Tracked app vulnerabilities

MEDIUM 6.5

Mozilla Firefox

2025-04-15

A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition. This …

HIGH 7.8

2025-04-08

Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally.

HIGH 7.5

2025-04-08

Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network.

HIGH 7.5

Microsoft Outlook

2025-04-08

Exposure of sensitive information to an unauthorized actor in Outlook for Android allows an unauthorized attacker to disclose information over a network.

HIGH 7.8

2025-04-08

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-04-08

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-04-08

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

HIGH · vendor

Microsoft Copilot

Windows

2025-04-08

Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network.

HIGH 7.8

2025-04-08

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Windows Kerberos Security Feature Bypass Vulnerability

Windows Cryptographic Services Information Disclosure Vulnerability

NTFS Information Disclosure Vulnerability

NTFS Elevation of Privilege Vulnerability

Active Directory Certificate Services Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Resilient File System (ReFS) Information Disclosure Vulnerability

Windows Security Zone Mapping Security Feature Bypass Vulnerability

Windows Power Dependency Coordinator Information Disclosure Vulnerability

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

NTFS Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Shell Remote Code Execution Vulnerability

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Windows Secure Channel Elevation of Privilege Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Windows Bluetooth Service Elevation of Privilege Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

NTFS Elevation of Privilege Vulnerability

Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Windows Remote Desktop Services Remote Code Execution Vulnerability

Kerberos Key Distribution Proxy Service Denial of Service Vulnerability

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Update Stack Elevation of Privilege Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

HTTP.sys Denial of Service Vulnerability

Microsoft Streaming Service Denial of Service Vulnerability

Windows Standards-Based Storage Management Service Denial of Service Vulnerability