exploit.id what's exploited, and what to do

Emerging, not confirmed

Reported exploitation that has no CVE yet, or none we have confirmed. Treat as unverified until a CVE and a fixed version exist.

unconfirmed ZDI-26-708: (0Day) Microsoft Windows HTTP Proxy Privilege Escalation Vulnerability Mandiant · 2026-09-16 unconfirmed ZDI-26-615: (0Day) pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability Mandiant · 2026-08-31 unconfirmed ZDI-26-614: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Mandiant · 2026-08-31 unconfirmed ZDI-26-613: (0Day) pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability Mandiant · 2026-08-31 unconfirmed ZDI-26-612: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Mandiant · 2026-08-31 unconfirmed ZDI-26-611: (0Day) pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability Mandiant · 2026-08-31