Vulnerabilities in The Update Framework software