Known Vulnerabilities for Windows App by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Windows App" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-103473 json | Deno versions 2.7.0 through 2.9.7 on Windows contain a command injection vulnerability in node:child_process where shell argu... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-102991 json | Mako is a template library written in Python. Prior to 1.4.2, on Windows, TemplateLookup.get_template() in mako/lookup.py res... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-102937 json | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, BatchActivator.quote() returns prom... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-102820 json | pageant provides a [PageantStream] type that implements [AsyncRead] and [AsyncWrite] traits and can be used to talk to a runn... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-102674 json | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-102598 json | Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safe_join function used by send_from_directory ... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-102317 json | Improper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed a local attacker to poten... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-102315 json | Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compr... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-102313 json | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memor... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-101884 json | OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to block... | Not Provided | 2026-09-30 | 2026-09-30 |