Tracked app vulnerabilities

HIGH 7.8

2025-09-09

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code locally.

HIGH 7.1

2025-09-09

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

HIGH 7.8

2025-09-09

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-09-09

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-09-09

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

MEDIUM 5.5

2025-09-09

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

HIGH 7.8

2025-09-09

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-09-09

Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-09-09

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-09-09

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authoriz…

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an authorized attacker to…

Improper input validation in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.

CRITICAL · vendor

Microsoft Copilot

Windows

2025-09-09

Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.

Windows Bluetooth Service Elevation of Privilege Vulnerability

Graphics Kernel Remote Code Execution Vulnerability

Windows SMB Elevation of Privilege Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

Graphics Kernel Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

Windows NTLM Elevation of Privilege Vulnerability

MapUrlToZone Security Feature Bypass Vulnerability

Windows NTFS Remote Code Execution Vulnerability

Windows Defender Firewall Service Elevation of Privilege Vulnerability

Windows UI XAML Maps MapControlSettings Elevation of Privilege Vulnerability

Windows BitLocker Elevation of Privilege Vulnerability

Windows BitLocker Elevation of Privilege Vulnerability

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Defender Firewall Service Elevation of Privilege Vulnerability

MapUrlToZone Security Feature Bypass Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Defender Firewall Service Elevation of Privilege Vulnerability

Windows Management Service Elevation of Privilege Vulnerability

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Windows SMB Client Remote Code Execution Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability