Vulnérabilités

Vulnérabilités des apps suivies

24 CVE touchent une app ou un OS suivi (Modéré, Windows). 21 figurent au catalogue CISA KEV, donc leur exploitation est avérée.

CVE correspondantes: 24
Activement exploitées: 21
Fenêtre de publication: 2016-05-11 → 2026-04-14

Toutes les CVE 3 692 KEV CISA 21 Exploit public 24 Toutes sévérités Critique Élevé Modéré Faible Masquer les N/A

Toutes plateformes iOS Android macOS Windows

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

24 entrées Modéré Windows Exploit public Tout effacer

CVE	Sévérité	KEV	Apps	Publié
CVE-2026-33829 MEDIUM 4.3 Windows 2026-04-14 Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.	MEDIUM 4.3	—	Windows	2026-04-14
CVE-2026-32202 MEDIUM 4.3 KEV Windows 2026-04-14 Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.	MEDIUM 4.3	KEV	Windows	2026-04-14
CVE-2025-47171 MEDIUM 6.7 2025-06-10 Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally.	MEDIUM 6.7	—		2025-06-10
CVE-2020-16040 MEDIUM 6.5 2021-01-08 Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…	MEDIUM 6.5	—		2021-01-08
CVE-2020-6519 MEDIUM 6.5 2020-07-22 Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page.	MEDIUM 6.5	—		2020-07-22
CVE-2019-5825 MEDIUM 6.5 2019-11-25 Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa…	MEDIUM 6.5	—		2019-11-25
CVE-2019-9816 MEDIUM 5.9 2019-07-23 A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security ch…	MEDIUM 5.9	—		2019-07-23
CVE-2019-5786 MEDIUM 6.5 2019-06-27 Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a craft…	MEDIUM 6.5	—		2019-06-27
CVE-2018-6130 MEDIUM 6.5 2019-06-27 Incorrect handling of object lifetimes in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory a…	MEDIUM 6.5	—		2019-06-27
CVE-2018-6129 MEDIUM 6.5 2019-06-27 Out of bounds array access in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory access via a …	MEDIUM 6.5	—		2019-06-27
CVE-2019-0948 MEDIUM · éditeur Windows 2019-06-11 Windows Event Viewer Information Disclosure Vulnerability	MEDIUM · éditeur	—	Windows	2019-06-11
CVE-2019-0612 MEDIUM 5.3 Microsoft Edge 2019-04-08 A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects. By itself, this bypass vulnerabil…	MEDIUM 5.3	—	Microsoft Edge	2019-04-08
CVE-2018-0891 MEDIUM 4.3 Microsoft Edge 2018-03-14 ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and I…	MEDIUM 4.3	—	Microsoft Edge	2018-03-14
CVE-2017-5124 MEDIUM 6.1 2018-02-07 Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a …	MEDIUM 6.1	—		2018-02-07
CVE-2018-0780 MEDIUM 5.3 Microsoft Edge 2018-01-04 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the…	MEDIUM 5.3	—	Microsoft Edge	2018-01-04
CVE-2018-0767 MEDIUM 5.3 Microsoft Edge 2018-01-04 Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user'…	MEDIUM 5.3	—	Microsoft Edge	2018-01-04
CVE-2017-8652 MEDIUM 6.5 Microsoft Edge 2017-08-08 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose information due to the way that Microsoft…	MEDIUM 6.5	—	Microsoft Edge	2017-08-08
CVE-2017-8644 MEDIUM 4.3 Microsoft Edge 2017-08-08 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose information due to the way that Microsoft…	MEDIUM 4.3	—	Microsoft Edge	2017-08-08
CVE-2017-2480 MEDIUM 6.5 2017-04-02 An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTune…	MEDIUM 6.5	—		2017-04-02
CVE-2016-3388 MEDIUM 5.3 Microsoft Edge 2016-10-14 Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privilege…	MEDIUM 5.3	—	Microsoft Edge	2016-10-14
CVE-2016-0772 MEDIUM 6.5 2016-09-02 The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might a…	MEDIUM 6.5	—		2016-09-02
CVE-2016-3216 MEDIUM 4.3 Windows 2016-06-16 GDI32.dll in the Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold an…	MEDIUM 4.3	—	Windows	2016-06-16
CVE-2016-0169 MEDIUM 6.5 Windows 2016-05-11 GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Window…	MEDIUM 6.5	—	Windows	2016-05-11
CVE-2016-0168 MEDIUM 6.5 Windows 2016-05-11 GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Window…	MEDIUM 6.5	—	Windows	2016-05-11

Gérez votre parc avec Appaloosa

Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.

Découvrir le MDM Appaloosa