Tracked app vulnerabilities

Windows TCP/IP Denial of Service Vulnerability

Windows TCP/IP Remote Code Execution Vulnerability

NetBT Information Disclosure Vulnerability

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Windows Error Reporting Manager Elevation of Privilege Vulnerability

Windows NAT Denial of Service Vulnerability

Windows Image Elevation of Privilege Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows KernelStream Information Disclosure Vulnerability

Windows Network Connections Service Elevation of Privilege Vulnerability

Windows Storage VSP Driver Elevation of Privilege Vulnerability

Windows Elevation of Privilege Vulnerability

Windows Application Compatibility Client Library Elevation of Privilege Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Microsoft Graphics Components Remote Code Execution Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Storage Services Elevation of Privilege Vulnerability

MEDIUM 5.9

Mozilla Thunderbird

2020-10-08

If an attacker intercepts Thunderbird's initial attempt to perform automatic account setup using the Microsoft Exchange autodiscovery mechanism, and the attack…

HIGH 8.8

2020-10-01

When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free. This occurs because the …

MEDIUM 6.1

2020-10-01

By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to show the original s…

MEDIUM 6.1

2020-10-01

Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attack…

HIGH 8.8

2020-10-01

Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption and we presu…

HIGH 8.8

Mozilla Thunderbird

2020-10-01

When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we …

HIGH 8.8

2020-10-01

If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privilege…

HIGH 7.2

2020-09-27

http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTT…

HIGH 8.8

2020-09-21

Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …

HIGH 8.3

2020-09-21

Race in Mojo in Google Chrome prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape…

HIGH 7.8

2020-09-21

Insufficient policy enforcement in installer in Google Chrome on OS X prior to 85.0.4183.102 allowed a local attacker to potentially achieve privilege escalati…

CRITICAL 9.6

2020-09-21

Use after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially pe…

MEDIUM 4.3

2020-09-21

Insufficient data validation in Omnibox in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to perform domain spoofing via IDN homographs via a cr…

MEDIUM 4.3

2020-09-21

Information leakage in WebRTC in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to obtain potentially sensitive information via a crafted WebRTC…

MEDIUM 6.3

2020-09-21

Integer overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who had compromised the renderer process to potentially exploit hea…

MEDIUM 6.5

2020-09-21

Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restriction…

MEDIUM 6.5

2020-09-21

Insufficient validation of untrusted input in command line handling in Google Chrome on Windows prior to 85.0.4183.83 allowed a remote attacker to bypass navig…

MEDIUM 6.5

2020-09-21

Insufficient policy enforcement in media in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

MEDIUM 6.5

2020-09-21

Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) …

MEDIUM 6.5

2020-09-21

Inappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to spoof the contents of a permission dialog via a…

MEDIUM 6.5

2020-09-21

Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote attacker to obtain potentially sensitive …

MEDIUM 6.5

2020-09-21

Insufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

MEDIUM 6.5

2020-09-21

Inappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafte…

MEDIUM 6.5

2020-09-21

Insufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

HIGH 8.8

2020-09-21

Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…

MEDIUM 6.5

2020-09-21

Insufficient policy enforcement in iOSWeb in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a craft…

HIGH 8.8

2020-09-21

Heap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…

HIGH 7.6

2020-09-21

Out of bounds read in WebGL in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to obtain potentially sensitive information from process memory v…

HIGH 8.6

2020-09-21

Use after free in extensions in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Ext…

HIGH 8.8

2020-09-21

Use after free in offline mode in Google Chrome on iOS prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HT…

HIGH 8.8

2020-09-21

Use after free in Blink in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.