Zero-day
A vulnerability exploited before the vendor has a fix.
Advisories that mention this term
HighVulnerabilityActiveExploitedKEVPatch availableCVE-2026-124194
Opening a crafted message file makes Outlook skip the external-content warning and leak NTLMv2 hashes; zero-day CVE-2026-124194 exploited and added to KEV
Microsoft’s November Patch Tuesday fixes Outlook spoofing flaw CVE-2026-124194: if a user opens a crafted message file, Outlook connects to an attacker-controlled location without the usual external-content warning and leaks an NTLMv2 hash that can be used to impersonate the user .
HighVulnerabilityActiveExploitedPatch availableCVE-2026-125350
Chrome 157 fixes exploited XML use-after-free zero-day CVE-2026-125350
Google updated the Chrome Stable channel on Nov 9, 2026 to 157.
CriticalSystem intrusionMonitoringBackfillExploited· updated Nov 11
About $387.5 million drained from Bitget hot wallets after attackers broke into third-party security appliances via a zero-day and moved into the wallet environment
Crypto exchange Bitget confirmed that, based on the latest on-chain tracing, about $387.
MediumData breachMonitoringBackfillMedia reported· updated Nov 7
Keio University Shonan Fujisawa Campus Email Appliance Suspected of Zero-Day Attack, Directory Server Personal Data Potentially Exposed
According to Security NEXT, Keio University detected anomalous communications originating from a spam quarantine server at its Shonan Fujisawa Campus in late November 2025 .