Aller au contenu
Appaloosa Scout
Sélection de la langue
fr en

Vulnérabilités

Vulnérabilités des apps suivies

7 783 entrées

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

CVE
CVE-2023-35628
CRITICAL 8.1

Windows MSHTML Platform Remote Code Execution Vulnerability

CVE-2023-35622
HIGH 7.5

Windows DNS Spoofing Vulnerability

CVE-2023-21740
HIGH 7.8

Windows Media Remote Code Execution Vulnerability

CVE-2023-20588
HIGH

AMD: CVE-2023-20588 AMD Speculative Leaks Security Notice

CVE-2023-6507
MEDIUM 6.1 Réseau adjacent 1 apps

An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. …

CVE-2023-6212
HIGH 8.8 Réseau 1 apps

Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory corruption and we presume tha…

CVE-2023-6209
MEDIUM 6.5 Réseau 1 apps

Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host. T…

CVE-2023-6208
HIGH 8.8 Réseau 1 apps

When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboa…

CVE-2023-6207
HIGH 8.8 Réseau 1 apps

Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

CVE-2023-6206
MEDIUM 5.4 Réseau 1 apps

The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. It was possible to use this fact t…

CVE-2023-6205
MEDIUM 6.5 Réseau 1 apps

It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability…

CVE-2023-6204
MEDIUM 6.5 Réseau 1 apps

On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the images created on t…

CVE-2023-43588
LOW 3.5 Réseau 2 apps

Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access.

CVE-2023-43582
MEDIUM 5.5 Réseau 4 apps

Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.

CVE-2023-39206
LOW 3.7 Réseau 4 apps

Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.

CVE-2023-39205
MEDIUM 4.3 Réseau 4 apps

Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of service via network access.

CVE-2023-39204
MEDIUM 4.3 Réseau 4 apps

Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.

CVE-2023-39203
MEDIUM 4.3 Réseau 1 apps

Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an unauthenticated user to conduct a disc…

CVE-2023-39199
MEDIUM 4.9 Réseau 4 apps

Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network access.

CVE-2023-36719
HIGH 7.8

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

CVE-2023-36705
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2023-36428
HIGH 5.5

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

CVE-2023-36427
HIGH 7.0

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2023-36425
HIGH 8.0

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

CVE-2023-36424
HIGH 7.8 KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2023-36423
HIGH 8.8

Microsoft Remote Registry Service Remote Code Execution Vulnerability

CVE-2023-36408
HIGH 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2023-36407
HIGH 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2023-36406
HIGH 5.5

Windows Hyper-V Information Disclosure Vulnerability

CVE-2023-36405
HIGH 7.0

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-36404
HIGH 5.5

Windows Kernel Information Disclosure Vulnerability

CVE-2023-36403
HIGH 7.0

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-36402
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2023-36401
HIGH 7.2

Microsoft Remote Registry Service Remote Code Execution Vulnerability

CVE-2023-36400
CRITICAL 8.8

Windows HMAC Key Derivation Elevation of Privilege Vulnerability

CVE-2023-36399
HIGH 7.1

Windows Storage Elevation of Privilege Vulnerability

CVE-2023-36398
HIGH 6.5

Windows NTFS Information Disclosure Vulnerability

CVE-2023-36397
CRITICAL 9.8

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVE-2023-36396
HIGH 7.8

Windows Compressed Folder Remote Code Execution Vulnerability

CVE-2023-36395
HIGH 7.5

Windows Deployment Services Denial of Service Vulnerability

CVE-2023-36394
HIGH 7.0

Windows Search Service Elevation of Privilege Vulnerability

CVE-2023-36393
HIGH 7.8

Windows User Interface Application Core Remote Code Execution Vulnerability

CVE-2023-36392
HIGH 7.5

DHCP Server Service Denial of Service Vulnerability

CVE-2023-36047
HIGH 7.8

Windows Authentication Elevation of Privilege Vulnerability

CVE-2023-36046
HIGH 7.1

Windows Authentication Denial of Service Vulnerability

CVE-2023-36036
HIGH 7.8 KEV

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2023-36033
HIGH 7.8 KEV

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2023-36028
HIGH 9.8

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

CVE-2023-36025
HIGH 8.8 KEV

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2023-36017
HIGH 8.8

Windows Scripting Engine Memory Corruption Vulnerability