ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Keywords match titles. Record type separates incidents, intel, and research from CVEs.

  1. Research · Feb 11, 2026 · ZeroDay Catalog

    Apple Addresses Multiple Buffer Overflow Vulnerabilities

    Apple has released updates to address critical buffer overflow vulnerabilities that could allow attackers to execute arbitrary code on affected devices.

    What changed

    Apple has resolved a significant memory corruption issue through enhanced state management in its operating systems. This vulnerability could potentially allow an attacker with memory write capabilities to execute arbitrary code.

    The vulnerabilities have been patched in the latest versions of iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, specifically in versions 26.3.

    Who is affected

    The vulnerabilities impact a range of Apple products, making it crucial for users to update their systems promptly.

    Affected products include iPhones, iPads, Macs, Apple TVs, Apple Watches, and Vision Pro devices.

    • iOS devices running versions prior to 26.3
    • iPadOS devices prior to 26.3
    • macOS Tahoe versions before 26.3
    • tvOS and watchOS devices that have not been updated

    What to do

    Users and administrators are strongly advised to update their devices to the latest versions to mitigate the risk of exploitation. The updates address critical vulnerabilities that could be leveraged in sophisticated attacks.

    Stay informed about potential threats and monitor for any advisories from Apple regarding further security issues.

    • Update to iOS 26.3, iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, and watchOS 26.3 immediately.
    • Review security practices and ensure that devices are configured to receive automatic updates.
    • Monitor security advisories from Apple and relevant cybersecurity organizations.

    Original report

  2. Research · Feb 6, 2026 · ZeroDay Catalog

    Critical OS Command Injection Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

    A severe OS command injection vulnerability has been identified in BeyondTrust's Remote Support and Privileged Remote Access products, posing significant risks to system integrity.

    What changed

    BeyondTrust has disclosed a critical OS command injection vulnerability affecting its Remote Support (RS) and Privileged Remote Access (PRA) products. This flaw allows unauthenticated remote attackers to execute arbitrary operating system commands.

    The vulnerability poses a significant risk as it requires no authentication or user interaction, potentially leading to unauthorized access, data exfiltration, and disruption of services.

    Who is affected

    Organizations utilizing BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) are at risk. The vulnerability can impact various sectors that rely on these tools for remote management and support.

    Specific groups affected include IT departments, managed service providers, and any entities leveraging BeyondTrust solutions for privileged access management.

    • BeyondTrust Remote Support (RS)
    • BeyondTrust Privileged Remote Access (PRA)
    • IT departments managing remote access solutions
    • Managed service providers using BeyondTrust products

    What to do

    Organizations are advised to assess their use of BeyondTrust Remote Support and Privileged Remote Access products immediately. Implementing security measures and monitoring for unusual activities is crucial.

    BeyondTrust is expected to release patches or updates to mitigate this vulnerability. Ensure that all systems are updated promptly upon release.

    • Review and monitor access logs for suspicious activities.
    • Prepare to apply patches or updates from BeyondTrust as they become available.
    • Consider implementing additional security controls to limit exposure.

    Original report