Tracked app vulnerabilities

Plaintext of decrypted emails can leak through by user submitting an embedded form by pressing enter key within a text input field. This vulnerability affects …

dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when included in a HTML reply/forward. This vulnerability affects Thunderb…

Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thu…

Windows 10 does not warn users before opening executable files with the SettingContent-ms extension even when they have been downloaded from the internet and h…

In the previous mitigations for Spectre, the resolution or precision of various methods was reduced to counteract the ability to measure precise time intervals…

An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a float value. This could leak private dat…

A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction. Th…

NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin POST that does a 307 redirect to the targ…

A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document that held the node…

An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in a potentially exploi…

An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for subsequent graphics computations when th…

A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element. This results in a p…

A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written ou…

Microsoft Windows Codecs Library Information Disclosure Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Shell Remote Code Execution Vulnerability

MS XML Remote Code Execution Vulnerability

Windows TCP/IP Information Disclosure Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

DirectX Information Disclosure Vulnerability

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Windows Media Player Information Disclosure Vulnerability

Windows Media Player Information Disclosure Vulnerability

Windows GDI Information Disclosure Vulnerability

Microsoft Graphics Components Remote Code Execution Vulnerability

Microsoft JET Database Engine Remote Code Execution Vulnerability

Windows Theme API Remote Code Execution Vulnerability

NTFS Elevation of Privilege Vulnerability

Microsoft Filter Manager Elevation Of Privilege Vulnerability

Windows Kernel Information Disclosure Vulnerability

Linux On Windows Elevation Of Privilege Vulnerability

Windows DNS Security Feature Bypass Vulnerability

Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks a…

Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') …

Windows Remote Code Execution Vulnerability

Windows Elevation of Privilege Vulnerability

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Device Guard Security Feature Bypass Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Subsystem for Linux Elevation of Privilege Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Windows Hyper-V Denial of Service Vulnerability