Tracked app vulnerabilities

HIGH 8.8

2026-05-14

Heap buffer overflow in WebML in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to potentially exploit heap corruption via a crafte…

HIGH 8.3

2026-05-14

Use after free in Network in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially…

HIGH 8.8

2026-05-14

Heap buffer overflow in Codecs in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted vide…

MEDIUM 4.3

2026-05-14

Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer…

HIGH 8.8

2026-05-14

Insufficient validation of untrusted input in Downloads in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a craf…

HIGH 8.8

2026-05-14

Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML …

HIGH 8.3

2026-05-14

Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted H…

HIGH 8.8

2026-05-14

Out of bounds write in WebAudio in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTM…

HIGH 8.3

2026-05-14

Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a san…

HIGH 8.8

2026-05-14

Use after free in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chrom…

HIGH 7.5

2026-05-14

Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chrom…

HIGH 8.3

2026-05-14

Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium …

HIGH 8.8

2026-05-14

Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted …

HIGH 8.8

2026-05-14

Use after free in Blink in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. …

HIGH 8.8

2026-05-14

Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gest…

MEDIUM 5.3

2026-05-14

Insufficient validation of untrusted input in DataTransfer in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in…

HIGH 8.3

2026-05-14

Use after free in HID in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially …

HIGH 8.3

2026-05-14

Use after free in Aura in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a san…

HIGH 8.3

2026-05-14

Use after free in Input in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially p…

HIGH 8.3

2026-05-14

Use after free in FileSystem in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to poten…

CRITICAL 9.6

2026-05-14

Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chrom…

HIGH 7.5

2026-05-14

Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an o…

HIGH 8.8

2026-05-14

Heap buffer overflow in WebML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML …

CRITICAL 9.6

2026-05-14

Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network.

Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

HIGH 7.4

Microsoft Outlook

2026-05-12

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a…

HIGH 7.7

2026-05-12

Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.

HIGH 7.8

Microsoft Office

2026-05-12

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

HIGH 7.1

Microsoft PowerPoint

2026-05-12

Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally.

HIGH 7.1

Microsoft Word

2026-05-12

Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.

Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.

Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile…

MEDIUM 4.3

2026-05-12

Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

HIGH 8.8

2026-05-12

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

HIGH 7.8

2026-05-12

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

HIGH 7.8

2026-05-12

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

Windows TCP/IP Denial of Service Vulnerability

Windows TCP/IP Denial of Service Vulnerability

Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally.

Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.