Anonymous working with Trend Micro Zero Day Initiative.

32 credited records · 9 in the last 12 months · 1 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2026-56003No exploit	libXfont2 computeProps Property Buffer Heap Buffer Overflowx · libxfont · CWE-122 Memory safety	High8.8	—	0.6%	Jul 8, 2026
35Monitor	CVE-2026-56002No exploit	libXfont2 PCF Font Parsing Heap Buffer Overflowx · libxfont · CWE-122 Memory safety	High8.8	—	0.6%	Jul 8, 2026
35Monitor	CVE-2026-56001No exploit	libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflowx · libxfont · CWE-122 Memory safety	High8.8	—	0.6%	Jul 8, 2026
36Monitor	CVE-2026-56000No exploit	xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()x.org · x server · CWE-416 Memory safety	Critical9.0	—	0.3%	Jul 8, 2026
31Monitor	CVE-2026-55999No exploit	xorg-server / xwayland glamor font atlas Heap Buffer Overflowx.org · x server · CWE-122 Memory safety	High7.8	—	0.3%	Jul 8, 2026
34Monitor	CVE-2026-0954No exploit	Out-Of-Bounds Write When Opening a Corrupt DSB File in Digilent DASYLabni · dasylab · CWE-787 RCE Memory safety	High8.5	—	0.2%	Mar 13, 2026
31Monitor	CVE-2025-66499No exploit	Foxit PDF Reader PDF Parsing Heap-Based Buffer Overflow Remote Code Execution Vulnerabilityfoxit · pdf editor · CWE-190 RCE Memory safety	High7.8	—	0.3%	Dec 19, 2025
31Monitor	CVE-2025-66494No exploit	Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerabilityfoxit · pdf editor · CWE-416 RCE Memory safety	High7.8	—	0.3%	Dec 19, 2025
31Monitor	CVE-2025-66493No exploit	Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerabilityfoxit · pdf editor · CWE-416 RCE Memory safety	High7.8	—	0.3%	Dec 19, 2025
96Now	CVE-2025-26399Weaponized	SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerabilitysolarwinds · web help desk · CWE-502 pre-auth RCE Deserialization	Critical9.8	KEV	89.5%	Sep 23, 2025
32Monitor	CVE-2024-7074No exploit	Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Executionwso2 · wso2 enterprise integrator · CWE-434 RCE File upload	Medium6.8	—	17.2%	Jun 2, 2025
39Monitor	CVE-2024-6914No exploit	Incorrect Authorization in Multiple WSO2 Products via Account Recovery SOAP Admin Service Leading to Account Takeoverwso2 · api manager · CWE-863 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.7%	May 22, 2025
31Monitor	CVE-2024-9524No exploit	Privilege Escalation Vulnerability in Avira Prime Version 1.1.96.2aira · prime · CWE-59 RCE Local privilege escalation Race condition	High7.8	—	0.2%	May 9, 2025
31Monitor	CVE-2024-13759No exploit	Local Privilege Escalation in Avira Prime 1.1.96.2 on Windows 10 x64avira · prime · CWE-59 Local privilege escalation	High7.8	—	0.2%	May 9, 2025
40Plan	CVE-2024-52606No exploit	SolarWinds Platform Server-Side Request Forgery Vulnerabilitysolarwinds · solarwinds platform · CWE-918 Pre-auth SSRF	Critical9.8	—	2.5%	Feb 11, 2025
37Monitor	CVE-2024-45711No exploit	SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerabilitysolarwinds · serv-u · CWE-22 RCE Path traversal	High8.8	—	6.3%	Oct 16, 2024
38Monitor	CVE-2024-28074No exploit	SolarWinds Access Rights Manager (ARM) Internal Deserialization Remote Code Execution Vulnerabilitysolarwinds · access rights manager · CWE-502 pre-auth RCE Deserialization	High8.8	—	10.9%	Jul 17, 2024
35Monitor	CVE-2024-23471No exploit	SolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution Vulnerabilitysolarwinds · access rights manager · CWE-287 pre-auth RCE Auth bypass Path traversal	High8.8	—	1.3%	Jul 17, 2024
35Monitor	CVE-2024-23470No exploit	SolarWinds Access Rights Manager (ARM) UserScriptHumster Exposed Dangerous Method Remote Command Execution Vulnerabilitysolarwinds · access rights manager · CWE-287 pre-auth RCE Auth bypass	High8.8	—	1.2%	Jul 17, 2024
36Monitor	CVE-2024-23467No exploit	SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerabilitysolarwinds · access rights manager · CWE-22 pre-auth RCE Path traversal	High8.8	—	2.9%	Jul 17, 2024
36Monitor	CVE-2024-23466No exploit	SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerabilitysolarwinds · access rights manager · CWE-22 pre-auth RCE Path traversal	High8.8	—	2.5%	Jul 17, 2024
32Monitor	CVE-2023-6175No exploit	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wiresharkwireshark · wireshark · CWE-120 Memory safety	High7.8	—	3.5%	Mar 26, 2024
63This week	CVE-2024-0692Proof of concept	SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerabilitysolarwinds · security event manager · CWE-502 pre-auth RCE Deserialization	High8.8	—	92.2%	Mar 1, 2024
40Plan	CVE-2024-23479No exploit	SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerabilitysolarwinds · access rights manager · CWE-22 pre-auth RCE Path traversal	Critical9.6	—	5.8%	Feb 15, 2024
40Plan	CVE-2024-23477No exploit	SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerabilitysolarwinds · access rights manager · CWE-22 pre-auth RCE Path traversal	Critical9.6	—	7.8%	Feb 15, 2024

CVE-2026-56003
35Monitor
libXfont2 computeProps Property Buffer Heap Buffer Overflow
HighCVSS 8.8No exploitEPSS 1%
- Memory safety
x · libxfontJul 8, 2026
CVE-2026-56002
35Monitor
libXfont2 PCF Font Parsing Heap Buffer Overflow
HighCVSS 8.8No exploitEPSS 1%
- Memory safety
x · libxfontJul 8, 2026
CVE-2026-56001
35Monitor
libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow
HighCVSS 8.8No exploitEPSS 1%
- Memory safety
x · libxfontJul 8, 2026
CVE-2026-56000
36Monitor
xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()
CriticalCVSS 9.0No exploitEPSS 0%
- Memory safety
x.org · x serverJul 8, 2026
CVE-2026-55999
31Monitor
xorg-server / xwayland glamor font atlas Heap Buffer Overflow
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
x.org · x serverJul 8, 2026
CVE-2026-0954
34Monitor
Out-Of-Bounds Write When Opening a Corrupt DSB File in Digilent DASYLab
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Memory safety
ni · dasylabMar 13, 2026
CVE-2025-66499
31Monitor
Foxit PDF Reader PDF Parsing Heap-Based Buffer Overflow Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
foxit · pdf editorDec 19, 2025
CVE-2025-66494
31Monitor
Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
foxit · pdf editorDec 19, 2025
CVE-2025-66493
31Monitor
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
foxit · pdf editorDec 19, 2025
CVE-2025-26399
96Now
SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability
CriticalCVSS 9.8KEVWeaponizedEPSS 90%
- pre-auth RCE
- Deserialization
solarwinds · web help deskSep 23, 2025
CVE-2024-7074
32Monitor
Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Execution
MediumCVSS 6.8No exploitEPSS 17%
- RCE
- File upload
wso2 · wso2 enterprise integratorJun 2, 2025
CVE-2024-6914
39Monitor
Incorrect Authorization in Multiple WSO2 Products via Account Recovery SOAP Admin Service Leading to Account Takeover
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Broken access control (IDOR)
wso2 · api managerMay 22, 2025
CVE-2024-9524
31Monitor
Privilege Escalation Vulnerability in Avira Prime Version 1.1.96.2
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
- Race condition
aira · primeMay 9, 2025
CVE-2024-13759
31Monitor
Local Privilege Escalation in Avira Prime 1.1.96.2 on Windows 10 x64
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
avira · primeMay 9, 2025
CVE-2024-52606
40Plan
SolarWinds Platform Server-Side Request Forgery Vulnerability
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- SSRF
solarwinds · solarwinds platformFeb 11, 2025
CVE-2024-45711
37Monitor
SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 6%
- RCE
- Path traversal
solarwinds · serv-uOct 16, 2024
CVE-2024-28074
38Monitor
SolarWinds Access Rights Manager (ARM) Internal Deserialization Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 11%
- pre-auth RCE
- Deserialization
solarwinds · access rights managerJul 17, 2024
CVE-2024-23471
35Monitor
SolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 1%
- pre-auth RCE
- Auth bypass
- Path traversal
solarwinds · access rights managerJul 17, 2024
CVE-2024-23470
35Monitor
SolarWinds Access Rights Manager (ARM) UserScriptHumster Exposed Dangerous Method Remote Command Execution Vulnerability
HighCVSS 8.8No exploitEPSS 1%
- pre-auth RCE
- Auth bypass
solarwinds · access rights managerJul 17, 2024
CVE-2024-23467
36Monitor
SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 3%
- pre-auth RCE
- Path traversal
solarwinds · access rights managerJul 17, 2024
CVE-2024-23466
36Monitor
SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 3%
- pre-auth RCE
- Path traversal
solarwinds · access rights managerJul 17, 2024
CVE-2023-6175
32Monitor
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark
HighCVSS 7.8No exploitEPSS 3%
- Memory safety
wireshark · wiresharkMar 26, 2024
CVE-2024-0692
63This week
SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability
HighCVSS 8.8Proof of conceptEPSS 92%
- pre-auth RCE
- Deserialization
solarwinds · security event managerMar 1, 2024
CVE-2024-23479
40Plan
SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability
CriticalCVSS 9.6No exploitEPSS 6%
- pre-auth RCE
- Path traversal
solarwinds · access rights managerFeb 15, 2024
CVE-2024-23477
40Plan
SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability
CriticalCVSS 9.6No exploitEPSS 8%
- pre-auth RCE
- Path traversal
solarwinds · access rights managerFeb 15, 2024