We've updated the look and feel of our website. The blog is under maintenance for now but will be up soon. Let us know if you find any bugs or issues. www.zerodayinitiative.com

It's the bug of the month for June 2026! CVE-2026-45657 - A CVSS 9.8 vulnerability in Kernel that allows remote, unauthenticated code execution at SYSTEM without user interaction. Yikes!

No time to read the blog? Check out the Patch Report for June 2026. @dustinchilds.bsky.social breaks down this massive release and provides guidance on where to focus your resources. youtu.be/DEGxRsjwUaI

Wow. Over 200 CVEs from #Microsoft and another 123 from #Adobe. It's a record-setting Patch Tuesday, but fear not! @dustinchilds.bsky.social has broken the release down and provides the details. Check out the blog athttps://www.zerodayinitiative.com/blog/2026/6/9/the-june-2026-security-update-review

Pwn2Own Berlin 2026 is in the books, and it was an amazing contest from start to finish. We awarded $1,129,250 for 47 unique 0-days. Join @dustinchilds.bsky.social and Vincent Lee as they recap the highlights and offer a preview of what's to come. youtu.be/SqeskOpUPQU

Catch up with the happenings from #Pwn2Own day 3! Watch recap here https://youtu.be/czmHJ8oAsQY?si=cMb2O51f4TMlCdQQ

That's a wrap on Pwn2Own Berlin 2026! 🏆 $1,298,250 awarded. 47 unique 0-days. 3 days of absolute chaos. And talk about main character energy - congrats to DEVCORE for claiming Master of Pwn with 50.5 points and $505,000 - they never slowed down. See you next year! #Pwn2Own #P2OBerlin

Collision! While Byung Young Yi (@yibarrack) of Out Of Bounds successfully demonstrated their exploit of Anthropic Claude Code, the bug used had been previously disclosed. They still earn $20,000 and 2 Master of Pwn points. #Pwn2Own #P2OBerlin

Mind blown alert 🤯! Nguyen Hoang Thach (@hi_im_d4rkn3ss) of STARLabs SG (@starlabs_sg) used a Memory Corruption bug to exploit VMware ESXi with the Cross-tenant Code Execution add-on, earning a sweeeeeet $200,000 and 20 Master of Pwn points. Full win let's go! #Pwn2Own #P2OBerlin

Booyah it's been confirmed! 🎉 splitline (@_splitline_) of DEVCORE Research Team chained 2 bugs to exploit Microsoft SharePoint, earning $100,000 and 10 Master of Pwn points. Massive aura farming this year at #P2OBerlin. Full win! #Pwn2Own

Wow what a fun way to wrap up the day! With TWO minutes to spare, Byung Young Yi (@yibarrack) of Out Of Bounds was able to exploit Anthropic Claude Code! If confirmed, they win $40,000 and 4 Master of Pwn points. They're off to the disclosure room to explain how they did it. #Pwn2Own #P2OBerlin

MASSIVE AURA POINTS! Nguyen Hoang Thach (@hi_im_d4rkn3ss) of STARLabs SG was able to exploit VMware ESXi! If confirmed, they win $200,000 and 20 Master of Pwn points. They're off to the disclosure room to explain how they did it and seal the deal. #Pwn2Own #P2OBerlin

ATE AND LEFT NO CRUMBS! splitline (@_splitline_) of DEVCORE Research Team totally cooked and was able to exploit Microsoft SharePoint! If confirmed, they win $100,000 and 10 Master of Pwn points. They're skeddadling off to the disclosure room now to drop the lore. #Pwn2Own #P2OBerlin

The math is mathing and we are on the brink of a million dollars! Here's the last set of attempts for the day. Stay tuned or stay square #Pwn2Own #P2OBerlin

Confirmed! Hyunwoo Kim (@v4bel) chained a use-after-free and uninitialized memory bug to escalate privileges on Red Hat Enterprise Linux for Workstations in the fourth round, earning $5,000 and 2 Master of Pwn points. #Pwn2Own #P2OBerlin

Collision! Although successful on stage, Emanuele Barbeno, Cyrill Bannwart, Yves Bieri, Lukasz D., Urs Mueller (@compasssecurity) of Compass Security targeted Anthropic Claude Code, hitting a one-vulnerability collision with a previous attempt and earning $20,000 & 2 Master of Pwn points. #Pwn2Own

Unfortunately, Giuseppe Calì of Summoning Team (@SummoningTeam) could not get their exploit of VMware ESXi working within the time allotted. #Pwn2Own #P2OBerlin

Very nicely done! Emanuele Barbeno, Cyrill Bannwart, Yves Bieri, Lukasz D., Urs Mueller (@compasssecurity) of Compass Security were able to exploit Anthropic Claude Code! They're off to the disclosure room to explain how they did it. #Pwn2Own #P2OBerlin

Success! Hyunwoo Kim (@v4bel) was able to exploit Red Hat Enterprise Linux for Workstations! If confirmed, they win $20,000 and 2 Master of Pwn points. They're off to the disclosure room to explain how they did it. #Pwn2Own #P2OBerlin

Excelsior! Satoki Tsuji of Ikotas Labs, Inc. abused an external control to exploit OpenAI Codex and pop a host of calcs. He earns $20,000 and 4 Master of Pwn points. #Pwn2Own #P2OBerlin

Confirmed! Le Tran Hai Tung, dungnm and hieuvd of Viettel Cyber Security (@vcslab) used an integer overflow to escalate privileges on #Windows 11. Their 5th round win nets them $7,500 and 3 Master of Pwn points. #Pwn2Own #P2OBerlin

We have a collision! Sina Kheirkhah of Summoning Team used two bugs to exploit Red Hat Linux, but one of the bugs was previously known. He still earns $7,000 and 1.5 Master of Pwn points. #Pwn2Own #P2OBerlin

In a video highlight from Day Two, @orange_8361 of @d3vc0r3 exploits #Microsoft #Exchange with a little help from AI. He earns $200,000 and 20 Master of Pwn points. youtube.com/shorts/cq0he... #Pwn2Own #P2OBerlin

TRIPLE YAAAAAAAAAAA! That's 3 for 3 - what a legend 👑 Sina Kheirkhah (@SinSinology) of Summoning Team was able to exploit Red Hat Enterprise Linux for Workstations! Time for the disclosure room to dish the deets. #Pwn2Own #P2OBerlin

What a goat 🐐!! Satoki Tsuji (@satoki00) of Ikotas Labs, Inc. was able to exploit OpenAI Codex! Now onto disclosure! #Pwn2Own #P2OBerlin

Yippee!! Le Tran Hai Tung, dungnm & hieuvd (@tacbliw) of Viettel Cyber Security were able to exploit Microsoft Windows 11! If they cooked, they're looking at a win of $30,000 and 3 Master of Pwn points. Let's book it now to the disclosure room to explain how they did it. #Pwn2Own #P2OBerlin

We're back for the final day of #Pwn2Own Berlin! Yesterday we ended the day with $908,750 awarded, 39 unique 0-days, and DEVCORE with a commanding lead for Master of Pwn. What's in store for today? Follow along for live results! #P2OBerlin

Miss any of the highlights of #Pwn2Own Berlin Day Two? Check out the summary video that calls out the most important points and shows what to look for on Day Three youtu.be/2hFROPRqeCM

That's a wrap on Day 2 of #Pwn2Own Berlin! Day Two added $385,750 and 15 unique 0-days, bringing event totals to $908,750 for 39 unique vulnerabilities. DEVCORE leads Master of Pwn with 40.5 points — but the fun ain't over yet, we've got one more day to go. See you tomorrow! #P2OBerlin

Confirmed! 0xDACA (@0xDACA) & Noam Trobishi (@NTrobishi) used a use-after-free bug to exploit NV Container Toolkit in the second round, earning $25,000 and 5 Master of Pwn points. #Pwn2Own #P2OBerlin

Success/Collision! Byung Young Yi (@yibarrack) of Out Of Bounds targeted LiteLLM, hitting a one-vulnerability collision with a previous attempt and earning $17,750 and 3.75 Master of Pwn points. #Pwn2Own #P2OBerlin

Wow in 50 seconds! Daniel Cohen Hillel (@0xDACA) demonstrated their exploit against NV Container Toolkit. They now head off to the disclosure room to provide the details. #Pwn2Own #P2OBerlin

Confirmed! Siyeon Wi used an integer overflow bug to escalate privileges on Microsoft Windows 11 in the fourth round, earning $7,500 and 3 Master of Pwn points. #Pwn2Own #P2OBerlin

Confirmed! Cyrill Bannwart, Emanuele Barbeno, Yves Bieri, Lukasz D., Urs Mueller (@compasssecurity) of Compass Security exploited Cursor in the second round, earning $15,000 and 3 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin

Boom! Emanuele Barbeno, Cyrill Bannwart, Yves Bieri, Lukasz D., Urs Mueller (@compasssecurity) of Compass Security was able to exploit Cursor! They're off to the disclosure room to explain how they did it. #Pwn2Own #P2OBerlin

Last set of attempts for the day! Let's go out with a bang 💥 #Pwn2Own #P2OBerlin

Another one in the bag! Byung Young Yi (@yibarrack) of Out Of Bounds was able to exploit LiteLLM! They're off to the disclosure room to explain how they did it. #Pwn2Own #P2OBerlin

Unfortunately, @rewhiles & @gnas0x0018 of Viettel Cyber Security (@vcslab) could not get their exploit of Mozilla Firefox – Renderer Only working within the time allotted. #Pwn2Own #P2OBerlin

Success/Collision! David Tae & Louis Hur of Out Of Bounds targeted Ollama, hitting a one-vulnerability collision with a previous attempt and earning $28,000 and 3 Master of Pwn points. #Pwn2Own #P2OBerlin

Wow wow wow! First time #Pwn2Own contestant Siyeon Wi was able to exploit Microsoft Windows 11! If confirmed, they win $30,000 and 3 Master of Pwn points. They're off to the disclosure room to explain how they did it. #P2OBerlin

Aaaand it's official! Orange Tsai (@orange_8361) of DEVCORE Research Team chained 3 bugs to achieve Remote Code Execution as SYSTEM on Microsoft Exchange, earning a whooping $200,000 and 20 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin

Alon Ben Tsur (@iamgweej), Yahav Azran (@_yahav) have withdrawn their entry for Red Hat Enterprise Linux for Workstations in the Local Escalation of Privilege category. #Pwn2Own #P2OBerlin

Collision! Although successful on stage, Billy (@st424204), Bruce Chen (@bruce30262), Pan Zhenpeng (@Peterpan980927) & Weiming Shi (@bestswngs) of STARLabs SG (@starlabs_sg) targeting NVIDIA Megatron Bridge used a previously known bug. They still earn $2.5K and 1 MoP point. #Pwn2Own #P2OBerlin

Confirmed! Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam) exploited OpenAI Codex in the second round, earning $20,000 and 4 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin

Some great feedback from a #Pwn2Own Berlin attendee

In under a minute!! ⏰ Billy, Bruce Chen, Pan Zhenpeng & Weiming Shi (@st424204, @bruce30262, @Peterpan980927 & @bestswngs) of STARLabs SG was able to exploit Megatron Bridge! Now to skeddadle off to the disclosure room to share the lore. #Pwn2Own #P2OBerlin

Another big W! David Tae & Louis Hur of Out Of Bounds was able to exploit Ollama! They're now off to the disclosure room to spill the beans. #Pwn2Own #P2OBerlin

Coming up next! Stay tuned for more exploits, more surprises, and more fun. #Pwn2Own #P2OBerlin

DOUBLE YAAAAAAAAAA!! Sina Kheirkhah (@SinSinology) of Summoning Team was able to exploit OpenAI Codex! If confirmed, they win $40,000 and 4 Master of Pwn points. They're off to the disclosure room to spill the tea. #Pwn2Own #P2OBerlin

There it is! Orange Tsai (@orange_8361) of DEVCORE Research Team was able to exploit Microsoft Exchange! If confirmed, they win a whooping $200,000 and 20 Master of Pwn points. Off to the disclosure room to explain how they did it and seal the deal. #Pwn2Own #P2OBerlin