Tracked app vulnerabilities

Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability

Windows Event Logging Service Elevation of Privilege Vulnerability

Windows Runtime Elevation of Privilege Vulnerability

Windows WalletService Elevation of Privilege Vulnerability

Windows Credential Enrollment Manager Service Elevation of Privilege Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Print Workflow Service Elevation of Privilege Vulnerability

Windows Event Logging Service Elevation of Privilege Vulnerability

Windows WalletService Denial of Service Vulnerability

Windows Picker Platform Elevation of Privilege Vulnerability

Windows WalletService Elevation of Privilege Vulnerability

Windows WalletService Information Disclosure Vulnerability

Windows Profile Service Elevation of Privilege Vulnerability

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

Windows Resource Policy Information Disclosure Vulnerability

Windows System Events Broker Elevation of Privilege Vulnerability

Windows iSCSI Target Service Elevation of Privilege Vulnerability

Windows Font Driver Host Remote Code Execution Vulnerability

Windows UPnP Device Host Elevation of Privilege Vulnerability

Windows Runtime Elevation of Privilege Vulnerability

Windows USO Core Worker Elevation of Privilege Vulnerability

Microsoft Graphics Component Information Disclosure Vulnerability

Windows Storage Services Elevation of Privilege Vulnerability

Windows Modules Installer Elevation of Privilege Vulnerability

Windows WalletService Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Group Policy Services Policy Processing Elevation of Privilege Vulnerability

Windows Mobile Device Management Diagnostics Information Disclosure Vulnerability

Local Security Authority Subsystem Service Denial of Service Vulnerability

Windows Runtime Elevation of Privilege Vulnerability

Windows Function Discovery Service Elevation of Privilege Vulnerability

Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pa…

When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an administrator.) …

When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially explo…

When processing callbacks that occurred during window flushing in the parent process, the associated window may die; causing a use-after-free condition. This c…

Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malicious JavaScript. This vulnerability affec…

Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially exploitab…

Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We presume that with enough effort that it…

When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash. This vulnerability affects…

NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thund…

If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbird will continue with an unencrypted co…

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM. This results in the …

In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases wh…