Tracked app vulnerabilities

CRITICAL 9.6

2026-11-11

Buffer overflow in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page…

CRITICAL 9.6

2026-11-11

Use after free in Passwords in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code outside t…

CRITICAL 9.6

2026-11-11

Use after free in ServiceWorker in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted H…

CRITICAL 9.6

2026-11-11

Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code…

CRITICAL 9.6

2026-11-11

Link following in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code outside …

CRITICAL 9.6

2026-11-11

Use after free in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the sandbox via a craf…

CRITICAL 9.6

2026-11-11

Use after free in ANGLE in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a craft…

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.

Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Double free in Windows DNS allows an unauthorized attacker to execute code over a network.

Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.

Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network.

CRITICAL 9.6

2026-11-10

Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging social engineering to execute arbitrary code…

CRITICAL 9.6

2026-11-10

Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunder…

CRITICAL 9.6

2026-11-10

Sandbox escape due to use-after-free in the IPC component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160,…

CRITICAL 9.6

Mozilla Firefox

2026-11-10

Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

CRITICAL 9.6

2026-11-10

Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7,…

CRITICAL 9.6

2026-11-10

Sandbox escape due to use-after-free in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, T…

CRITICAL 9.6

2026-11-10

Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firef…

CRITICAL 9.6

2026-11-10

Sandbox escape due to incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox E…

Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerability

Windows Function Discovery Resource Publication Remote Code Execution Vulnerability

Graphic Fonts Remote Code Execution Vulnerability

Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

Windows Graphics Kernel Elevation of Privilege Vulnerability

Windows Message Queuing Remote Code Execution Vulnerability

Windows Message Queuing Remote Code Execution Vulnerability

Windows CredSSP Remote Code Execution Vulnerability

Windows Internet Information Services Remote Code Execution Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Windows Schannel Remote Code Execution Vulnerability

Windows Deployment Services Remote Code Execution Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows TPM Elevation of Privilege Vulnerability

Remote Procedure Call Runtime Remote Code Execution Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Windows Function Discovery SSDP Provider Remote Code Execution Vulnerability

Windows Message Queuing Remote Code Execution Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Network Address Translation (NAT) Remote Code Execution Vulnerability