Tracked app vulnerabilities

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may…

Memory safety bugs present in Firefox 138 and Thunderbird 138. Some of these bugs showed evidence of memory corruption and we presume that with enough effort s…

Memory safety bug present in Firefox ESR 128.10, and Thunderbird 128.10. This bug showed evidence of memory corruption and we presume that with enough effort t…

Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10. Some of these bugs showed evidence of memory corruption…

A double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC. This could have caused memo…

The issue was addressed with improved checks. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, visionOS 2.3, watchO…

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability was fixed in Firefox 1…

Thunderbird's handling of the X-Mozilla-External-Attachment-URL header can be exploited to execute JavaScript in the file:/// context. By crafting a nested ema…

Thunderbird parses addresses in a way that can allow sender spoofing in case the server allows an invalid From address to be used. For example, if the From hea…

Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

NTFS Elevation of Privilege Vulnerability

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Kernel Information Disclosure Vulnerability

Web Threat Defense (WTD.sys) Denial of Service Vulnerability

Microsoft Brokering File System Elevation of Privilege Vulnerability

MS-EVEN RPC Remote Code Execution Vulnerability

Active Directory Certificate Services (AD CS) Denial of Service Vulnerability

Windows Media Remote Code Execution Vulnerability

Windows Media Remote Code Execution Vulnerability

Windows Media Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Windows Deployment Services Denial of Service Vulnerability

Windows SMB Information Disclosure Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

UrlMon Security Feature Bypass Vulnerability

Universal Print Management Service Elevation of Privilege Vulnerability

Windows Media Remote Code Execution Vulnerability

Windows Multiple UNC Provider Driver Information Disclosure Vulnerability

Windows ExecutionContext Driver Elevation of Privilege Vulnerability

Windows Installer Information Disclosure Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

A privacy issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app ma…