Vulnérabilités

Vulnérabilités des apps suivies

26 893 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 377 figurent au catalogue CISA KEV, donc leur exploitation est avérée.

CVE correspondantes: 26 893
Activement exploitées: 377
Fenêtre de publication: 2004-07-27 → 2026-11-10

Toutes les CVE 26 893 KEV CISA 377 Exploit public 502 Toutes sévérités Critique Élevé Modéré Faible Masquer les N/A

Toutes plateformes iOS Android macOS Windows

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

26 893 entrées Masquer les N/A Tout effacer

CVE	Sévérité	KEV	Apps	Publié
CVE-2026-124908 HIGH 8.8 Mozilla Firefox 2026-11-10 Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.	HIGH 8.8	—	Mozilla Firefox	2026-11-10
CVE-2026-124907 HIGH 8.8 2026-11-10 Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160, Firefox ESR 153…	HIGH 8.8	—		2026-11-10
CVE-2026-124906 HIGH 8.8 2026-11-10 Use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.	HIGH 8.8	—		2026-11-10
CVE-2026-124905 HIGH · éditeur 2026-11-10 Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thund…	HIGH · éditeur	—		2026-11-10
CVE-2026-124904 HIGH 8.8 Mozilla Firefox 2026-11-10 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.	HIGH 8.8	—	Mozilla Firefox	2026-11-10
CVE-2026-124903 CRITICAL 9.6 2026-11-10 Sandbox escape due to use-after-free in the IPC component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160,…	CRITICAL 9.6	—		2026-11-10
CVE-2026-124902 HIGH · éditeur 2026-11-10 Same-origin policy bypass due to race condition in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.…	HIGH · éditeur	—		2026-11-10
CVE-2026-124901 HIGH · éditeur 2026-11-10 Other issue in the Networking: JAR component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderb…	HIGH · éditeur	—		2026-11-10
CVE-2026-124900 CRITICAL 9.6 Mozilla Firefox 2026-11-10 Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.	CRITICAL 9.6	—	Mozilla Firefox	2026-11-10
CVE-2026-124899 HIGH 8.8 2026-11-10 Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, an…	HIGH 8.8	—		2026-11-10
CVE-2026-124898 HIGH 8.8 2026-11-10 Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbi…	HIGH 8.8	—		2026-11-10
CVE-2026-124897 HIGH 8.8 2026-11-10 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.	HIGH 8.8	—		2026-11-10
CVE-2026-124896 HIGH · éditeur 2026-11-10 Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.	HIGH · éditeur	—		2026-11-10
CVE-2026-124895 HIGH 8.8 2026-11-10 Use-after-free in the Storage: localStorage & sessionStorage component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thu…	HIGH 8.8	—		2026-11-10
CVE-2026-124894 HIGH 8.8 2026-11-10 Use-after-free in the Networking: Cookies component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.	HIGH 8.8	—		2026-11-10
CVE-2026-124893 HIGH 8.8 2026-11-10 Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.	HIGH 8.8	—		2026-11-10
CVE-2026-124892 HIGH 8.8 2026-11-10 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.	HIGH 8.8	—		2026-11-10
CVE-2026-124891 HIGH 8.8 2026-11-10 Incorrect boundary conditions in the DOM: Selection component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird…	HIGH 8.8	—		2026-11-10
CVE-2026-124890 HIGH 8.8 2026-11-10 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thun…	HIGH 8.8	—		2026-11-10
CVE-2026-124889 HIGH 8.8 2026-11-10 Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 1…	HIGH 8.8	—		2026-11-10
CVE-2026-124888 HIGH 8.8 2026-11-10 Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thu…	HIGH 8.8	—		2026-11-10
CVE-2026-124887 HIGH 8.8 2026-11-10 Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thu…	HIGH 8.8	—		2026-11-10
CVE-2026-124886 HIGH · éditeur 2026-11-10 Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.	HIGH · éditeur	—		2026-11-10
CVE-2026-124885 HIGH 8.8 2026-11-10 Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunde…	HIGH 8.8	—		2026-11-10
CVE-2026-124884 HIGH 8.8 2026-11-10 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.	HIGH 8.8	—		2026-11-10
CVE-2026-124883 HIGH 8.8 2026-11-10 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.	HIGH 8.8	—		2026-11-10
CVE-2026-124882 HIGH 8.8 2026-11-10 Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 16…	HIGH 8.8	—		2026-11-10
CVE-2026-124881 HIGH 8.8 2026-11-10 Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 16…	HIGH 8.8	—		2026-11-10
CVE-2026-124880 HIGH 8.8 2026-11-10 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thun…	HIGH 8.8	—		2026-11-10
CVE-2026-124879 HIGH · éditeur 2026-11-10 Invalid pointer in the Networking: Cache component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.	HIGH · éditeur	—		2026-11-10
CVE-2026-124878 HIGH 8.8 Mozilla Firefox 2026-11-10 Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.	HIGH 8.8	—	Mozilla Firefox	2026-11-10
CVE-2026-124877 HIGH 8.8 2026-11-10 Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Th…	HIGH 8.8	—		2026-11-10
CVE-2026-124876 HIGH 8.8 2026-11-10 Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 16…	HIGH 8.8	—		2026-11-10
CVE-2026-124875 HIGH 8.8 2026-11-10 Incorrect boundary conditions in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thund…	HIGH 8.8	—		2026-11-10
CVE-2026-124874 HIGH · éditeur 2026-11-10 Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 16…	HIGH · éditeur	—		2026-11-10
CVE-2026-124873 HIGH · éditeur 2026-11-10 Invalid pointer in the DOM: Editor component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.	HIGH · éditeur	—		2026-11-10
CVE-2026-124872 HIGH 8.8 2026-11-10 Use-after-free in the Cycle Collector component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thund…	HIGH 8.8	—		2026-11-10
CVE-2026-124871 HIGH 8.8 Mozilla Firefox 2026-11-10 Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.	HIGH 8.8	—	Mozilla Firefox	2026-11-10
CVE-2026-124870 HIGH 8.8 2026-11-10 Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird…	HIGH 8.8	—		2026-11-10
CVE-2026-124869 HIGH 8.8 2026-11-10 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.	HIGH 8.8	—		2026-11-10
CVE-2026-124868 HIGH 8.8 2026-11-10 Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbi…	HIGH 8.8	—		2026-11-10
CVE-2026-124867 HIGH 8.8 Mozilla Firefox 2026-11-10 Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.	HIGH 8.8	—	Mozilla Firefox	2026-11-10
CVE-2026-124866 HIGH 8.8 2026-11-10 Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.	HIGH 8.8	—		2026-11-10
CVE-2026-124865 HIGH 8.8 2026-11-10 Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbi…	HIGH 8.8	—		2026-11-10
CVE-2026-124864 CRITICAL 9.6 2026-11-10 Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7,…	CRITICAL 9.6	—		2026-11-10
CVE-2026-124863 HIGH 8.8 2026-11-10 Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thun…	HIGH 8.8	—		2026-11-10
CVE-2026-124862 HIGH 8.8 2026-11-10 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.	HIGH 8.8	—		2026-11-10
CVE-2026-124861 CRITICAL 9.6 2026-11-10 Sandbox escape due to use-after-free in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, T…	CRITICAL 9.6	—		2026-11-10
CVE-2026-124860 HIGH 8.8 2026-11-10 Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbi…	HIGH 8.8	—		2026-11-10
CVE-2026-124859 CRITICAL 9.6 2026-11-10 Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firef…	CRITICAL 9.6	—		2026-11-10

Gérez votre parc avec Appaloosa

Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.

Découvrir le MDM Appaloosa