Tracked app vulnerabilities

Windows Server Resource Management Service Elevation of Privilege Vulnerability

Windows Image Acquisition Service Information Disclosure Vulnerability

Jet Database Engine Remote Code Execution Vulnerability

Windows Work Folders Service Elevation of Privilege Vulnerability

Windows Hard Link Elevation of Privilege Vulnerability

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Windows ARM Information Disclosure Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows RRAS Service Information Disclosure Vulnerability

Media Foundation Memory Corruption Vulnerability

Windows Registry Elevation of Privilege Vulnerability

Windows Registry Elevation of Privilege Vulnerability

Windows Media Remote Code Execution Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

HIGH 8.8

2020-08-10

Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some of these bugs showed evidence of memory c…

MEDIUM 6.5

2020-08-10

The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier p…

HIGH 7.8

2020-08-10

Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker that is already capable of placing files i…

HIGH 8.8

2020-08-10

JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the co…

MEDIUM 6.5

2020-08-10

A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-ori…

MEDIUM 6.5

2020-08-10

When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are …

MEDIUM 6.5

2020-08-10

An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues for websites relying o…

MEDIUM 6.5

2020-08-10

By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content …

MEDIUM 6.5

2020-08-10

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affec…

MEDIUM 4.3

2020-07-22

Incorrect security UI in PWAs in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had persuaded the user to install a PWA to spoof the content…

MEDIUM 6.1

2020-07-22

Insufficient data validation in WebUI in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had compromised the renderer process to inject scrip…

HIGH 8.8

2020-07-22

Heap buffer overflow in WebRTC in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-07-22

Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

MEDIUM 4.3

2020-07-22

Side-channel information leakage in scroll to text in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTM…

HIGH 8.8

2020-07-22

Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension…

MEDIUM 4.3

2020-07-22

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to leak cross-origin data vi…

MEDIUM 4.3

2020-07-22

Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via …

MEDIUM 4.3

2020-07-22

Insufficient policy enforcement in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML pa…

MEDIUM 6.5

2020-07-22

Inappropriate implementation in iframe sandbox in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass navigation restrictions via a crafted…

HIGH 8.8

2020-07-22

Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-07-22

Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag…

HIGH 8.8

2020-07-22

Out of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CRITICAL 9.6

2020-07-22

Inappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially perform a sandbox es…

MEDIUM 6.5

2020-07-22

Side-channel information leakage in autofill in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to obtain potentially sensitive information from …

HIGH 8.8

2020-07-22

Buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

MEDIUM 6.5

2020-07-22

Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page.

HIGH 8.8

2020-07-22

Use after free in developer tools in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had convinced the user to use developer tools to potenti…

HIGH 8.8

2020-07-22

Heap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

MEDIUM 4.3

2020-07-22

Policy bypass in CORS in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

HIGH 8.8

2020-07-22

Use after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

MEDIUM 6.5

2020-07-22

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap …

HIGH 8.8

2020-07-22

Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

HIGH 8.8

2020-07-22

Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

MEDIUM 6.5

2020-07-22

Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.