Tracked app vulnerabilities

CRITICAL 9.6

2026-03-11

Out of bounds read in Web Speech in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML p…

HIGH 8.8

2026-03-11

Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page…

HIGH 8.8

2026-03-11

Integer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch…

HIGH 8.8

2026-03-11

Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.…

HIGH 7.8

2026-03-10

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CRITICAL · vendor

2026-03-10

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

HIGH 8.4

2026-03-10

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2026-03-10

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2026-03-10

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH · vendor

Microsoft Copilot

Windows

2026-03-10

Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

HIGH · vendor

Microsoft Copilot

Windows

2026-03-10

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Windows Kernel Elevation of Privilege Vulnerability

Windows SMB Server Elevation of Privilege Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows GDI Remote Code Execution Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows Telephony Service Elevation of Privilege Vulnerability

Winlogon Elevation of Privilege Vulnerability

Windows Accessibility Infrastructure (ATBroker.exe) Information Disclosure Vulnerability

Windows Shell Link Processing Spoofing Vulnerability

GDI+ Information Disclosure Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Windows Extensible File Allocation Table Elevation of Privilege Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Authentication Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Graphics Component Denial of Service Vulnerability

Windows Graphics Component Denial of Service Vulnerability

Microsoft Brokering File System Elevation of Privilege Vulnerability

Performance Counters for Windows Elevation of Privilege Vulnerability

Windows Kerberos Security Feature Bypass Vulnerability

Windows Device Association Service Elevation of Privilege Vulnerability

Windows Device Association Service Elevation of Privilege Vulnerability

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

Windows Projected File System Elevation of Privilege Vulnerability

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability

Push message Routing Service Elevation of Privilege Vulnerability

MapUrlToZone Security Feature Bypass Vulnerability

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability