Tracked app vulnerabilities

MEDIUM 5.5

2026-05-12

Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

HIGH 8.8

2026-05-12

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile…

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile…

Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate p…

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.

CRITICAL 9.8

Mozilla Firefox

2026-05-12

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.

MEDIUM 5.3

Mozilla Firefox

2026-05-12

Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.

HIGH 7.3

Mozilla Firefox

2026-05-12

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150.0.3.

HIGH 8.8

Mozilla Firefox

2026-05-12

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3.

MEDIUM 6.5

Mozilla Firefox

2026-05-12

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11,…

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows Telephony Service Elevation of Privilege Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Windows DNS Client Remote Code Execution Vulnerability

Data Deduplication Elevation of Privilege Vulnerability

Windows Netlogon Remote Code Execution Vulnerability

Windows TCP/IP Remote Code Execution Vulnerability

Windows SMB Client Elevation of Privilege Vulnerability

Windows WAN ARP Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows TCP/IP Information Disclosure Vulnerability

Windows TCP/IP Denial of Service Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Windows Telephony Service Elevation of Privilege Vulnerability

Windows Volume Manager Extension Driver Remote Code Execution Vulnerability

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

Windows 11 Telnet Client Information Disclosure Vulnerability

Windows TCP/IP Driver Security Feature Bypass Vulnerability

Windows GDI Remote Code Execution Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows DWM Core Library Information Disclosure Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Windows TCP/IP Elevation of Privilege Vulnerability

Windows Storport Miniport Driver Denial of Service Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability

Windows Projected File System Elevation of Privilege Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability