Tracked app vulnerabilities

HIGH 8.8

2026-08-28

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

MEDIUM 4.3

2026-08-28

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

MEDIUM 6.5

2026-08-28

External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

MEDIUM 5.4

2026-08-28

Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

MEDIUM 5.4

2026-08-28

Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

MEDIUM 4.4

2026-08-28

Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to d…

Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario …

An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a cred…

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU…

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kernel null pointer dereference in an error…

Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from …

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.

Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.

Memory Corruption when handling malformed request parameters in the fingerprint TA.

Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.

HIGH 7.7

Microsoft Edge

2026-08-04

External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed

In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System execution privileges needed.

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has …

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has …

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue b…

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al…

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al…

In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has alre…

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obta…

In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious a…

In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege if a malicious actor has alre…

In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…

In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has…

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-leader exec() race Wongi and Jungwoo decoded …

MEDIUM 5.4

Microsoft Edge

2026-07-28

Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network.

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix maxfield check in DJ short report validation Commit b6a57912854e ("…

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualis…

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualis…

Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel,…

Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facilitating unp…

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory write outside the permitted range of …

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a GPU register access which can lead to privil…

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addresses to the…

Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.

In IMS, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileg…

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue …

In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure, if a UE has connected …

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base…

In Modem, there is a possible memory corruption due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a ro…