Tracked app vulnerabilities

TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with…

CRITICAL · vendor

2025-06-10

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-06-10

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

MEDIUM 6.7

2025-06-10

Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally.

HIGH 7.8

2025-06-10

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-06-10

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CRITICAL · vendor

2025-06-10

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-06-10

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CRITICAL · vendor

2025-06-10

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CRITICAL · vendor

2025-06-10

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Windows Shortcut Files Security Feature Bypass Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability

Windows Netlogon Elevation of Privilege Vulnerability

Windows App Control for Business Security Feature Bypass Vulnerability

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

Windows Task Scheduler Elevation of Privilege Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Storage Management Provider Information Disclosure Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Storage Management Provider Information Disclosure Vulnerability

Windows Storage Management Provider Information Disclosure Vulnerability

Windows Storage Management Provider Information Disclosure Vulnerability

Windows Storage Management Provider Information Disclosure Vulnerability

Windows Storage Management Provider Information Disclosure Vulnerability

Windows Storage Management Provider Information Disclosure Vulnerability

Windows Local Security Authority (LSA) Denial of Service Vulnerability

Windows Local Security Authority (LSA) Denial of Service Vulnerability

Windows Storage Management Provider Information Disclosure Vulnerability

Windows DWM Core Library Information Disclosure Vulnerability

DHCP Server Service Denial of Service Vulnerability

DHCP Server Service Denial of Service Vulnerability

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Windows Storage Port Driver Information Disclosure Vulnerability

Windows Recovery Driver Elevation of Privilege Vulnerability

Windows Storage Management Provider Information Disclosure Vulnerability

Windows Storage Management Provider Information Disclosure Vulnerability

Windows SMB Client Elevation of Privilege Vulnerability

Windows Media Elevation of Privilege Vulnerability

Remote Desktop Protocol Client Information Disclosure Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows Remote Desktop Services Remote Code Execution Vulnerability

Cert CC: CVE-2025-3052 InsydeH2O Secure Boot Bypass

Windows Schannel Remote Code Execution Vulnerability