CPR Zero: Check Point Research’s Vulnerability Repository

In the past three years, Check Point Studies have invested significant sources into vulnerability research. For each vulnerability we uncover, we first inform the seller and immediately develop new protections that are built-into the Check Point type of products.

Throughout our vulnerability research, we encounter numerous bugs, more interesting than the others. Most of the vulnerabilities we uncover will also be shared openly within our blog or conference presentations, for example Hacked in Translation, Exactly what the FAX?!, and many recent WinRAR 19 years old code execution. However, even though some vulnerabilities are printed, most are not.

The standard practice for openly disclosing vulnerabilities is to own relevant vendor 3 months to repair the problem before informing the general public, thus allowing users to accept necessary steps to prevent attacks. We discover that user awareness plays a significant role in the choice to update and patch the atmosphere.

Therefore, we made the decision to produce the CPR-Zero Repository which includes every bug we uncover and disclose, even if they're not featured inside a particular publication. Their email list contains more information regarding each bug, together with a crash dump, a brief explanation and often a POC. This initial bug release includes over 100 critical vulnerabilities many of their facts are not released while they happen to be patched.

The repository is going to be ongoing and constantly updated upon any new breakthroughs. The operation is not automatic, however, so we reserve the authority to not disclose a few of the bugs which may be greater risk.

We're proud that Check Point boasts probably the most gifted and capable experts within the field, so we make an effort to stand above malicious actors by developing new information tools, minimization techniques and identify attack vectors before they are doing. The vulnerability repository is our latest effort and aims to become a valuable part of notifying users of recent risks in addition to encouraging vendors to accept necessary steps to carry on to supply a risk-free consumer experience when browsing the web.