Tracked app vulnerabilities

Lenovo: CVE-2024-23593 Modify Boot Manager and Escalate Privileges

Windows Authentication Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Remote Procedure Call Runtime Remote Code Execution Vulnerability

Secure Boot Security Feature Bypass Vulnerability

BitLocker Security Feature Bypass Vulnerability

Intel: CVE-2022-0001 Branch History Injection

RARLAB WinRAR Mark-Of-The-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-Of-The-Web protection mechanism on affected i…

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3,…

[Apple CoreMedia] Processing an image may lead to arbitrary code execution

Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability

To harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt to continue. This vulnerability affects F…

Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of these bugs showed evidence of memory corruption and we presume tha…

If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to achieve code …

A missing delay on when pointer lock was used could have allowed a malicious page to trick a user into granting permissions. This vulnerability affects Firefox…

Using a markup injection an attacker could have stolen nonce values. This could have been used to bypass strict content security policies. This vulnerability a…

The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites. This vulnerabi…

`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()` could have experienced integer overflows, causing underalloc…

Return registers were overwritten which could have allowed an attacker to execute arbitrary code. *Note:* This issue only affected Armv7-A systems. Other opera…

An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping the sandbox. *Note:* This issue only affected Windows …

NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data…

A logic issue was addressed with improved state management. This issue is fixed in Xcode 15.3. An app may bypass Gatekeeper checks.