Tracked app vulnerabilities

DirectWrite Remote Code Execution Vulnerability

Windows Console Driver Elevation of Privilege Vulnerability

Bowser.sys Denial of Service Vulnerability

Windows LSA Denial of Service Vulnerability

Windows LSA Security Feature Bypass Vulnerability

Windows AF_UNIX Socket Provider Denial of Service Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows SMB Information Disclosure Vulnerability

Windows Authenticode Spoofing Vulnerability

Azure AD Security Feature Bypass Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows AD FS Security Feature Bypass Vulnerability

Windows Event Tracing Elevation of Privilege Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Windows TCP/IP Driver Denial of Service Vulnerability

Windows Installer Spoofing Vulnerability

Windows Key Distribution Center Information Disclosure Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Media Foundation Information Disclosure Vulnerability

Windows Desktop Bridge Elevation of Privilege Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability

Windows DNS Snap-in Remote Code Execution Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Snap-in Remote Code Execution Vulnerability

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Windows DNS Snap-in Remote Code Execution Vulnerability

Windows DNS Snap-in Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Denial of Service Vulnerability

Windows Secure Kernel Mode Security Feature Bypass Vulnerability

Windows Projected File System Elevation of Privilege Vulnerability

Windows Media Remote Code Execution Vulnerability

Windows InstallService Elevation of Privilege Vulnerability

Windows TCP/IP Driver Denial of Service Vulnerability

An issue was found in the Evernote client for Windows 10, 7, and 2008 in the protocol handler. This enables attackers for arbitrary command execution if the us…

Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corruption and we pres…

A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process incorrectly, leading to an out-of-bounds read. *This bug only …

If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indi…

OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1 were stored unencrypted on the user's local disk. The master pass…

The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain network, grants normal remote users access to start or stop th…

Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key import task. If the task runs into a failure, the secret key may…

When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that isn't distri…

Signatures are written to disk before and read during verification, which might be subject to a race condition when a malicious local process or user is replac…

Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking restrictions when used in the Alt-Svc hea…