Vulnérabilités
Vulnérabilités des apps suivies
564 CVE touchent une app ou un OS suivi (toutes sévérités, Windows). 302 figurent au catalogue CISA KEV, donc leur exploitation est avérée.
- CVE correspondantes
- 564
- Activement exploitées
- 302
- Fenêtre de publication
- 1999-11-11 → 2026-04-14
Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.
| CVE |
|---|
|
CVE-2018-8413
HIGH · éditeur
Windows Theme API Remote Code Execution Vulnerability |
|
CVE-2018-8411
HIGH · éditeur
NTFS Elevation of Privilege Vulnerability |
|
CVE-2018-8469
HIGH 7.4
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr… |
|
CVE-2018-8467
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8466
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8463
HIGH 7.4
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr… |
|
CVE-2018-8468
HIGH · éditeur
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-8449
HIGH · éditeur
Device Guard Security Feature Bypass Vulnerability |
|
CVE-2018-8410
HIGH · éditeur
Windows Registry Elevation of Privilege Vulnerability |
|
CVE-2018-8355
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr… |
|
CVE-2018-0952
HIGH · éditeur
Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability |
|
CVE-2018-8291
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr… |
|
CVE-2018-8288
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr… |
|
CVE-2018-8279
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T… |
|
CVE-2018-8229
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8214
HIGH · éditeur
Windows Desktop Bridge Elevation of Privilege Vulnerability |
|
CVE-2018-8208
HIGH · éditeur
Windows Desktop Bridge Elevation of Privilege Vulnerability |
|
CVE-2018-0982
HIGH · éditeur
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-5159
CRITICAL 9.8
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds wr… |
|
CVE-2017-5465
CRITICAL 9.1
An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied i… |
|
CVE-2017-5447
CRITICAL 9.1
An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to … |
|
CVE-2017-5404
CRITICAL 9.8
A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results i… |
|
CVE-2017-5375
CRITICAL 9.8
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird <… |
|
CVE-2016-9899
CRITICAL 9.8
Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox < 5… |
|
CVE-2016-9079
HIGH 7.5
KEV
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox a… |
|
CVE-2018-8174
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution … |
|
CVE-2018-8145
HIGH 7.5
An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to… |
|
CVE-2018-8139
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-8133
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-0953
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-0946
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-8897
HIGH · éditeur
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-8134
HIGH · éditeur
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-0824
Microsoft COM for Windows Remote Code Execution Vulnerability |
|
CVE-2018-0980
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-0975
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0974
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0973
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0972
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0971
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0970
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0969
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0968
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0966
HIGH · éditeur
Device Guard Security Feature Bypass Vulnerability |
|
CVE-2018-0934
HIGH 7.5
ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine … |
|
CVE-2018-0933
HIGH 7.5
ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine … |
|
CVE-2018-0891
MEDIUM 4.3
ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and I… |
|
CVE-2018-0901
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0897
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0895
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
Gérez votre parc avec Appaloosa
Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.