Vulnérabilités
Vulnérabilités des apps suivies
500 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 373 figurent au catalogue CISA KEV, donc leur exploitation est avérée.
- CVE correspondantes
- 500
- Activement exploitées
- 373
- Fenêtre de publication
- 2008-01-16 → 2026-05-04
Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.
| CVE |
|---|
|
CVE-2019-11703
CRITICAL 9.8
A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in parser_get_next_char when processing certain email messages, resulting in a pot… |
|
CVE-2019-1128
HIGH · éditeur
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1127
HIGH · éditeur
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1124
HIGH · éditeur
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1123
HIGH · éditeur
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1122
HIGH · éditeur
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1121
HIGH · éditeur
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1120
HIGH · éditeur
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1119
HIGH · éditeur
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1118
HIGH · éditeur
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1117
HIGH · éditeur
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1089
HIGH · éditeur
Windows RPCSS Elevation of Privilege Vulnerability |
|
CVE-2019-2107
CRITICAL · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2019-5786
MEDIUM 6.5
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a craft… |
|
CVE-2018-6130
MEDIUM 6.5
Incorrect handling of object lifetimes in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory a… |
|
CVE-2018-6129
MEDIUM 6.5
Out of bounds array access in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory access via a … |
|
CVE-2019-1019
HIGH · éditeur
Microsoft Windows Security Feature Bypass Vulnerability |
|
CVE-2019-0959
HIGH · éditeur
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2019-0948
MEDIUM · éditeur
Windows Event Viewer Information Disclosure Vulnerability |
|
CVE-2019-0943
HIGH · éditeur
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2019-10038
HIGH 7.8
Evernote 7.9 on macOS allows attackers to execute arbitrary programs by embedding a reference to a local executable file such as the /Applications/Calculator.a… |
|
CVE-2019-5796
HIGH 7.5
Data race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
|
CVE-2019-5789
HIGH 8.8
An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised t… |
|
CVE-2019-5788
HIGH 8.8
An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromis… |
|
CVE-2019-0881
HIGH · éditeur
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2019-0863
Windows Error Reporting Elevation of Privilege Vulnerability |
|
CVE-2019-9813
HIGH 8.8
Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write. This vulne… |
|
CVE-2019-9810
HIGH 8.8
Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerabili… |
|
CVE-2019-9792
CRITICAL 9.8
The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during a bailout. This magic value can then b… |
|
CVE-2019-9791
CRITICAL 9.8
The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just… |
|
CVE-2019-0841
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0836
HIGH · éditeur
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0805
HIGH · éditeur
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0803
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-0796
HIGH · éditeur
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0735
HIGH · éditeur
Windows CSRSS Elevation of Privilege Vulnerability |
|
CVE-2019-0732
HIGH · éditeur
Windows Security Feature Bypass Vulnerability |
|
CVE-2019-0731
HIGH · éditeur
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0730
HIGH · éditeur
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0612
MEDIUM 5.3
A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects. By itself, this bypass vulnerabil… |
|
CVE-2019-2025
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2019-2023
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2018-20250
In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When… |
|
CVE-2019-2000
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2019-1999
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2018-6126
HIGH 8.8
A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. |
|
CVE-2018-6084
HIGH 7.8
Insufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0.3359.117 allowed a local attacker to execute arbitrary code via… |
|
CVE-2018-16083
HIGH 8.8
An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds m… |
|
CVE-2018-16071
HIGH 8.8
A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. |
|
CVE-2016-9651
HIGH 8.8
A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary co… |
Gérez votre parc avec Appaloosa
Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.