Tracked app vulnerabilities

Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.

Windows HTTP.sys Elevation of Privilege Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

HIGH 7.8

7-Zip

2025-11-19

7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte…

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Microsoft Windows File Explorer Spoofing Vulnerability

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead…

Windows Graphics Component Elevation of Privilege Vulnerability

Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability

Microsoft Virtual Hard Disk Remote Code Execution Vulnerability

Microsoft Brokering File System Elevation of Privilege Vulnerability

Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability

HIGH 7.8

2025-06-10

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

MEDIUM 6.7

2025-06-10

Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally.

HIGH 7.8

2025-06-10

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-04-08

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

Microsoft Windows File Explorer Spoofing Vulnerability

HIGH 8.8

2024-05-14

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Fire…

Windows Themes Spoofing Vulnerability

HIGH 8.8

2023-06-14

Microsoft Outlook Remote Code Execution Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

HIGH 7.8

2023-03-14

Microsoft Excel Remote Code Execution Vulnerability

Windows Backup Service Elevation of Privilege Vulnerability

HIGH 7.5

2022-09-29

Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HTTP Protocol Stack Remote Code Execution Vulnerability

MEDIUM 6.5

2021-01-08

Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…

MEDIUM 6.5

2020-07-22

Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page.

HIGH 8.8

2020-07-22

Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-02-27

Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CRITICAL 9.8

2020-02-20

The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attacke…