Tracked app vulnerabilities

HIGH 8.8

2026-03-11

Out of bounds memory access in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM…

HIGH 8.8

2026-03-11

Use after free in Extensions in Google Chrome prior to 146.0.7680.71 allowed an attacker who convinced a user to install a malicious extension to potentially e…

HIGH 8.8

2026-03-11

Use after free in WebMCP in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr…

HIGH 8.8

2026-03-11

Use after free in Agents in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr…

CRITICAL 9.6

2026-03-11

Out of bounds read in Web Speech in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML p…

HIGH 8.8

2026-03-11

Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page…

HIGH 8.8

2026-03-11

Integer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch…

HIGH 8.8

2026-03-11

Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.…

curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. Th…

When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second ho…

MEDIUM 5.5

2026-03-10

Cwe is not in rca categories in Microsoft Authenticator allows an unauthorized attacker to disclose information locally.

HIGH · vendor

Microsoft Copilot

2026-03-10

Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally.

HIGH 7.8

2026-03-10

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CRITICAL · vendor

2026-03-10

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

HIGH 8.4

2026-03-10

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2026-03-10

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2026-03-10

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH · vendor

Microsoft Copilot

Windows

2026-03-10

Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

HIGH · vendor

Microsoft Copilot

Windows

2026-03-10

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64

Windows Kernel Elevation of Privilege Vulnerability

Windows SMB Server Elevation of Privilege Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows GDI Remote Code Execution Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows Telephony Service Elevation of Privilege Vulnerability

Winlogon Elevation of Privilege Vulnerability

Windows Accessibility Infrastructure (ATBroker.exe) Information Disclosure Vulnerability

Windows Shell Link Processing Spoofing Vulnerability

GDI+ Information Disclosure Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Windows Extensible File Allocation Table Elevation of Privilege Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Authentication Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Graphics Component Denial of Service Vulnerability

Windows Graphics Component Denial of Service Vulnerability

Microsoft Brokering File System Elevation of Privilege Vulnerability

Performance Counters for Windows Elevation of Privilege Vulnerability

Windows Kerberos Security Feature Bypass Vulnerability

Windows Device Association Service Elevation of Privilege Vulnerability

Windows Device Association Service Elevation of Privilege Vulnerability