Tracked app vulnerabilities

Windows Recovery Environment Security Feature Bypass Vulnerability

Windows COM Server Information Disclosure Vulnerability

UEFI Secure Boot Security Feature Bypass Vulnerability

AMD: CVE-2023-20585 IOMMU Write Buffer Vulnerability

A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connectio…

Denial-of-service in the Libraries component in NSS. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

Denial-of-service in the XML component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, …

When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow…

The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths wer…

Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Windows Kernel Elevation of Privilege Vulnerability

Windows SMB Server Elevation of Privilege Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows GDI Remote Code Execution Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows Telephony Service Elevation of Privilege Vulnerability

Winlogon Elevation of Privilege Vulnerability

Windows Accessibility Infrastructure (ATBroker.exe) Information Disclosure Vulnerability

Windows Shell Link Processing Spoofing Vulnerability

GDI+ Information Disclosure Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Windows Extensible File Allocation Table Elevation of Privilege Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Authentication Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Graphics Component Denial of Service Vulnerability

Windows Graphics Component Denial of Service Vulnerability

Microsoft Brokering File System Elevation of Privilege Vulnerability

Performance Counters for Windows Elevation of Privilege Vulnerability

Windows Kerberos Security Feature Bypass Vulnerability

Windows Device Association Service Elevation of Privilege Vulnerability

Windows Device Association Service Elevation of Privilege Vulnerability

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

Windows Projected File System Elevation of Privilege Vulnerability

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability

Push message Routing Service Elevation of Privilege Vulnerability