Aller au contenu
Appaloosa Scout

Vulnérabilités

Vulnérabilités des apps suivies

1 821 entrées

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

CVE
CVE-2025-47980
CRITICAL 6.2

Windows Imaging Component Information Disclosure Vulnerability

CVE-2024-36357
CRITICAL 5.6

AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue

CVE-2024-36350
CRITICAL 5.6

AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue

CVE-2025-47953
CRITICAL 8.4 Local 1 apps

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-47167
CRITICAL 8.4 Local 1 apps

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-47164
CRITICAL 8.4 Local 1 apps

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-47162
CRITICAL 8.4 Local 1 apps

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-33071
CRITICAL 8.1

Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability

CVE-2025-33070
CRITICAL 8.1

Windows Netlogon Elevation of Privilege Vulnerability

CVE-2025-32710
CRITICAL 8.1

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVE-2025-29828
CRITICAL 8.1

Windows Schannel Remote Code Execution Vulnerability

CVE-2025-31263
CRITICAL 9.1 Réseau

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4. An app may be able to corrupt coprocessor memory.

CVE-2025-30466
CRITICAL 9.8 Réseau

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. A w…

CVE-2025-4918
CRITICAL 9.8 Réseau 1 apps

An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability was fixed in Firefox 138.0.4, Firefox ESR 1…

CVE-2025-30386
CRITICAL 8.4 Local 1 apps

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-29967
CRITICAL 8.8

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2025-29966
CRITICAL 8.8

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2025-29833
CRITICAL 7.7

Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability

CVE-2025-30448
CRITICAL 9.1 Réseau

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 1…

CVE-2025-30436
CRITICAL 9.1 Réseau

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker may be able to use Sir…

CVE-2025-4083
CRITICAL 9.1 Réseau 1 apps

A process isolation vulnerability in Thunderbird stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level docu…

CVE-2025-31201
CRITICAL 9.8 KEV Réseau

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.…

CVE-2025-31200
CRITICAL 9.8 KEV Réseau

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, …

CVE-2025-27491
CRITICAL 7.1

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2025-27482
CRITICAL 8.1

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVE-2025-27480
CRITICAL 8.1

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVE-2025-26686
CRITICAL 7.5

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2025-26670
CRITICAL 8.1

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

CVE-2025-26663
CRITICAL 8.1

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2025-26416
CRITICAL

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

CVE-2025-22429
CRITICAL

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

CVE-2025-22423
CRITICAL

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

CVE-2024-45551
CRITICAL

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

CVE-2025-31194
CRITICAL 9.8 Réseau

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A S…

CVE-2025-31183
CRITICAL 9.8 Réseau

The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 1…

CVE-2025-31182
CRITICAL 9.8 Réseau

This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ve…

CVE-2025-30465
CRITICAL 9.8 Réseau

A permissions issue was addressed with improved validation. This issue is fixed in iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sequoia 15.7.2, macOS Sonoma 14.7.5…

CVE-2025-30462
CRITICAL 9.8 Réseau

A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. App…

CVE-2025-30461
CRITICAL 9.8 Réseau

An access issue was addressed with additional sandbox restrictions on the system pasteboards. This issue is fixed in macOS Sequoia 15.4. An app may be able to …

CVE-2025-30458
CRITICAL 9.8 Réseau

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to read files outside of its sand…

CVE-2025-30457
CRITICAL 9.8 Réseau

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A maliciou…

CVE-2025-30452
CRITICAL 9.8 Réseau

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An input validation issue w…

CVE-2025-30444
CRITICAL 9.8 Réseau

A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. Mounting a maliciou…

CVE-2025-30433
CRITICAL 9.8 Réseau

This issue was addressed with improved access restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14…

CVE-2025-30430
CRITICAL 9.8 Réseau

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. Pa…

CVE-2025-30426
CRITICAL 9.8 Réseau

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, vis…

CVE-2025-30424
CRITICAL 9.8 Réseau

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. Deleting a co…

CVE-2025-24273
CRITICAL 9.8 Réseau

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5.…

CVE-2025-24269
CRITICAL 9.8 Réseau

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4. An app may be able to cause unexpected system termination.

CVE-2025-24266
CRITICAL 9.8 Réseau

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may…