2022-33882Autodesk Desktop App Link Following Local Privilege Escalation Vulnerability
  • CVE-2022-40709Trend Micro Deep Security Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2022-40708Trend Micro Deep Security Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2022-40707Trend Micro Deep Security Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2022-35234Trend Micro Maximum Security Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2022-37347Trend Micro Maximum Security Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2022-37348Trend Micro Maximum Security Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2022-2897Measuresoft ScadaPro Server Link Following Local Privilege Escalation Vulnerability
  • CVE-2022-2897Measuresoft ScadaPro Client Link Following Local Privilege Escalation Vulnerability
  • CVE-2022-2898Measuresoft ScadaPro Server Link Following Denial-Of-Service Vulnerability
  • CVE-2022-2898Measuresoft ScadaPro Client Link Following Denial-Of-Service Vulnerability
  • ZDI-CAN-146150-day Epic Games Link Following Denial-Of-Service Vulnerability
  • ZDI-CAN-146040-day Epic Games Link Following Denial-Of-Service Vulnerability
  • CVE-2022-28702ABB e-Design Link Following Denial-Of-Service Vulnerability
  • CVE-2022-29483ABB e-Design Link Following Local Privilege Escalation Vulnerability
  • CVE-2022-31219ABB Automation Builder Platform Link Following Local Privilege Escalation Vulnerability
  • CVE-2022-31218ABB Automation Builder Platform Link Following Local Privilege Escalation Vulnerability
  • CVE-2022-31216ABB Automation Builder Platform Link Following Local Privilege Escalation Vulnerability
  • CVE-2022-31217ABB Automation Builder Platform Link Following Local Privilege Escalation Vulnerability
  • CVE-2022-26057ABB Mint WorkBench Link Following Local Privilege Escalation Vulnerability

[ 2021 ]

  • ZDI-CAN-145280-day Microsoft .NET Link Following Denial-Of-Service Vulnerability
  • ZDI-CAN-145860-day Microsoft Visual Studio Link Following Denial-Of-Service Vulnerability
  • ZDI-CAN-145340-day Microsoft Visual Studio Link Following Denial-Of-Service Vulnerability
  • ZDI-CAN-145330-day Microsoft Visual Studio Link Following Denial-Of-Service Vulnerability
  • CVE-2021-4199Bitdefender Endpoint Security Tools & Total Security Link Following Local Privilege Escalation Vulnerability
  • CVE-2021-4198Bitdefender Endpoint Security Tools & Total Security Link Following Denial-Of-Service Vulnerability
  • CVE-2021-45442Trend Micro Worry-free Business Security Link Following Denial-Of-Service Vulnerability
  • CVE-2021-44023Trend Micro Maximum Security Link Following Denial-Of-Service Vulnerability
  • CVE-2021-27041ICONICS GENESIS64 DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2021-27040ICONICS GENESIS64 DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2021-26434Microsoft Visual Studio Incorrect Permission Assignment Privilege Escalation Vulnerability
  • CVE-2021-40156Autodesk Navisworks DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2021-40155Autodesk Navisworks DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
  • CVE-2021-27046Autodesk Navisworks PDF File Parsing Memory Corruption Remote Code Execution Vulnerability
  • ZDI-CAN-131700-day Autodesk Meshmixer 3MF File Parsing Use-After-Free Remote Code Execution Vulnerability
  • ZDI-CAN-131690-day Autodesk Meshmixer 3MF File Parsing Use-After-Free Remote Code Execution Vulnerability
  • CVE-2021-27040Autodesk AutoCAD DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
  • CVE-2021-27040Autodesk AutoCAD DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
  • CVE-2021-27040Autodesk AutoCAD DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
  • CVE-2021-27040Autodesk AutoCAD DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
  • CVE-2021-27040Autodesk AutoCAD DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2021-31514OpenText Brava! Desktop BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2021-31513OpenText Brava! Desktop BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2021-31512OpenText Brava! Desktop TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
  • CVE-2021-31511OpenText Brava! Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2021-31510OpenText Brava! Desktop TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
  • CVE-2021-31509OpenText Brava! Desktop DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2021-31508OpenText Brava! Desktop DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2021-31502OpenText Brava! Desktop PDF File Parsing Use-After-Free Remote Code Execution Vulnerability
  • CVE-2021-31506OpenText Brava! Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2021-31501OpenText Brava! Desktop DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
  • CVE-2021-31497OpenText Brava! Desktop DWG File Parsing Use-After-Free Remote Code Execution Vulnerability
  • CVE-2021-31496OpenText Brava! Desktop DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2021-31495OpenText Brava! Desktop DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
  • CVE-2021-31494OpenText Brava! Desktop DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2021-31493OpenText Brava! Desktop DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
  • CVE-2021-25234Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability
  • CVE-2021-25233Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability
  • CVE-2021-25227Trend Micro Antivirus for Mac Memory Exhaustion Denial-Of-Service Vulnerability
  • CVE-2021-25226Trend Micro ServerProtect vsapiapp Memory Exhaustion Denial-Of-Service Vulnerability
  • CVE-2021-25225Trend Micro ServerProtect splx_schedule_scan Memory Exhaustion Denial-Of-Service Vulnerability
  • CVE-2021-25177Siemens JT2Go DXF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability
  • CVE-2021-25176Siemens JT2Go DXF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability
  • CVE-2021-25175Siemens JT2Go DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2021-25175Siemens JT2Go DXF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability
  • CVE-2021-25175Siemens JT2Go DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2021-25175Siemens JT2Go DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2021-27044Siemens Solid Edge Viewer FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

[ 2020 ]

  • CVE-2020-3765Adobe After Effects MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  • CVE-2020-28577Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability
  • CVE-2020-25774Trend Micro OfficeScan ServerMigrationTool ZIP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

[ 2019 ]

  • CVE-2019-18251OMRON CX-Supervisor Vulnerable Third-Party Component Remote Code Execution Vulnerability
  • CVE-2019-10996Red Lion Crimson CD3 File Parsing Use-After-Free Remote Code Execution Vulnerability
  • CVE-2019-10990Red Lion Crimson Hard-coded Cryptographic Key Information Disclosure Vulnerability
  • CVE-2019-10984Red Lion Crimson CD3 File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability
  • CVE-2019-10978Red Lion Crimson CD3 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2019-10978Red Lion Crimson CD31 File Parsing Memory Corruption Remote Code Execution Vulnerability

[ 2018 ]

  • CVE-2018-10616ABB Panel Builder BeECOM IpAddress Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2018-10616ABB Panel Builder YAMAHA_VIP_robot_Pre Format String Remote Code Execution Vulnerability
  • CVE-2018-10616ABB Panel Builder SIMATIC_S5_3964R_Pre UserSettings Format String Remote Code Execution Vulnerability
  • CVE-2018-10616ABB Panel Builder Yaskawa_FSP_Pre StationsList Stack-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2018-10616ABB Panel Builder KEB_COMBIVERT_Pre UserSettings Format String Remote Code Execution Vulnerability
  • CVE-2018-10616ABB Panel Builder BEYaskawaSMC IPAddress Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2018-10616ABB Panel Builder bemodbus ClockDevice Stack-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2018-10616ABB Panel Builder bemodbus Nodes Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2018-10616ABB Panel Builder bemodbus TCP_IP_Address Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2018-10616ABB Panel Builder beSaia_Ethernet IPAddress Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2018-10616ABB Panel Builder bes7mpidirect ClockDevice Stack-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2018-10616ABB Panel Builder beOMRON TCP_IP_Address Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2018-10616ABB Panel Builder UserSettings Format String Remote Code Execution Vulnerability
  • CVE-2018-10616ABB Panel Builder Allen Bradley MicroLogix TCP_IP_Address Heap-based Buffer Overflow Remote Code Execution Vulnerabilities
  • CVE-2018-10616ABB Panel Builder Animatics_SmartMotor UserSettings Format String Remote Code Execution Vulnerability
  • CVE-2018-10616ABB Panel Builder beFesto IPAddress Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2018-10616ABB Panel Builder BEControlLogix IPAddress Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2018-10616ABB Panel Builder BeECOM IpAddress Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2018-10616ABB Panel Builder beDVT IpAddress Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2018-10616ABB Panel Builder Becomli CommandLineOptions Stack-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2018-10616ABB Panel Builder Begalil IPAddress Heap-based Buffer Overflow Remote Code Execution Vulnerability
  • CVE-2018-7527Wecon PI Studio HMI Project Programmer TextContent Stack-based Buffer Overflow Remote Code Execution Vulnerability

[ 2017 ]

Press

Security Bulletins

Apple
2026iOS 18.7.10 and iPadOS 18.7.10 · iOS 26.6 and iPadOS 26.6 · macOS Tahoe 26.6 · macOS Sequoia 15.7.8 · macOS Sonoma 14.8.8 · watchOS 26.6 · tvOS 26.6 · visionOS 26.6 · iOS 18.7.9 and iPadOS 18.7.9 · iOS 26.5 and iPadOS 26.5 · macOS Tahoe 26.5 · macOS Sequoia 15.7.7 · tvOS 26.5 · visionOS 26.5 · iOS 18.7.5 and iPadOS 18.7.5 · macOS Tahoe 26.3 · macOS Sonoma 14.8.4 · visionOS 26.3
2025iOS 18.7.2 and iPadOS 18.7.2 · iOS 26.1 and iPadOS 26.1 · macOS Tahoe 26.1 · macOS Sequoia 15.7.2 · tvOS 26.1 · visionOS 26.1 · iOS 18.6 and iPadOS 18.6 · macOS Sequoia 15.6 · tvOS 18.6 · visionOS 2.6 · iOS 18.5 and iPadOS 18.5 · iPadOS 17.7.7 · macOS Sequoia 15.5 · macOS Sonoma 14.7.6 · macOS Ventura 13.7.6 · watchOS 11.5 · tvOS 18.5 · visionOS 2.5 · iOS 18.3 and iPadOS 18.3 · iPadOS 17.7.4 · macOS Sequoia 15.3 · macOS Sonoma 14.7.3 · macOS Ventura 13.7.3 · watchOS 11.3 · tvOS 18.3 · visionOS 2.3
2024iOS 18.2 and iPadOS 18.2 · iPadOS 17.7.3 · macOS Sequoia 15.2 · macOS Sonoma 14.7.2 · macOS Ventura 13.7.2 · watchOS 11.2 · tvOS 18.2 · visionOS 2.2 · iOS 18.1 and iPadOS 18.1 · iOS 17.7.1 and iPadOS 17.7.1 · macOS Sequoia 15.1 · macOS Sonoma 14.7.1 · macOS Sequoia 15 · macOS Sonoma 14.7 · macOS Ventura 13.7 · macOS Monterey 12.7.6 · macOS Sonoma 14.6 · macOS Ventura 13.6.8 · visionOS 1.2 · iOS 17.5 and iPadOS 17.5 · macOS Sonoma 14.5 · tvOS 17.5 · iOS 16.7.5 and iPadOS 16.7.5
2023iOS 17.2 and iPadOS 17.2 · macOS Sonoma 14.2 · watchOS 10.2 · macOS Sonoma 14.1 · macOS Ventura 13.6.1 · macOS Monterey 12.7.1 · macOS Sonoma 14 · macOS Ventura 13.5 · macOS Monterey 12.6.8 · macOS Ventura 13.4 · macOS Monterey 12.6.6
2022macOS Big Sur 11.6.6 · iOS 15.5 and iPadOS 15.5 · macOS Monterey 12.4 · watchOS 8.6 · tvOS 15.5
Microsoft
CVE-2021-26434 · CVE-2022-21908 · CVE-2022-35825 · CVE-2022-41107 · CVE-2022-47211 · CVE-2023-28285 · MVR 2023 leaderboard #48
Adobe
APSB25-114 · APSB23-27 · APSB23-20 · APSB23-04 · APSB20-09
Autodesk
ADSK-SA-2023-0008 · ADSK-SA-2023-0004 · ADSK-SA-2023-0002 · ADSK-SA-2022-0015 · ADSK-SA-2022-0007 · ADSK-SA-2021-0009 · ADSK-SA-2021-0008 · ADSK-SA-2021-0004 · ADSK-SA-2021-0001
CISA ICS
ICSA-23-073-02 · ICSA-22-235-06 · ICSA-22-179-01 · ICSA-19-318-04 · ICSA-19-248-01 · ICSA-18-198-01 · ICSA-18-116-02 · ICSA-18-004-02 · ICSA-17-353-05 · ICSA-17-353-03
Trend Micro
TMKA-19175 · TMKA-11058 · TMKA-10867 · TMKA-10191 · KB 000294176 · KB 000291590 · KB 000289996 · KB 000284207 · KB 000284206 · KB 000284205 · KB 000284202 · KB 000281949 · KB 000281947 · KB 000271974
ESET
CA8674 · CA8612
PaperCut
November 2023 bulletin · May 2025 bulletin · May 2024 bulletin
Ivanti
Secure Access Client
Siemens
SSA-663999 · SSA-311973 · SSA-155599
ABB
3BSE092089 · 2CMT006086
Bentley
BE-2022-0019
Dassault Systèmes
Security advisories
Unity
January 2023

Connect

twitter>> linkedin>>