Tracked app vulnerabilities

In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no addi…

In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote code execution with no additional executi…

In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote code execution with no additional execution p…

In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with n…

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the ma…

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code execution with no addition…

In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execu…

In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalatio…

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

In the Linux kernel, the following vulnerability has been resolved: tipc: fix double-free in tipc_buf_append() tipc_msg_validate() can potentially reallocate…

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger an out-of-bound write in the GPU user-space driver, lea…

CRITICAL 9.6

2026-05-14

Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network.

In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption The -EBUSY handling…

CRITICAL · vendor

2026-03-10

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

In the Linux kernel, the following vulnerability has been resolved: tls: Fix race condition in tls_sw_cancel_work_tx() This issue was discovered during a cod…

In loadDescription of DeviceAdminInfo.java, there is a possible persistent package due to improper input validation. This could lead to local escalation of pri…

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure. This could lead to remote esca…

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

CRITICAL · vendor

Windows

2025-11-11

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

An issue was discovered in Dolby UDC 4.5 through 4.13. A crash of the DD+ decoder process can occur when a malformed DD+ bitstream is processed. When Evolution…

In the Linux kernel, the following vulnerability has been resolved: tls: make sure to abort the stream if headers are bogus Normally we wait for the socket t…

CRITICAL · vendor

Microsoft Copilot

Windows

2025-09-09

Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

CRITICAL · vendor

Microsoft Copilot

Windows

2025-08-12

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

Indexed via Android Security Bulletin; full NVD metadata pending.

CRITICAL · vendor

2025-07-08

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

CRITICAL · vendor

2025-07-08

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CRITICAL · vendor

2025-07-08

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

CRITICAL · vendor

2025-07-08

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.