Tracked app vulnerabilities

Microsoft Graphics Component Information Disclosure Vulnerability

Windows Update Stack Elevation of Privilege Vulnerability

Windows Elevation of Privilege Vulnerability

Microsoft Graphics Component Information Disclosure Vulnerability

Windows Token Security Feature Bypass Vulnerability

GDI+ Remote Code Execution Vulnerability

Win32k Information Disclosure Vulnerability

Jet Database Engine Remote Code Execution Vulnerability

Jet Database Engine Remote Code Execution Vulnerability

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows Kernel Information Disclosure in CPU Memory Access

Jet Database Engine Remote Code Execution Vulnerability

Windows GDI Information Disclosure Vulnerability

Media Foundation Information Disclosure Vulnerability

Media Foundation Information Disclosure Vulnerability

Media Foundation Information Disclosure Vulnerability

Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability

Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability

Windows Push Notification Service Elevation of Privilege Vulnerability

Media Foundation Information Disclosure Vulnerability

Media Foundation Information Disclosure Vulnerability

Windows Scheduled Task Elevation of Privilege Vulnerability

Windows Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Jet Database Engine Remote Code Execution Vulnerability

DirectX Elevation of Privilege Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Denial of Service Vulnerability

DirectX Elevation of Privilege Vulnerability

Win32k Information Disclosure Vulnerability

HIGH 8.8

2020-04-13

Out of bounds read in WebSQL in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-04-13

Use after free in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to potentially ex…

HIGH 8.8

2020-04-13

Heap buffer overflow in media in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-04-13

Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-04-13

Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-04-13

Use after free in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-04-13

Inappropriate implementation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to …

HIGH 8.8

2020-04-13

Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to …

HIGH 8.8

2020-04-13

Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page.

HIGH 8.8

2020-04-13

Use after free in window management in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …

HIGH 8.8

2020-04-13

Use after free in devtools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-04-13

Type Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-04-13

Use after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2020-03-25

The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user use…

HIGH 8.8

2020-03-25

When a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code> task may have been executed after the stream was destroyed, …

HIGH 8.8

2020-03-25

By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end of an array resized during script execution. This could h…

HIGH 8.8

2020-03-25

When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable cra…