Tracked app vulnerabilities

MEDIUM 4.3

2026-11-11

Information leak in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium secur…

MEDIUM 4.3

2026-11-11

Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium…

MEDIUM 5.9

2026-11-11

Race condition in Extensions in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to obtain sen…

MEDIUM 4.3

2026-11-11

Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium…

MEDIUM 4.3

2026-11-11

Use after free in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium sec…

MEDIUM 4.7

2026-11-11

Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chrom…

MEDIUM 4.3

2026-11-11

Information leak in Core in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium securit…

MEDIUM 4.7

2026-11-11

Out of bounds read in Skia in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML pa…

MEDIUM 4.7

2026-11-11

Uninitialized resource in ANGLE in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (…

MEDIUM 4.7

2026-11-11

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafte…

MEDIUM 4.3

2026-11-11

Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium sec…

MEDIUM 4.3

2026-11-11

Incomplete cleanup in Cache in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium se…

MEDIUM 6.8

2026-11-11

Missing authorization in ImageCapture in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to bypass web …

MEDIUM 4.3

2026-11-11

Incorrect authorization in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chrom…

MEDIUM 5.3

2026-11-11

Incorrect authorization in SiteIsolation in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer proce…

Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Use after free in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Out-of-bounds read in Secondary Logon allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Use after free in Windows DNS allows an unauthorized attacker to deny service over an adjacent network.

Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

Out-of-bounds write in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.

Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

Use after free in DNS Server allows an authorized attacker to elevate privileges locally.

Use of uninitialized resource in Windows Broker Infrastructure Service allows an authorized attacker to disclose information locally.

MEDIUM 5.6

Windows

2026-11-10

Use of uninitialized resource in Microsoft Windows Codecs Library allows an authorized attacker to disclose information locally.

MEDIUM 4.7

Windows

2026-11-10

Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows Graphics Kernel allows an authorized attacker to disclose information loc…

Improper access control in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information locally.

Use after free in Windows OLE allows an authorized attacker to disclose information locally.

Files or directories accessible to external parties in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information l…

Out-of-bounds read in Windows Internet (wininet.dll) allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows WLAN Service allows an unauthorized attacker to deny service over an adjacent network.

Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.

Use after free in HID class driver allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information with a physical attack.

Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to disclose information locally.