Tracked app vulnerabilities

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network.

Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.

Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a…

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.

Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.

Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.

Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.

Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.

A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may …

MEDIUM 5.3

2026-08-06

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to obtain poten…

MEDIUM 4.3

2026-07-30

Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. …

MEDIUM 4.0

2026-07-30

Inappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform UI spoofing via a malicious file…

MEDIUM 6.5

2026-07-30

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via …

MEDIUM 4.3

2026-07-30

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffi…

MEDIUM 4.3

2026-07-30

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious …

MEDIUM 4.3

2026-07-30

Inappropriate implementation in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic…

MEDIUM 4.3

2026-07-30

Inappropriate implementation in Input in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML pa…

MEDIUM 4.3

2026-07-30

Inappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perfo…

MEDIUM 6.5

2026-07-30

Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from proces…

MEDIUM 4.3

2026-07-30

Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cr…

MEDIUM 6.5

2026-07-30

Inappropriate implementation in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from proces…

MEDIUM 6.5

2026-07-30

Race in PictureInPicture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chro…

MEDIUM 4.3

2026-07-30

Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perfor…

MEDIUM 6.2

2026-07-30

Inappropriate implementation in Browser in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a malicio…

MEDIUM 4.3

2026-07-30

Inappropriate implementation in Media in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a craf…

MEDIUM 6.5

2026-07-30

Uninitialized Use in Skia in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process…

MEDIUM 6.5

2026-07-30

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer pro…

MEDIUM 6.5

2026-07-30

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypa…

MEDIUM 6.5

2026-07-30

Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. (…