Zerodium
专门收购高价值零日漏洞并转售给政府客户的中间商公司，属于漏洞灰市的主要参与者，公开报价iOS全链条远程代码执行漏洞可达250万美元。
Core Facts
According to publicly listed prices from vulnerability acquisition platforms such as Zerodium, the price of an iOS remote code execution zero-day vulnerability can reach as high as $2 million, while Android-related vulnerabilities can reach $2.5 million.
A zero-day remote code execution vulnerability in iOS can sell for millions of dollars on the gray market.
Timeline (last 90 days)
Zerodium's public price list shows that Windows local privilege escalation vulnerabilities are priced at $80,000 to $150,000, while a complete remote code execution chain can reach $2,500,000.
In the vulnerability trading market, a high-quality Windows remote code execution zero-day vulnerability can fetch hundreds of thousands to over a million dollars.
All Facts (4)
According to publicly listed prices from vulnerability acquisition platforms such as Zerodium, the price of an iOS remote code execution zero-day vulnerability can reach as high as $2 million, while Android-related vulnerabilities can reach $2.5 million.
80%VerifiedA zero-day remote code execution vulnerability in iOS can sell for millions of dollars on the gray market.
70%UnverifiedZerodium's public price list shows that Windows local privilege escalation vulnerabilities are priced at $80,000 to $150,000, while a complete remote code execution chain can reach $2,500,000.
50%UnverifiedIn the vulnerability trading market, a high-quality Windows remote code execution zero-day vulnerability can fetch hundreds of thousands to over a million dollars.
50%