Tracked app vulnerabilities

Windows Client-Side Caching Elevation of Privilege Vulnerability

Windows Kerberos Elevation of Privilege Vulnerability

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

Windows Bluetooth RFCOM Protocol Driver Information Disclosure Vulnerability

Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability

Windows WLAN Service Elevation of Privilege Vulnerability

Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability

Windows Speech Recognition Information Disclosure Vulnerability

Windows Speech Recognition Elevation of Privilege Vulnerability

Windows Speech Runtime Elevation of Privilege Vulnerability

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Windows Smart Card Reader Elevation of Privilege Vulnerability

If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables.

Memory safety bug present in Firefox 143 and Thunderbird 143. This bug showed evidence of memory corruption and we presume that with enough effort this could h…

Starting in Thunderbird 143, the use of the native messaging API by web extensions on Windows could lead to crashes caused by use-after-free memory corruption.…

Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnerability was fixed in Firefox 144 and Thu…

Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruptio…

Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence…

Insufficient escaping in the “Copy as cURL” feature could have been used to trick a user into executing unexpected code on Windows. This did not affect the app…

A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a…

There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable. This vulnerability was fixed in Firefox 144, Firefo…

A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised proce…

A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vulnerability …

Use-after-free in MediaTrackGraphImpl::GetInstance(). This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.

Remote Procedure Call Denial of Service Vulnerability

Windows URL Parsing Remote Code Execution Vulnerability

Windows Taskbar Live Preview Information Disclosure Vulnerability

Windows Bluetooth Service Elevation of Privilege Vulnerability

Windows Bluetooth Service Elevation of Privilege Vulnerability

Windows NTLM Spoofing Vulnerability

Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

Windows SMB Client Tampering Vulnerability

Windows Authentication Elevation of Privilege Vulnerability

Windows Authentication Elevation of Privilege Vulnerability

Windows Authentication Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Microsoft Failover Cluster Virtual Driver Information Disclosure Vulnerability

Windows Local Session Manager (LSM) Denial of Service Vulnerability

Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability

Windows Local Session Manager (LSM) Denial of Service Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Windows Search Service Denial of Service Vulnerability

NTLM Hash Disclosure Spoofing Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Health and Optimized Experiences Elevation of Privilege Vulnerability