Vulnérabilités
Vulnérabilités des apps suivies
564 CVE touchent une app ou un OS suivi (toutes sévérités, Windows). 302 figurent au catalogue CISA KEV, donc leur exploitation est avérée.
- CVE correspondantes
- 564
- Activement exploitées
- 302
- Fenêtre de publication
- 1999-11-11 → 2026-04-14
Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.
| CVE |
|---|
|
CVE-2020-0610
CRITICAL · éditeur
Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability |
|
CVE-2020-0609
CRITICAL · éditeur
Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability |
|
CVE-2020-0601
Windows CryptoAPI Spoofing Vulnerability |
|
CVE-2019-1458
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil… |
|
CVE-2019-1476
HIGH · éditeur
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-5825
MEDIUM 6.5
Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
|
CVE-2019-13720
HIGH 8.8
Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2019-1405
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP… |
|
CVE-2019-1347
HIGH · éditeur
Windows Denial of Service Vulnerability |
|
CVE-2019-1346
HIGH · éditeur
Windows Denial of Service Vulnerability |
|
CVE-2019-1345
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-1344
HIGH · éditeur
Windows Code Integrity Module Information Disclosure Vulnerability |
|
CVE-2019-1343
HIGH · éditeur
Windows Denial of Service Vulnerability |
|
CVE-2019-1322
Microsoft Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1253
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1245
HIGH · éditeur
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1244
HIGH · éditeur
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1215
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1184
HIGH · éditeur
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1170
HIGH · éditeur
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2019-1153
HIGH · éditeur
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2019-1152
CRITICAL · éditeur
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1151
CRITICAL · éditeur
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1150
CRITICAL · éditeur
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1149
CRITICAL · éditeur
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1148
HIGH · éditeur
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2019-1145
CRITICAL · éditeur
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1144
CRITICAL · éditeur
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1125
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-9816
MEDIUM 5.9
A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security ch… |
|
CVE-2019-11708
CRITICAL 10.0
KEV
Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process op… |
|
CVE-2019-11707
HIGH 8.8
KEV
A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware… |
|
CVE-2019-11706
HIGH 7.5
A flaw in Thunderbird's implementation of iCal causes a type confusion in icaltimezone_get_vtimezone_properties when processing certain email messages, resulti… |
|
CVE-2019-11705
CRITICAL 9.8
A flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in icalrecur_add_bydayrules when processing certain email messages, resulting in … |
|
CVE-2019-11704
CRITICAL 9.8
A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in icalmemory_strdup_and_dequote when processing certain email messages, resulting… |
|
CVE-2019-11703
CRITICAL 9.8
A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in parser_get_next_char when processing certain email messages, resulting in a pot… |
|
CVE-2019-1128
HIGH · éditeur
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1127
HIGH · éditeur
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1124
HIGH · éditeur
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1123
HIGH · éditeur
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1122
HIGH · éditeur
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1121
HIGH · éditeur
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1120
HIGH · éditeur
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1119
HIGH · éditeur
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1118
HIGH · éditeur
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1117
HIGH · éditeur
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1089
HIGH · éditeur
Windows RPCSS Elevation of Privilege Vulnerability |
|
CVE-2019-5786
MEDIUM 6.5
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a craft… |
|
CVE-2018-6130
MEDIUM 6.5
Incorrect handling of object lifetimes in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory a… |
|
CVE-2018-6129
MEDIUM 6.5
Out of bounds array access in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory access via a … |
Gérez votre parc avec Appaloosa
Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.