Vulnérabilités
Vulnérabilités des apps suivies
26 893 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 376 figurent au catalogue CISA KEV, donc leur exploitation est avérée.
- CVE correspondantes
- 26 893
- Activement exploitées
- 376
- Fenêtre de publication
- 2004-07-27 → 2026-11-10
Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.
| CVE |
|---|
|
CVE-2026-125350
HIGH 8.8
Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
|
CVE-2026-125349
LOW 3.4
Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.50 allowed a remote attacker who had compromised the renderer process to read … |
|
CVE-2026-125348
HIGH 8.8
Out of bounds write in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a cr… |
|
CVE-2026-125347
CRITICAL 9.6
Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging social engineering to execute arbitrary code… |
|
CVE-2026-125346
HIGH 8.8
Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
|
CVE-2026-125345
MEDIUM 4.7
Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (… |
|
CVE-2026-125344
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
|
CVE-2026-125343
HIGH 8.3
Buffer overflow in Compositing in Google Chrome prior to 157.0.8103.50 allowed a remote attacker who had compromised the renderer process to execute arbitrary … |
|
CVE-2026-125342
MEDIUM 4.7
Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Ch… |
|
CVE-2026-124952
HIGH 8.8
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox ESR 115.45. |
|
CVE-2026-124951
HIGH · éditeur
Privilege escalation in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 1… |
|
CVE-2026-124950
HIGH · éditeur
Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. |
|
CVE-2026-124949
HIGH · éditeur
Other issue in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. |
|
CVE-2026-124948
HIGH 8.8
Incorrect boundary conditions, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and T… |
|
CVE-2026-124947
HIGH 8.8
Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. |
|
CVE-2026-124946
HIGH · éditeur
Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. |
|
CVE-2026-124945
HIGH · éditeur
Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. |
|
CVE-2026-124944
MEDIUM 4.3
Information disclosure in the Marionette component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. |
|
CVE-2026-124943
HIGH 8.8
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. |
|
CVE-2026-124942
HIGH · éditeur
Invalid pointer in the DOM: Streams component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7. |
|
CVE-2026-124941
MEDIUM 4.3
Information disclosure in the Security: RLBox component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7. |
|
CVE-2026-124940
HIGH · éditeur
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7. |
|
CVE-2026-124939
HIGH · éditeur
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 15… |
|
CVE-2026-124938
HIGH · éditeur
Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7. |
|
CVE-2026-124936
HIGH · éditeur
Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. |
|
CVE-2026-124935
HIGH · éditeur
Undefined behavior in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7. |
|
CVE-2026-124934
HIGH · éditeur
Spoofing issue in the Security component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7. |
|
CVE-2026-124933
HIGH · éditeur
Sandbox escape in the Console component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7. |
|
CVE-2026-124932
HIGH 8.8
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7. |
|
CVE-2026-124931
HIGH · éditeur
Same-origin policy bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 1… |
|
CVE-2026-124930
MEDIUM 4.3
Information disclosure in the Address Bar component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7. |
|
CVE-2026-124929
MEDIUM 4.3
Information disclosure in the Layout: Form Controls component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird… |
|
CVE-2026-124928
HIGH · éditeur
Mitigation bypass in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. |
|
CVE-2026-124927
HIGH · éditeur
Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153… |
|
CVE-2026-124926
HIGH 8.8
Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7. |
|
CVE-2026-124925
MEDIUM 4.3
Information disclosure in the Layout component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. |
|
CVE-2026-124924
HIGH 8.8
Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunde… |
|
CVE-2026-124923
HIGH · éditeur
Sandbox escape in the Agent component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. |
|
CVE-2026-124922
HIGH 8.8
Use-after-free in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbir… |
|
CVE-2026-124921
HIGH · éditeur
Sandbox escape in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. |
|
CVE-2026-124920
HIGH · éditeur
Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. |
|
CVE-2026-124919
HIGH 8.8
Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160… |
|
CVE-2026-124918
HIGH 8.8
Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7,… |
|
CVE-2026-124917
CRITICAL 9.6
Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunder… |
|
CVE-2026-124915
HIGH 8.8
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbi… |
|
CVE-2026-124914
HIGH · éditeur
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7. |
|
CVE-2026-124913
HIGH · éditeur
Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7. |
|
CVE-2026-124912
HIGH · éditeur
Spoofing issue in the DOM: Security component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7. |
|
CVE-2026-124910
HIGH · éditeur
Mitigation bypass in the WebExtensions component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7. |
|
CVE-2026-124909
MEDIUM 4.3
Information disclosure in the Private Browsing component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.… |
Gérez votre parc avec Appaloosa
Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.