Technology ❯ Cybersecurity ❯ Vulnerabilities

Zero-Day Exploits

Google Chrome Microsoft Defender Microsoft SharePoint Android Security Windows Microsoft Apple Security Updates Remote Code Execution CVE-2026-11645 Cisco

SonicWall SMA1000 Zero‑Days Exploited to Gain Root on VPN Appliances

The flaws let unauthenticated outsiders tunnel to internal services to install custom malware that harvests credentials.

Researcher Publishes LegacyHive PoC That Escalates Privileges on Patched Windows

Microsoft Patches RoguePlanet Elevation‑of‑Privilege Flaw in Defender

Mandiant Says Cisco SD‑WAN Zero‑Day Gave Attackers Root Access

Microsoft Confirms RoguePlanet Defender Zero-Day and Says Patch Is Being Developed

Cisco Patches Exploited SD‑WAN Manager Zero‑Day

GreatXML Exploit Bypasses BitLocker by Abusing WinRE XML Files

Google Issues Emergency Chrome Update to Fix 74 Vulnerabilities Including Exploited V8 Zero‑Day

Arista Declines Patch for Actively Exploited EOS Tunnel Flaw

Microsoft Issues Record Patch Day While Unpatched Defender Zero‑Day Raises Alarm

Google Releases Emergency Chrome 149 Patch for Actively Exploited V8 Zero‑Day

Cisco Warns of Unpatched SD‑WAN Zero‑Day Under Active Exploitation

Google Releases June Android Patches Fixing Actively Exploited Zero‑Day

Microsoft Threatens Legal Action After Public Release of Six Windows Zero‑Days

KnowledgeDeliver Zero-Day Lets Hackers Install Godzilla Web Shells and Cobalt Strike

Microsoft Issues Emergency Patches for Two Actively Exploited Defender Zero‑Days

Microsoft Issues Mitigations for YellowKey BitLocker Bypass

Pwn2Own Berlin Uncovers 47 Zero‑Days, Awards $1.3 Million

CISA Adds Actively Exploited Microsoft Exchange Zero-Day to KEV Catalog

DEVCORE Wins Pwn2Own Berlin 2026 After 47 Zero‑Days Net $1.298 Million