Tracked app vulnerabilities

HIGH 7.8

2025-10-14

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Improper link resolution before file access ('link following') in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate pri…

HIGH 7.8

2025-10-14

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

HIGH 8.4

2025-10-14

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.1

2025-10-14

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

HIGH 7.8

2025-10-14

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-10-14

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.1

2025-10-14

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

HIGH 7.8

2025-10-14

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-10-14

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-10-14

Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-10-14

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-10-14

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-10-14

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-10-14

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

HIGH 7.0

2025-10-14

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.

Null pointer dereference in Windows DirectX allows an authorized attacker to deny service over a network.

Heap-based buffer overflow in Azure Local allows an authorized attacker to elevate privileges locally.

Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.

Reliance on untrusted inputs in a security decision in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges …

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.

HIGH 8.1

Mozilla Firefox

2025-10-14

The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted…

HIGH 8.8

2025-10-14

Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruptio…

HIGH 8.8

2025-10-14

Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence…

HIGH 8.1

2025-10-14

Insufficient escaping in the “Copy as cURL” feature could have been used to trick a user into executing unexpected code on Windows. This did not affect the app…

Windows URL Parsing Remote Code Execution Vulnerability

Windows Taskbar Live Preview Information Disclosure Vulnerability

Windows Bluetooth Service Elevation of Privilege Vulnerability

Windows Bluetooth Service Elevation of Privilege Vulnerability

Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

Windows SMB Client Tampering Vulnerability

Windows Authentication Elevation of Privilege Vulnerability

Windows Authentication Elevation of Privilege Vulnerability

Windows Authentication Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Microsoft Failover Cluster Virtual Driver Information Disclosure Vulnerability

Windows Local Session Manager (LSM) Denial of Service Vulnerability

Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability