Tracked app vulnerabilities

Windows CSC Service Elevation of Privilege Vulnerability

Windows State Repository Service Information Disclosure Vulnerability

Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability

Win32k Information Disclosure Vulnerability

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

Media Foundation Memory Corruption Vulnerability

Windows Storage Service Elevation of Privilege Vulnerability

Windows CSC Service Elevation of Privilege Vulnerability

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

Media Foundation Information Disclosure Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Image Acquisition Service Information Disclosure Vulnerability

Windows Work Folders Service Elevation of Privilege Vulnerability

Windows GDI Elevation of Privilege Vulnerability

DirectX Elevation of Privilege Vulnerability

Media Foundation Memory Corruption Vulnerability

Media Foundation Memory Corruption Vulnerability

Windows Server Resource Management Service Elevation of Privilege Vulnerability

Windows Image Acquisition Service Information Disclosure Vulnerability

Jet Database Engine Remote Code Execution Vulnerability

Windows Work Folders Service Elevation of Privilege Vulnerability

Windows Hard Link Elevation of Privilege Vulnerability

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Windows ARM Information Disclosure Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows RRAS Service Information Disclosure Vulnerability

Media Foundation Memory Corruption Vulnerability

Windows Registry Elevation of Privilege Vulnerability

Windows Registry Elevation of Privilege Vulnerability

Windows Media Remote Code Execution Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some of these bugs showed evidence of memory c…

The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier p…

Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker that is already capable of placing files i…

JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the co…

A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-ori…

When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are …

An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues for websites relying o…

By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content …

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affec…

In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The <executable-name…

An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker…

Windows GDI Information Disclosure Vulnerability

Windows SharedStream Library Elevation of Privilege Vulnerability

Windows Network Connections Service Elevation of Privilege Vulnerability

Windows Network Location Awareness Service Elevation of Privilege Vulnerability

Windows Font Library Remote Code Execution Vulnerability

GDI+ Remote Code Execution Vulnerability