Vulnérabilités des apps suivies

Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.

An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited. This vulnerability affect…

Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence of memory corruption and we presume tha…

During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. This vulnerab…

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer. …

A website could have obscured the full screen notification by using the file open dialog. This could have led to user confusion and possible spoofing attacks. …

A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive user data. This vulner…

Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash. This vulnerability affects Firefox < 119…

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an insufficient activation-delay. This …

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Win32k Elevation of Privilege Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Hackerone: CVE-2023-38545 SOCKS5 heap buffer overflow

Microsoft QUIC Denial of Service Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Hackerone: CVE-2023-38039 HTTP headers eat all memory

Windows Runtime Remote Code Execution Vulnerability

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Named Pipe File System Elevation of Privilege Vulnerability

Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Power Management Service Information Disclosure Vulnerability

Windows Container Manager Service Elevation of Privilege Vulnerability

Active Directory Domain Services Information Disclosure Vulnerability

Windows Error Reporting Service Elevation of Privilege Vulnerability

Windows Mixed Reality Developer Tools Denial of Service Vulnerability

Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

Windows Common Log File System Driver Information Disclosure Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Runtime C++ Template Library Elevation of Privilege Vulnerability

Windows Media Foundation Core Remote Code Execution Vulnerability

Microsoft AllJoyn API Denial of Service Vulnerability

Windows Deployment Services Denial of Service Vulnerability

Windows Deployment Services Information Disclosure Vulnerability

Windows Setup Files Cleanup Remote Code Execution Vulnerability

DHCP Server Service Denial of Service Vulnerability

Microsoft DirectMusic Remote Code Execution Vulnerability