Tracked app vulnerabilities

MEDIUM 5.5

2021-05-11

Microsoft Office Information Disclosure Vulnerability

HIGH 7.8

2021-05-11

Microsoft Office Remote Code Execution Vulnerability

HIGH 7.8

2021-05-11

Microsoft Office Remote Code Execution Vulnerability

MEDIUM 5.5

2021-05-11

Microsoft Excel Information Disclosure Vulnerability

Windows Container Manager Service Elevation of Privilege Vulnerability

Windows SMB Client Security Feature Bypass Vulnerability

OLE Automation Remote Code Execution Vulnerability

Windows SSDP Service Elevation of Privilege Vulnerability

Windows Media Foundation Core Remote Code Execution Vulnerability

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Windows WalletService Elevation of Privilege Vulnerability

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Windows Desktop Bridge Denial of Service Vulnerability

Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability

Microsoft Bluetooth Driver Spoofing Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Container Manager Service Elevation of Privilege Vulnerability

Windows Container Manager Service Elevation of Privilege Vulnerability

Windows Container Manager Service Elevation of Privilege Vulnerability

Windows Container Manager Service Elevation of Privilege Vulnerability

Windows CSC Service Information Disclosure Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability

Windows Wireless Networking Spoofing Vulnerability

Windows Wireless Networking Information Disclosure Vulnerability

CRITICAL 9.8

2021-05-06

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) allows attack…

HIGH 8.8

2021-04-30

Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted …

HIGH 8.8

2021-04-30

Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2021-04-30

Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…

HIGH 8.8

2021-04-30

Type confusion in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

MEDIUM 6.5

2021-04-30

Incorrect security UI in downloads in Google Chrome on Android prior to 90.0.4430.93 allowed a remote attacker to perform domain spoofing via a crafted HTML pa…

MEDIUM 4.3

2021-04-30

Insufficient policy enforcement in extensions in Google Chrome prior to 90.0.4430.93 allowed an attacker who convinced a user to install a malicious extension …

HIGH 8.8

2021-04-30

Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…

CRITICAL 9.6

2021-04-26

Use after free in navigation in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a…

HIGH 8.8

2021-04-26

Out of bounds memory access in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa…

CRITICAL 9.6

2021-04-26

Integer overflow in Mojo in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a san…

MEDIUM 6.5

2021-04-26

Heap buffer overflow in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to bypass site isolation v…

MEDIUM 6.5

2021-04-26

Insufficient validation of untrusted input in Mojo in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to…

MEDIUM 5.5

2021-04-26

Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory v…

MEDIUM 5.5

2021-04-26

Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory v…

MEDIUM 5.5

2021-04-26

Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory v…

MEDIUM 6.5

2021-04-26

Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page.

MEDIUM 6.5

2021-04-26

Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page.

HIGH 8.8

2021-04-26

Use after free in Network API in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Exte…

HIGH 8.8

2021-04-26

Use after free in WebMIDI in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.