Vulnérabilités
Vulnérabilités des apps suivies
2 719 CVE touchent une app ou un OS suivi (Critique, toutes plateformes). 48 figurent au catalogue CISA KEV, donc leur exploitation est avérée.
- CVE correspondantes
- 2 719
- Activement exploitées
- 48
- Fenêtre de publication
- 2007-08-28 → 2026-11-10
Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.
| CVE |
|---|
|
CVE-2026-96157
CRITICAL 9.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96078
CRITICAL 9.8
Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96067
CRITICAL 9.8
Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-95901
CRITICAL 9.8
Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-95882
CRITICAL 9.8
Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88243
CRITICAL 9.8
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88234
CRITICAL 9.8
Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88218
CRITICAL 9.8
Double free in Windows DNS allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85844
CRITICAL 9.8
Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-119958
CRITICAL 9.8
Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-116928
CRITICAL 9.8
Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-112967
CRITICAL 9.8
Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-125347
Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging social engineering to execute arbitrary code… |
|
CVE-2026-124917
Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunder… |
|
CVE-2026-124903
Sandbox escape due to use-after-free in the IPC component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160,… |
|
CVE-2026-124900
CRITICAL 9.6
Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. |
|
CVE-2026-124864
Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7,… |
|
CVE-2026-124861
Sandbox escape due to use-after-free in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, T… |
|
CVE-2026-124859
Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firef… |
|
CVE-2026-124853
Sandbox escape due to incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox E… |
|
CVE-2026-125136
CRITICAL · éditeur
Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerability |
|
CVE-2026-125134
CRITICAL · éditeur
Windows Function Discovery Resource Publication Remote Code Execution Vulnerability |
|
CVE-2026-119969
CRITICAL · éditeur
Graphic Fonts Remote Code Execution Vulnerability |
|
CVE-2026-119967
CRITICAL · éditeur
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability |
|
CVE-2026-119966
CRITICAL · éditeur
Windows Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-119964
CRITICAL · éditeur
Windows Message Queuing Remote Code Execution Vulnerability |
|
CVE-2026-119963
CRITICAL · éditeur
Windows Message Queuing Remote Code Execution Vulnerability |
|
CVE-2026-119962
CRITICAL · éditeur
Windows CredSSP Remote Code Execution Vulnerability |
|
CVE-2026-119961
CRITICAL · éditeur
Windows Internet Information Services Remote Code Execution Vulnerability |
|
CVE-2026-119960
CRITICAL · éditeur
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-119957
CRITICAL · éditeur
Windows Remote Desktop Services Elevation of Privilege Vulnerability |
|
CVE-2026-119952
CRITICAL · éditeur
Windows Schannel Remote Code Execution Vulnerability |
|
CVE-2026-119951
CRITICAL · éditeur
Windows Deployment Services Remote Code Execution Vulnerability |
|
CVE-2026-119947
CRITICAL · éditeur
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-119382
CRITICAL · éditeur
Windows TPM Elevation of Privilege Vulnerability |
|
CVE-2026-118737
CRITICAL · éditeur
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2026-118148
CRITICAL · éditeur
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2026-118146
CRITICAL · éditeur
Windows Active Directory Domain Services Remote Code Execution Vulnerability |
|
CVE-2026-118145
CRITICAL · éditeur
Windows Function Discovery SSDP Provider Remote Code Execution Vulnerability |
|
CVE-2026-116710
CRITICAL · éditeur
Windows Message Queuing Remote Code Execution Vulnerability |
|
CVE-2026-113865
CRITICAL · éditeur
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-113864
CRITICAL · éditeur
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-113862
CRITICAL · éditeur
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability |
|
CVE-2026-113861
CRITICAL · éditeur
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-113860
CRITICAL · éditeur
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-113859
CRITICAL · éditeur
Windows TCP/IP Remote Code Execution Vulnerability |
|
CVE-2026-113856
CRITICAL · éditeur
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-113825
CRITICAL · éditeur
Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability |
|
CVE-2026-113753
CRITICAL · éditeur
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-113752
CRITICAL · éditeur
Windows Print Spooler Components Remote Code Execution Vulnerability |
Gérez votre parc avec Appaloosa
Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.