Vulnérabilités

Vulnérabilités des apps suivies

564 CVE touchent une app ou un OS suivi (toutes sévérités, Windows). 302 figurent au catalogue CISA KEV, donc leur exploitation est avérée.

CVE correspondantes: 564
Activement exploitées: 302
Fenêtre de publication: 1999-11-11 → 2026-04-14

Toutes les CVE 18 152 KEV CISA 302 Exploit public 564 Toutes sévérités Critique Élevé Modéré Faible Masquer les N/A

Toutes plateformes iOS Android macOS Windows

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

564 entrées Windows Exploit public Tout effacer

CVE	Sévérité	KEV	Apps	Publié
CVE-2004-0200 N/A +2 2004-09-28 Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execu…	N/A	—	+2	2004-09-28
CVE-2004-0502 N/A 2004-08-18 Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img tag of the original message, which all…	N/A	—		2004-08-18
CVE-2004-0501 N/A 2004-08-18 Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTML e-mail message co…	N/A	—		2004-08-18
CVE-2004-0648 N/A 2004-08-06 Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbitrary programs via a URI referencing the …	N/A	—		2004-08-06
CVE-2004-0526 N/A 2004-08-06 Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values…	N/A	—		2004-08-06
CVE-2004-0204 N/A 2004-08-06 Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .N…	N/A	—		2004-08-06
CVE-2004-0121 N/A 2004-04-15 Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OU…	N/A	—		2004-04-15
CVE-2003-1378 N/A 2003-12-31 Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML …	N/A	—		2003-12-31
CVE-2002-1143 N/A 2003-04-11 Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returne…	N/A	—		2003-04-11
CVE-2001-0538 N/A Office 2001-08-14 Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail …	N/A	—	Office	2001-08-14
CVE-2001-1088 N/A 2001-06-05 Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not …	N/A	—		2001-06-05
CVE-2001-0322 N/A 2001-06-02 MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service (application crash) via a script that…	N/A	—		2001-06-02
CVE-2000-0567 N/A 2000-07-18 Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka th…	N/A	—		2000-07-18
CVE-2000-0329 N/A 1999-11-11 A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Act…	N/A	—		1999-11-11

Gérez votre parc avec Appaloosa

Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.

Découvrir le MDM Appaloosa