Tracked app vulnerabilities

MEDIUM 6.5

2018-06-14

An elevation of privilege vulnerability exists when Microsoft Outlook does not validate attachment headers properly, aka "Microsoft Outlook Elevation of Privil…

HIGH 7.5

Microsoft Edge

2018-06-14

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T…

MEDIUM 4.3

Microsoft Edge

2018-06-14

A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka "Microsoft Edge Security Feature Bypas…

MEDIUM 4.3

Microsoft Edge

2018-06-14

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerabili…

HIGH 7.5

Microsoft Edge

2018-06-14

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…

HIGH 7.5

Microsoft Edge

2018-06-14

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…

HIGH 7.5

Microsoft Edge

2018-06-14

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T…

HIGH 7.5

Microsoft Edge

2018-06-14

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T…

MEDIUM 4.3

Microsoft Edge

2018-06-14

An information disclosure vulnerability exists when Edge improperly marks files, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Micros…

MEDIUM 6.4

Dropbox

2018-06-13

An issue was discovered in the com.getdropbox.Dropbox app 100.2 for iOS. The LAContext class for Biometric (TouchID) validation allows authentication bypass by…

Media Foundation Memory Corruption Vulnerability

Windows GDI Information Disclosure Vulnerability

Win32k Elevation of Privilege Vulnerability

HTTP Protocol Stack Remote Code Execution Vulnerability

HTTP.sys Denial of Service Vulnerability

Windows DNSAPI Remote Code Execution Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

Hypervisor Code Integrity Elevation of Privilege Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

Windows Desktop Bridge Elevation of Privilege Vulnerability

Windows Remote Code Execution Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

Windows Remote Code Execution Vulnerability

Windows Wireless Network Profile Information Disclosure Vulnerability

Windows Desktop Bridge Elevation of Privilege Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Denial of Service Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

WEBDAV Denial of Service Vulnerability

HIDParser Elevation of Privilege Vulnerability

Cortana Elevation of Privilege Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Code Integrity Module Denial of Service Vulnerability

NTFS Elevation of Privilege Vulnerability

Windows Elevation of Privilege Vulnerability

MEDIUM 6.5

Mozilla Thunderbird

2018-06-11

Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.

HIGH 7.5

Mozilla Thunderbird

2018-06-11

Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.

CRITICAL 9.8

2018-06-11

Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes du…

HIGH 8.1

2018-06-11

A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the us…

HIGH 7.5

2018-06-11

In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated with downloaded files and will not show any …

MEDIUM 4.3

Mozilla Thunderbird

2018-06-11

It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a user opening a remote attachment which is …

MEDIUM 5.3

2018-06-11

Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element. This could allow a m…

HIGH 7.5

Mozilla Thunderbird

2018-06-11

Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird …

MEDIUM 4.3

Mozilla Thunderbird

2018-06-11

Crafted message headers can cause a Thunderbird process to hang on receiving the message. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 5…

CRITICAL 9.8

2018-06-11

An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds wr…

CRITICAL 9.8

2018-06-11

A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in a potentially exploitable crash. This vu…