Tracked app vulnerabilities

Desktop Window Manager Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Kernel Information Disclosure Vulnerability

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Windows Remote Desktop Protocol Security Feature Bypass

Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability

Windows BitLocker Security Feature Bypass Vulnerability

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Windows BitLocker Security Feature Bypass Vulnerability

Windows BitLocker Security Feature Bypass Vulnerability

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

Windows BitLocker Security Feature Bypass Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability

Windows Storage Management Provider Information Disclosure Vulnerability

Xbox IStorageService Elevation of Privilege Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Hello Security Feature Bypass Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Graphics Component Elevation of Privilege Vulnerability

Virtual Secure Mode Spoofing Vulnerability

Microsoft Brokering File System Elevation of Privilege Vulnerability

PowerShell Elevation of Privilege Vulnerability

Windows Agere Modem Driver Elevation of Privilege Vulnerability

In modem, there is a possible system crash due to improper input validation. This could lead to remote escalation of privilege with no additional execution pri…

In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privilege…

A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26. An app may bypass Gatekeeper checks.

Memory corruption while allocating buffers in DSP service.

Memory corruption while processing user buffers.

Memory corruption while processing a malformed license file during reboot.

Memory corruption during PlayReady APP usecase while processing TA commands.

In the Linux kernel, the following vulnerability has been resolved: tls: make sure to abort the stream if headers are bogus Normally we wait for the socket t…

MEDIUM 4.0

Firefox

2025-09-30

Cookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing information from private tabs to escape Inc…

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 and iPadOS 18.7.1, iOS 26.0.1 and iPadOS 26.0.1, ma…

HIGH 8.8

2025-09-24

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…

HIGH 8.8

2025-09-24

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…

CRITICAL 9.1

2025-09-24

Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (C…

HIGH 8.8

2025-09-24

Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via malicious network t…

HIGH 8.8

2025-09-24

Use after free in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch…

HIGH 8.8

2025-09-24

Use after free in Dawn in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

Cryptographic issue while performing RSA PKCS padding decoding.

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to el…