Tracked app vulnerabilities

Windows GDI Information Disclosure Vulnerability

Win32k Elevation of Privilege Vulnerability

HTTP Protocol Stack Remote Code Execution Vulnerability

HTTP.sys Denial of Service Vulnerability

Windows DNSAPI Remote Code Execution Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

Hypervisor Code Integrity Elevation of Privilege Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

Windows Desktop Bridge Elevation of Privilege Vulnerability

Windows Remote Code Execution Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

Windows Remote Code Execution Vulnerability

Windows Wireless Network Profile Information Disclosure Vulnerability

Windows Desktop Bridge Elevation of Privilege Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Denial of Service Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

WEBDAV Denial of Service Vulnerability

HIDParser Elevation of Privilege Vulnerability

Cortana Elevation of Privilege Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Code Integrity Module Denial of Service Vulnerability

NTFS Elevation of Privilege Vulnerability

Windows Elevation of Privilege Vulnerability

Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.

Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.

Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes du…

A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the us…

In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated with downloaded files and will not show any …

It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a user opening a remote attachment which is …

Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element. This could allow a m…

Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird …

Crafted message headers can cause a Thunderbird process to hang on receiving the message. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 5…

An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds wr…

A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in a potentially exploitable crash. This vu…

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. T…

Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evidence of memory corruption and we presume …

An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox…

Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these…

An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox…

A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbo…

A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potentially exploitable crash. This vulnerability…

Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough ef…

If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to spoof the displayed U…

A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable cra…

A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This results in a potentially exploitable crash. …