Zero-Days

Tune in to tune up your endpoint defenses!
Your go-to destination for all things posture management & configuration security…

CVE-2026-81983: Integer Overflow Vulnerability Enables Out-of-Bounds Write in Adobe Acrobat

CVE-2026-81983: Integer Overflow Vulnerability Enables Out-of-Bounds Write in Adobe Acrobat

A single 32-bit multiplication is enough to turn a malicious PDF into memory corruption. We break down the integer overflow vulnerability behind CVE-2026-81983 and show exactly where Acrobat’s safety check fails.

Learn more

Topic

Author

A folder with a document labeled “Visual Studio Code Vulnerability” prominently displayed, featuring the “Remedio Research” logo on a blue gradient background.

Bypassing VS Code Workspace Trust with a Single Link

Remedio Research uncovered a critical flaw in Microsoft VS Code: a simple link click bypasses Workspace Trust to silently install persistent extensions and compromise developer workstations. Learn how the exploit works and how to harden your editor today.

Omri Dar
Omri Dar
Sep 17, 2026 | 9 min read
A folder labeled “Remedio Research” holds a document titled, “Two ArangoDB Bugs, One Root Cause” under the heading “Disclosure,” against a blue background—highlighting critical lessons for secure system architecture.

Trust Me, I’m the System

A technical breakdown showing how an authentication bypass and a privilege escalation vulnerability in ArangoDB combined to allow unauthenticated root code execution.

Omri Dar
Omri Dar
Sep 8, 2026 | 8 min read

Want updates?

Capture the noteworthy, cut the noise!

Get Remedio’s monthly endpoint security briefing on emerging risks, hardening strategies, and what’s new in enterprise security.

Subscribe to our newsletter to stay up-to-date and in the loop.

One email a month. Unsubscribe anytime.

Digital illustration shows an AI robot accessing a system with text: “No Login. No Token. Full Takeover.” and a warning about how unauthenticated RCE can enable AI-powered attackers to gain root access to protected data.

The Critical Unauthenticated RCE Vulnerability In CircleCI’s MCP Server

A critical unauthenticated Remote Code Execution (RCE) vulnerability in CircleCI’s Model Context Protocol (MCP) server allowed attackers to spoof client headers and execute arbitrary pipeline code without credentials.

Omri Dar
Omri Dar
Aug 17, 2026 | 9 min read