ZDI: Upcoming Advisories The following is a list of vulnerabilities discovered by Zero Day Initiative researchers that are yet to be publicly disclosed. The affected vendor has been contacted on the specified date and while they work on a patch for these vulnerabilities, Trend Micro customers are protected from exploitation by IPS filters delivered ahead of public disclosure. Once the affected vendor patches the vulnerability, we publish an accompanying security advisory which describes the issue, including links to the vendor’s fixes.
- ZDI-CAN-26524: Allegraon April 2, 2025 at 5:00 am
A CVSS score 7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by ‘hoan.pk’ was reported to the affected vendor on: 2025-04-02, 1 days ago. The vendor is given until 2025-07-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-25730: Allegraon April 2, 2025 at 5:00 am
A CVSS score 7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by ‘Mo0n Sha\xf0\x9d\x84\x9eow (VNPT Cyber Immunity)’ was reported to the affected vendor on: 2025-04-02, 1 days ago. The vendor is given until 2025-07-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26275: Schneider Electricon April 2, 2025 at 5:00 am
A CVSS score 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by ‘Anonymous’ was reported to the affected vendor on: 2025-04-02, 1 days ago. The vendor is given until 2025-07-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26274: Schneider Electricon April 2, 2025 at 5:00 am
A CVSS score 7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by ‘Anonymous’ was reported to the affected vendor on: 2025-04-02, 1 days ago. The vendor is given until 2025-07-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26639: Linuxon April 2, 2025 at 5:00 am
A CVSS score 2.8 AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L severity vulnerability discovered by ‘ReDress’ was reported to the affected vendor on: 2025-04-02, 1 days ago. The vendor is given until 2025-07-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26273: Schneider Electricon April 2, 2025 at 5:00 am
A CVSS score 4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N severity vulnerability discovered by ‘Anonymous’ was reported to the affected vendor on: 2025-04-02, 1 days ago. The vendor is given until 2025-07-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26610: Avaston April 2, 2025 at 5:00 am
A CVSS score 8.8 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by ‘Baris Akkaya’ was reported to the affected vendor on: 2025-04-02, 1 days ago. The vendor is given until 2025-07-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26763: PDF-XChangeon April 2, 2025 at 5:00 am
A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by ‘Rocco Calvi (@TecR0c) with TecSecurity’ was reported to the affected vendor on: 2025-04-02, 1 days ago. The vendor is given until 2025-07-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26621: Linuxon April 2, 2025 at 5:00 am
A CVSS score 2.8 AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L severity vulnerability discovered by ‘ReDress’ was reported to the affected vendor on: 2025-04-02, 1 days ago. The vendor is given until 2025-07-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26526: Microsofton April 2, 2025 at 5:00 am
A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by ‘Nelson William Gamazo Sanchez and Nitesh Surana of Trend Micro Security Research’ was reported to the affected vendor on: 2025-04-02, 1 days ago. The vendor is given until 2025-07-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26464: Schneider Electricon April 2, 2025 at 5:00 am
A CVSS score 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N severity vulnerability discovered by ‘Anonymous’ was reported to the affected vendor on: 2025-04-02, 1 days ago. The vendor is given until 2025-07-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26826: Appleon April 2, 2025 at 5:00 am
A CVSS score 8.8 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by ‘Hossein Lotfi (@hosselot) of Trend Micro Zero Day Initiative’ was reported to the affected vendor on: 2025-04-02, 1 days ago. The vendor is given until 2025-07-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26852: Autodeskon April 2, 2025 at 5:00 am
A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by ‘Mat Powell of Trend Micro Zero Day Initiative’ was reported to the affected vendor on: 2025-04-02, 1 days ago. The vendor is given until 2025-07-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26474: Gen Digitalon March 30, 2025 at 5:00 am
A CVSS score 7.3 AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by ‘Zeze with TeamT5’ was reported to the affected vendor on: 2025-03-30, 4 days ago. The vendor is given until 2025-07-28 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26619: TeamVieweron March 30, 2025 at 5:00 am
A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by ‘Peter Gabaldon (https://x.com/PedroGabaldon)’ was reported to the affected vendor on: 2025-03-30, 4 days ago. The vendor is given until 2025-07-28 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26645: AnyDeskon March 30, 2025 at 5:00 am
A CVSS score 4.7 AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H severity vulnerability discovered by ‘Giuliano Sanfins from SiDi (0x_alibabas)’ was reported to the affected vendor on: 2025-03-30, 4 days ago. The vendor is given until 2025-07-28 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26282: Trend Microon March 30, 2025 at 5:00 am
A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by ‘Lays (@_L4ys) of TRAPA Security’ was reported to the affected vendor on: 2025-03-30, 4 days ago. The vendor is given until 2025-07-28 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26660: TeamVieweron March 30, 2025 at 5:00 am
A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by ‘Giuliano Sanfins(0x_alibabas) from SiDi’ was reported to the affected vendor on: 2025-03-30, 4 days ago. The vendor is given until 2025-07-28 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26374: Razeron March 30, 2025 at 5:00 am
A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by ‘0x_alibabas (x.com/0x_alibabas)’ was reported to the affected vendor on: 2025-03-30, 4 days ago. The vendor is given until 2025-07-28 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26375: Razeron March 30, 2025 at 5:00 am
A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by ‘0x_alibabas (x.com/0x_alibabas)’ was reported to the affected vendor on: 2025-03-30, 4 days ago. The vendor is given until 2025-07-28 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26373: Razeron March 30, 2025 at 5:00 am
A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by ‘0x_alibabas (x.com/0x_alibabas)’ was reported to the affected vendor on: 2025-03-30, 4 days ago. The vendor is given until 2025-07-28 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26484: Trend Microon March 28, 2025 at 5:00 am
A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by ‘Zeze with TeamT5’ was reported to the affected vendor on: 2025-03-28, 6 days ago. The vendor is given until 2025-07-26 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26802: Foxiton March 28, 2025 at 5:00 am
A CVSS score 3.3 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N severity vulnerability discovered by ‘Mat Powell of Trend Micro Zero Day Initiative’ was reported to the affected vendor on: 2025-03-28, 6 days ago. The vendor is given until 2025-07-26 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26734: PDF-XChangeon March 28, 2025 at 5:00 am
A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by ‘Anonymous’ was reported to the affected vendor on: 2025-03-28, 6 days ago. The vendor is given until 2025-07-26 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26503: Fuji Electricon March 28, 2025 at 5:00 am
A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by ‘kimiya’ was reported to the affected vendor on: 2025-03-28, 6 days ago. The vendor is given until 2025-07-26 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26715: Wolters Kluweron March 27, 2025 at 5:00 am
A CVSS score 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by ‘Nitesh Surana (niteshsurana.com) of Trend Micro Research’ was reported to the affected vendor on: 2025-03-27, 7 days ago. The vendor is given until 2025-07-25 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-25807: Samsungon March 25, 2025 at 5:00 am
A CVSS score 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by ’06fe5fd2bc53027c4a3b7e395af0b850e7b8a044′ was reported to the affected vendor on: 2025-03-25, 9 days ago. The vendor is given until 2025-07-23 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-25978: Samsungon March 25, 2025 at 5:00 am
A CVSS score 9.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N severity vulnerability discovered by ’06fe5fd2bc53027c4a3b7e395af0b850e7b8a044′ was reported to the affected vendor on: 2025-03-25, 9 days ago. The vendor is given until 2025-07-23 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-26505: Linuxon March 25, 2025 at 5:00 am
A CVSS score 6.8 AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H severity vulnerability discovered by ‘Viacheslav Moskvin’ was reported to the affected vendor on: 2025-03-25, 9 days ago. The vendor is given until 2025-07-23 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
- ZDI-CAN-25809: Samsungon March 25, 2025 at 5:00 am
A CVSS score 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by ’06fe5fd2bc53027c4a3b7e395af0b850e7b8a044′ was reported to the affected vendor on: 2025-03-25, 9 days ago. The vendor is given until 2025-07-23 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.