Tracked app vulnerabilities

HIGH 7.3

2025-09-16

Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, …

HIGH 7.1

2025-09-16

Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and …

HIGH 8.8

2025-09-10

Inappropriate implementation in Mojo in Google Chrome on Android, Linux, ChromeOS prior to 140.0.7339.127 allowed a remote attacker to bypass site isolation vi…

HIGH 8.8

2025-09-10

Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed a remote attacker to potentially exploit heap corruption via a craf…

HIGH 8.4

2025-09-09

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-09-09

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-09-09

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code locally.

HIGH 7.1

2025-09-09

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

HIGH 7.8

2025-09-09

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-09-09

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-09-09

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-09-09

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-09-09

Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-09-09

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-09-09

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authoriz…

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an authorized attacker to…

Windows Bluetooth Service Elevation of Privilege Vulnerability

Windows SMB Elevation of Privilege Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

MapUrlToZone Security Feature Bypass Vulnerability

Windows NTFS Remote Code Execution Vulnerability

Windows Defender Firewall Service Elevation of Privilege Vulnerability

Windows UI XAML Maps MapControlSettings Elevation of Privilege Vulnerability

Windows BitLocker Elevation of Privilege Vulnerability

Windows BitLocker Elevation of Privilege Vulnerability

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Defender Firewall Service Elevation of Privilege Vulnerability

MapUrlToZone Security Feature Bypass Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Defender Firewall Service Elevation of Privilege Vulnerability

Windows Management Service Elevation of Privilege Vulnerability

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Windows SMB Client Remote Code Execution Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Windows Defender Firewall Service Elevation of Privilege Vulnerability