Aller au contenu
Appaloosa Scout
Sélection de la langue
fr en

Vulnérabilités

Vulnérabilités des apps suivies

17 552 CVE touchent une app ou un OS suivi (Élevé, toutes plateformes). 295 figurent au catalogue CISA KEV, donc leur exploitation est avérée.

CVE correspondantes
17 552
Activement exploitées
295
Fenêtre de publication
2004-07-27 → 2026-11-10
Toutes les CVE 17 552 KEV CISA 295 Exploit public 406 Toutes sévérités Critique Élevé Modéré Faible Masquer les N/A
Toutes plateformes iOS Android macOS Windows

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

17 552 entrées Élevé Masquer les N/A Tout effacer
CVE
CVE-2026-125350
HIGH · éditeur
Chrome Google Chrome

Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (…
CVE-2026-125348
HIGH · éditeur
Chrome Google Chrome

Out of bounds write in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a cr…
CVE-2026-125347
HIGH · éditeur
Chrome Google Chrome

Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging social engineering to execute arbitrary code…
CVE-2026-125346
HIGH · éditeur
Chrome Google Chrome

Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (…
CVE-2026-125345
HIGH · éditeur
Chrome Google Chrome

Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (…
CVE-2026-125344
HIGH · éditeur
Chrome Google Chrome

Type confusion in V8 in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C…
CVE-2026-125343
HIGH · éditeur
Chrome Google Chrome

Buffer overflow in Compositing in Google Chrome prior to 157.0.8103.50 allowed a remote attacker who had compromised the renderer process to execute arbitrary …
CVE-2026-124952
HIGH 8.8
Mozilla Firefox

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox ESR 115.45.
CVE-2026-124951
HIGH · éditeur
Mozilla Firefox

Privilege escalation in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124950
HIGH · éditeur
Mozilla Firefox

Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160.
CVE-2026-124949
HIGH · éditeur
Mozilla Firefox

Other issue in the SVG component. This vulnerability was fixed in Firefox 160.
CVE-2026-124948
HIGH 8.8
Mozilla Firefox

Incorrect boundary conditions, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124947
HIGH 8.8
Mozilla Firefox

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 160.
CVE-2026-124946
HIGH · éditeur
Mozilla Firefox

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160.
CVE-2026-124945
HIGH · éditeur
Mozilla Firefox

Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160.
CVE-2026-124943
HIGH 8.8
Mozilla Firefox

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160.
CVE-2026-124942
HIGH · éditeur
Mozilla Firefox

Invalid pointer in the DOM: Streams component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124940
HIGH · éditeur
Mozilla Firefox

Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124939
HIGH · éditeur
Mozilla Firefox

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124938
HIGH · éditeur
Mozilla Firefox

Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124936
HIGH · éditeur
Mozilla Firefox

Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 160.
CVE-2026-124935
HIGH · éditeur
Mozilla Firefox

Undefined behavior in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124934
HIGH · éditeur
Mozilla Firefox

Spoofing issue in the Security component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124933
HIGH · éditeur
Mozilla Firefox

Sandbox escape in the Console component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124932
HIGH 8.8
Mozilla Firefox

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124931
HIGH · éditeur
Mozilla Firefox

Same-origin policy bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124928
HIGH · éditeur
Mozilla Firefox

Mitigation bypass in the SVG component. This vulnerability was fixed in Firefox 160.
CVE-2026-124927
HIGH · éditeur
Mozilla Firefox

Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124926
HIGH 8.8
Mozilla Firefox

Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124924
HIGH 8.8
Mozilla Firefox

Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124923
HIGH · éditeur
Mozilla Firefox

Sandbox escape in the Agent component. This vulnerability was fixed in Firefox 160.
CVE-2026-124922
HIGH 8.8
Mozilla Firefox

Use-after-free in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124921
HIGH · éditeur
Mozilla Firefox

Sandbox escape in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160.
CVE-2026-124920
HIGH · éditeur
Mozilla Firefox

Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160.
CVE-2026-124919
HIGH 8.8
Mozilla Firefox

Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124918
HIGH 8.8
Mozilla Firefox

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153…
CVE-2026-124915
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124914
HIGH · éditeur
Mozilla Firefox Mozilla Thunderbird

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124913
HIGH · éditeur
Mozilla Firefox Mozilla Thunderbird

Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124912
HIGH · éditeur
Mozilla Firefox Mozilla Thunderbird

Spoofing issue in the DOM: Security component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124910
HIGH · éditeur
Mozilla Firefox Mozilla Thunderbird

Mitigation bypass in the WebExtensions component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124908
HIGH 8.8
Mozilla Firefox

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160.
CVE-2026-124907
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160 and Firefox ESR …
CVE-2026-124906
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124905
HIGH · éditeur
Mozilla Firefox Mozilla Thunderbird

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
CVE-2026-124904
HIGH 8.8
Mozilla Firefox

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 160.
CVE-2026-124902
HIGH · éditeur
Mozilla Firefox Mozilla Thunderbird

Same-origin policy bypass due to race condition in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR …
CVE-2026-124901
HIGH · éditeur
Mozilla Firefox Mozilla Thunderbird

Other issue in the Networking: JAR component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
CVE-2026-124899
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
CVE-2026-124898
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

Gérez votre parc avec Appaloosa

Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.

Découvrir le MDM Appaloosa