Windows 7: EEye Launches Zero Day Tracker Site

Chances are you rely on vendors like Microsoft and Apple to let you know when a security update is ready to be installed. (Google updates systems automatically.)
But until a patch is released, that hole--known as a zero-day vulnerability--in effect makes your computer a sitting duck for anyone who writes an exploit for it and bothers to distribute it via e-mails and drive-by downloads on Web sites.

EEye Digital Security launched a Web site yesterday that lists current zero-day vulnerabilities and offers an archive on ones that have been patched. The Zero Day Tracker compiles information on publicly disclosed security holes and provides details on them including what software they affect, how severe they are, the potential impact and suggestions for workarounds and other protection techniques.

Zero Day Tracker lists the outstanding unpatched holes with the most recent at the top. There are 21 current zero-days, all of them from 2010 except for one from 2006 and one from 2005. The oldest extant unpatched hole was first disclosed in November 2005 and affects Windows 2000. Patched zero-days are archived by year and date back to 2005.