Tracked app vulnerabilities

MEDIUM 6.2

2025-09-16

Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140…

HIGH 8.1

2025-09-16

Spoofing issue in the Site Permissions component. This vulnerability was fixed in Firefox 143 and Thunderbird 143.

HIGH 8.8

2025-09-16

Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140…

MEDIUM 6.5

2025-09-16

Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird…

MEDIUM 5.4

2025-09-16

Mitigation bypass in the Web Compatibility: Tooling component. This vulnerability was fixed in Firefox 143 and Thunderbird 143.

MEDIUM 6.5

2025-09-16

Same-origin policy bypass in the Layout component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.

HIGH 7.3

2025-09-16

Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, …

HIGH 7.1

2025-09-16

Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and …

HIGH 8.8

2025-09-10

Inappropriate implementation in Mojo in Google Chrome on Android, Linux, ChromeOS prior to 140.0.7339.127 allowed a remote attacker to bypass site isolation vi…

HIGH 8.8

2025-09-10

Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed a remote attacker to potentially exploit heap corruption via a craf…

HIGH 8.4

2025-09-09

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-09-09

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-09-09

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code locally.

HIGH 7.1

2025-09-09

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

HIGH 7.8

2025-09-09

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-09-09

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-09-09

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

MEDIUM 5.5

2025-09-09

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

HIGH 7.8

2025-09-09

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-09-09

Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-09-09

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-09-09

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authoriz…

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an authorized attacker to…

Improper input validation in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.

CRITICAL · vendor

Microsoft Copilot

Windows

2025-09-09

Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.

Windows Bluetooth Service Elevation of Privilege Vulnerability

Graphics Kernel Remote Code Execution Vulnerability

Windows SMB Elevation of Privilege Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

Graphics Kernel Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

Windows NTLM Elevation of Privilege Vulnerability

MapUrlToZone Security Feature Bypass Vulnerability

Windows NTFS Remote Code Execution Vulnerability

Windows Defender Firewall Service Elevation of Privilege Vulnerability

Windows UI XAML Maps MapControlSettings Elevation of Privilege Vulnerability

Windows BitLocker Elevation of Privilege Vulnerability

Windows BitLocker Elevation of Privilege Vulnerability

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability