OPS INTEL

HIGH 95% confidence cve

ZDI-26-068 Docker Desktop for Windows Privilege Escalation Vulnerability

Local attackers can escalate privileges on affected Docker Desktop for Windows installations via incorrect permission assignment. Requires admin interaction.

['Incorrect permission assignment exposes systems to unauthorized access and privilege escalation attempts']

Windows

action items (2)

• Update Docker Desktop for Windows to the latest version
• Review and adjust permission settings

Zero Day Initiative · 2026-02-27T04:06

HIGH 93% confidence cve

ZDI-26-067 Docker Desktop Windows Privilege Escalation Vulnerability

['Local attackers can escalate privileges on Docker Desktop for Windows due to incorrect permission assignment. CVSS rating: 6.7, CVE-2025-14740.', 'Requires.

["Administrators must intervene and follow mitigation steps due to this flaw's requirement for user interaction to exploit, posing a moderate risk to affected systems."]

Windows

action items (3)

• Update Docker Desktop to a version that includes a fix for CVE-2025-14740.
• Review and adjust user permissions to minimize exposure risk.
• Educate staff on the importance of administrative privileges management.

Zero Day Initiative · 2026-02-27T04:06

CRITICAL 90% confidence cve

ZDI-26-066: Lexmark CX532adwe Heap-based Buffer Overflow RCE Vulnerability

Network-adjacent attackers can execute arbitrary code on Lexmark CX532adwe printers due to a heap-based buffer overflow. No authentication required. Includes se

['Critical network devices like printers should not have exploitable vulnerabilities', 'Remote code execution can lead to full control over the device and potentially lateral movement within a network']

Printer AdministratorsNetwork Security Teams

action items (2)

• Review network segmentation for critical devices like Lexmark CX532adwe
• Implement or update Intrusion Detection Systems to monitor for suspicious getCFFNames API activity

Zero Day Initiative · 2026-02-27T03:49

CRITICAL 95% confidence cve

(Pwn2Own) Lexmark CX532adwe usecmap Type Confusion Remote Code Execution Vulnerability

A critical remote code execution flaw in Lexmark CX532adwe printers allows unauthenticated attackers to execute arbitrary commands. Includes severity, confidenc

['Lack of proper validation and sanitization in usecmap processing', 'Permissive access control configuration allowing network-adjacent attacks']

network printersoffice equipment

action items (2)

• Check if devices are impacted and assess exposure risk
• Update firmware and apply security updates immediately

Zero Day Initiative · 2026-02-27T03:49

CRITICAL 95% confidence cve

(Pwn2Own) Lexmark CX532adwe execuserobject Heap-based Buffer Overflow Remote Code Execution Vulnerability ZDI-26-064

Lexmark CX532adwe printers are vulnerable to a heap-based buffer overflow leading to remote code execution. Auth isn't required. Includes severity, confidence,

['Buffer overflow can lead to unauthorized system access', 'No auth needed for exploitation']

Network administratorsIT security professionals

action items (2)

• Identify and patch all instances of affected hardware
• Monitor for unusual activity on network segments containing the printers

Zero Day Initiative · 2026-02-27T03:49