Vulnérabilités
Vulnérabilités des apps suivies
404 CVE touchent une app ou un OS suivi (Élevé, toutes plateformes). 294 figurent au catalogue CISA KEV, donc leur exploitation est avérée.
- CVE correspondantes
- 404
- Activement exploitées
- 294
- Fenêtre de publication
- 2009-10-13 → 2026-05-04
Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.
| CVE |
|---|
|
CVE-2019-0735
HIGH · éditeur
Windows CSRSS Elevation of Privilege Vulnerability |
|
CVE-2019-0732
HIGH · éditeur
Windows Security Feature Bypass Vulnerability |
|
CVE-2019-0731
HIGH · éditeur
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0730
HIGH · éditeur
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-2025
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2019-2023
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2018-20250
In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When… |
|
CVE-2019-2000
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2019-1999
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2018-6126
HIGH 8.8
A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. |
|
CVE-2018-6084
HIGH 7.8
Insufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0.3359.117 allowed a local attacker to execute arbitrary code via… |
|
CVE-2018-16083
HIGH 8.8
An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds m… |
|
CVE-2018-16071
HIGH 8.8
A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. |
|
CVE-2016-9651
HIGH 8.8
A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary co… |
|
CVE-2019-0568
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2019-0567
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2019-0566
HIGH 8.8
An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevation of Privilege Vulnerability." This aff… |
|
CVE-2019-0539
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2019-0574
HIGH · éditeur
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2019-0573
HIGH · éditeur
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2019-0572
HIGH · éditeur
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2019-0571
HIGH · éditeur
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2019-0570
HIGH · éditeur
Windows Runtime Elevation of Privilege Vulnerability |
|
CVE-2019-0555
HIGH · éditeur
Microsoft XmlDocument Elevation of Privilege Vulnerability |
|
CVE-2019-0552
HIGH · éditeur
Windows COM Elevation of Privilege Vulnerability |
|
CVE-2019-0543
Microsoft Windows Elevation of Privilege Vulnerability |
|
CVE-2018-17182
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2018-13405
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2018-8617
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-6092
HIGH 8.8
An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandb… |
|
CVE-2018-6065
HIGH 8.8
Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a r… |
|
CVE-2018-6064
HIGH 8.8
Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap co… |
|
CVE-2018-17463
HIGH 8.8
Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafte… |
|
CVE-2018-8584
HIGH · éditeur
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2018-8550
HIGH · éditeur
Windows COM Elevation of Privilege Vulnerability |
|
CVE-2018-8453
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privil… |
|
CVE-2018-8413
HIGH · éditeur
Windows Theme API Remote Code Execution Vulnerability |
|
CVE-2018-8411
HIGH · éditeur
NTFS Elevation of Privilege Vulnerability |
|
CVE-2018-9515
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2018-8469
HIGH 7.4
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr… |
|
CVE-2018-8467
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8466
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8463
HIGH 7.4
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr… |
|
CVE-2018-8468
HIGH · éditeur
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-8449
HIGH · éditeur
Device Guard Security Feature Bypass Vulnerability |
|
CVE-2018-8410
HIGH · éditeur
Windows Registry Elevation of Privilege Vulnerability |
|
CVE-2018-8355
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr… |
|
CVE-2018-0952
HIGH · éditeur
Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability |
|
CVE-2018-9445
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2018-8291
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr… |
Gérez votre parc avec Appaloosa
Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.