Tracked app vulnerabilities

HIGH 8.8

2020-09-21

Use after free in WebXR in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-09-21

Use after free in IndexedDB in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-09-21

Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-09-21

Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.125 allowed a remote attacker who had compromised the renderer process to potentially exploit …

HIGH 7.8

2020-09-21

Inappropriate implementation in installer in Google Chrome prior to 84.0.4147.125 allowed a local attacker to potentially elevate privilege via a crafted files…

HIGH 8.8

2020-09-21

Use after free in audio in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-09-21

Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-09-21

Use after free in task scheduling in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…

HIGH 8.8

2020-09-21

Use after free in ANGLE in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-09-21

Use after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-09-21

Buffer overflow in Skia in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-09-21

Use after free in CSS in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-09-21

Type confusion in V8 in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

HIGH 8.8

2020-09-21

Use after free in SCTP in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-09-21

Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML pa…

HIGH 8.8

2020-09-21

Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HT…

HIGH 8.8

2020-09-21

Insufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access v…

HIGH 8.8

2020-09-21

Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a craf…

HIGH 7.8

2020-09-11

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who succe…

HIGH 7.8

2020-09-11

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who succe…

HIGH 7.8

2020-09-11

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who succe…

HIGH 7.8

2020-09-11

<p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exp…

HIGH 7.1

Microsoft OneDrive

2020-09-11

<p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successf…

HIGH 7.1

Microsoft OneDrive

2020-09-11

<p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successf…

HIGH 7.1

Microsoft OneDrive

2020-09-11

<p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successf…

Projected Filesystem Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows UPnP Service Elevation of Privilege Vulnerability

TLS Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Storage Services Elevation of Privilege Vulnerability

Windows InstallService Elevation of Privilege Vulnerability

Microsoft COM for Windows Elevation of Privilege Vulnerability

Windows Function Discovery Service Elevation of Privilege Vulnerability

Windows CloudExperienceHost Elevation of Privilege Vulnerability

Windows Elevation of Privilege Vulnerability

DirectX Elevation of Privilege Vulnerability

Windows Runtime Elevation of Privilege Vulnerability

Windows GDI Information Disclosure Vulnerability

Win32k Information Disclosure Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows DNS Denial of Service Vulnerability

Windows Runtime Elevation of Privilege Vulnerability

Windows Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Microsoft Store Runtime Elevation of Privilege Vulnerability

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability