As part of our 2025 Policy Trial, Project Zero used this page to publicly track our Reporting Transparency effort. Data for 2026 is available here. We plan to update this page weekly with new information until all vulnerabilities we reported in 2025 are fixed.
Our Vulnerability Disclosure FAQ provides more details behind our aims and goals of our policy.
Most recent update: 2026-01-28
| Project Zero Reference | Reported to | Product | Date Reported | 90-day Deadline expires | Grace Period Requested? |
|---|---|---|---|---|---|
| PZ-467941645 | Adobe | DNG SDK | 2025-12-11 | 2025-03-11 | No |
| PZ-466303419 | Microsoft | Windows | 2025-12-05 | 2026-03-05 | No |
| PZ-466300525 | Microsoft | Windows | 2025-12-05 | 2026-03-05 | No |
| PZ-466301558 | Microsoft | Windows | 2025-12-05 | 2026-03-05 | No |
| PZ-465827985 | Android Framework | 2025-12-03 | 2026-03-03 | No | |
| PZ-465824679 | Pixel 10 | 2025-12-03 | 2026-03-03 | No | |
| PZ-465377718 | libjxl | libjxl | 2025-12-02 | 2026-03-02 | No |
| PZ-464250765 | Adobe | DNG SDK | 2025-11-27 | 2026-02-25 | No |
| PZ-463438263 | Pixel 10 | 2025-11-24 | 2026-02-23 | No | |
| PZ-463672550 | Pixel 10 | 2025-11-25 | 2026-02-23 | No | |
| PZ-463335147 | Adobe | DNG SDK | 2025-11-24 | 2026-02-23 | No |
Once a vulnerability report is marked as Fixed, Working as Intended (WAI) or Won’t Fix, it will move into the table below. Note that the links to Fixed issues won’t be publicly accessible until up to 30 days after a report is marked as Fixed.
| Project Zero Reference | Reported to | Product | Date Reported | Date Fixed | Fix time (Days) | First Known User Device Protected |
|---|---|---|---|---|---|---|
| PZ-462544562 | Samsung Mobile | Image Codecs | 2025-11-20 | 2026-01-06 | 47 | Unknown |
| PZ-426567975 | BigWave | 2025-06-20 | 2026-01-05 | 199 | 2026-01-05 | |
| PZ-426548270 | BigWave | 2025-06-20 | 2026-01-05 | 199 | 2026-01-05 | |
| PZ-425917200 | BigWave | 2025-06-18 | 2026-01-05 | 201 | 2026-01-05 | |
| PZ-457401481 | Samsung Mobile | Image Codecs | 2025-11-03 | 2026-01-09 | 67 | Unknown |
| PZ-450884207 | Samsung Mobile | Image Codecs | 2025-10-10 | 2025-12-02 | 53 | Unknown |
| PZ-448241955 | Samsung Mobile | Image Codecs | 2025-09-30 | 2025-12-02 | 63 | Unknown |
| PZ-447479300 | Samsung Mobile | Image Codecs | 2025-09-26 | 2025-12-02 | 67 | Unknown |
| PZ-457987854 | Adobe | DNG SDK | 2025-11-05 | 2025-11-17 | 12 | Unknown |
| PZ-457419672 | Adobe | DNG SDK | 2025-11-03 | 2025-11-17 | 14 | Unknown |
| PZ-452483592 | Adobe | DNG SDK | 2025-10-16 | 2025-11-17 | 32 | Unknown |
| PZ-445575206 | Adobe | DNG SDK | 2025-09-17 | 2025-11-17 | 61 | Unknown |
| PZ-444346510 | Samsung Mobile | Image Codecs | 2025-09-11 | 2025-11-04 | 54 | Unknown |
| PZ-443793212 | Samsung Mobile | Image Codecs | 2025-09-08 | 2025-11-04 | 57 | Unknown |
| PZ-437868751 | Microsoft | Windows | 2025-08-11 | 2025-11-11 | 92 | 2025-11-11 |
| PZ-437291456 | Microsoft | Windows | 2025-08-08 | 2025-11-11 | 95 | 2025-11-11 |
| PZ-443741909 | Samsung Mobile | Image Codecs | 2025-09-08 | 1 | Unknown | |
| PZ-442423708 | Samsung Mobile | Image Codecs | 2025-09-01 | 2025-10-07 | 36 | 2025-10-28 (Samsung S24 Ultra) |
| PZ-438672763 | Microsoft | Windows | 2025-08-014 | 2025-10-28 | 75 | 2025-10-28 |
| PZ-438672763 | Microsoft | Windows | 2025-08-014 | 2025-10-28 | 75 | 2025-10-28 |
| PZ-437884633 | Microsoft | Windows | 2025-08-11 | 2025-10-28 | 78 | 2025-10-28 |
| PZ-437308710 | Microsoft | Windows | 2025-08-08 | 2025-10-28 | 81 | 2025-10-28 |
| PZ-437087426 | Microsoft | Windows | 2025-08-07 | 2025-10-28 | 82 | 2025-10-28 |
| PZ-435173090 | Microsoft | Windows | 2025-07-31 | 2025-10-28 | 89 | 2025-10-28 |
| PZ-432439660 | Microsoft | Windows | 2025-07-17 | 2025-10-28 | 103 | 2025-10-28 |
| PZ-432313668 | Microsoft | Windows | 2025-07-17 | 2025-10-28 | 103 | 2025-10-28 |
| PZ-428075495 | Dolby | Dolby Unified Decoder | 83 | 2025-09-18 | ||
| PZ-434269715 | Pixel | 2025-06-25 | N/A | N/A | N/A |
If the deadline for a vulnerability expires without the vulnerability being fixed, it will move into the table below until it is fixed.
| Project Zero Reference | Reported to | Product | Date Reported |
|---|---|---|---|
| PZ-442425914 | Meta | 2025-09-01 |