Tracked app vulnerabilities

Windows Server Service Security Feature Bypass Vulnerability

Windows SMB Witness Service Security Feature Bypass Vulnerability

Windows DNS Spoofing Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Hello Remote Code Execution Vulnerability

Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

Windows Installer Information Disclosure Vulnerability

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Windows Container Manager Service Elevation of Privilege Vulnerability

Windows iSCSI Discovery Service Denial of Service Vulnerability

Windows Bus Filter Driver Elevation of Privilege Vulnerability

Windows Collaborative Translation Framework Elevation of Privilege Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Microsoft ODBC Driver Remote Code Execution Vulnerability

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Windows GDI Elevation of Privilege Vulnerability

Windows Media Remote Code Execution Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Windows Filtering Platform Elevation of Privilege Vulnerability

iSCSI Target WMI Provider Remote Code Execution Vulnerability

Windows Geolocation Service Remote Code Execution Vulnerability

Windows Media Remote Code Execution Vulnerability

Windows Authentication Elevation of Privilege Vulnerability

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

GDI Elevation of Privilege Vulnerability

Windows GDI Elevation of Privilege Vulnerability

DHCP Server Service Information Disclosure Vulnerability

Windows Remote Desktop Security Feature Bypass Vulnerability

Windows Group Policy Elevation of Privilege Vulnerability

NTFS Elevation of Privilege Vulnerability

Windows CryptoAPI Denial of Service Vulnerability

Windows CryptoAPI Denial of Service Vulnerability

CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c.

Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCreight and the Mozilla Fuzzing Team repor…

When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird…

An attacker could have positioned a `datalist` element to obscure the address bar. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderb…

A type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefo…

An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102…

In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attac…

Memory safety bugs present in Firefox 110 and Firefox ESR 102.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort…

Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks. This vulnerability af…

When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resolved those …

While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash.…

When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. This may have lead future code…