Tracked app vulnerabilities

Windows Storage Management Provider Information Disclosure Vulnerability

Windows SMB Client Elevation of Privilege Vulnerability

Windows Media Elevation of Privilege Vulnerability

Remote Desktop Protocol Client Information Disclosure Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows Remote Desktop Services Remote Code Execution Vulnerability

Cert CC: CVE-2025-3052 InsydeH2O Secure Boot Bypass

Windows Schannel Remote Code Execution Vulnerability

Windows Storage Management Provider Information Disclosure Vulnerability

Windows Storage Management Provider Information Disclosure Vulnerability

Windows Storage Management Provider Information Disclosure Vulnerability

Memory safety bugs present in Firefox 138 and Thunderbird 138. Some of these bugs showed evidence of memory corruption and we presume that with enough effort s…

Memory safety bug present in Firefox ESR 128.10, and Thunderbird 128.10. This bug showed evidence of memory corruption and we presume that with enough effort t…

Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10. Some of these bugs showed evidence of memory corruption…

A double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC. This could have caused memo…

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability was fixed in Firefox 1…

An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability was fixed in Firefox 138.0.4, Firefox ESR 1…

It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically accesse…

Thunderbird's handling of the X-Mozilla-External-Attachment-URL header can be exploited to execute JavaScript in the file:/// context. By crafting a nested ema…

Thunderbird parses addresses in a way that can allow sender spoofing in case the server allows an invalid From address to be used. For example, if the From hea…

Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

NTFS Elevation of Privilege Vulnerability

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Kernel Information Disclosure Vulnerability

Web Threat Defense (WTD.sys) Denial of Service Vulnerability

Microsoft Brokering File System Elevation of Privilege Vulnerability

MS-EVEN RPC Remote Code Execution Vulnerability

Active Directory Certificate Services (AD CS) Denial of Service Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Windows Media Remote Code Execution Vulnerability

Windows Media Remote Code Execution Vulnerability

Windows Media Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Windows Deployment Services Denial of Service Vulnerability

Windows SMB Information Disclosure Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

UrlMon Security Feature Bypass Vulnerability