Vulnérabilités

Vulnérabilités des apps suivies

6 117 entrées

Toutes les CVE 16 390 KEV CISA 286 Toutes sévérités Critique Élevé Modéré Faible Masquer les N/A

Toutes plateformes iOS Android macOS Windows

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

CVE	Sévérité	Vecteur	KEV	Apps	Publié	Description
CVE-2026-23674 HIGH 7.5 2026-03-10 MapUrlToZone Security Feature Bypass Vulnerability	HIGH 7.5	—	—	—	2026-03-10	MapUrlToZone Security Feature Bypass Vulnerability
CVE-2026-23673 HIGH 7.8 2026-03-10 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2026-03-10	Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2026-23672 HIGH 7.8 2026-03-10 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2026-03-10	Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
CVE-2026-23671 HIGH 7.0 2026-03-10 Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability	HIGH 7.0	—	—	—	2026-03-10	Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability
CVE-2026-23669 HIGH 8.8 2026-03-10 RPC Runtime Library Remote Code Execution Vulnerability	HIGH 8.8	—	—	—	2026-03-10	RPC Runtime Library Remote Code Execution Vulnerability
CVE-2026-23668 HIGH 7.0 2026-03-10 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH 7.0	—	—	—	2026-03-10	Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2026-23667 HIGH 7.0 2026-03-10 Broadcast DVR Elevation of Privilege Vulnerability	HIGH 7.0	—	—	—	2026-03-10	Broadcast DVR Elevation of Privilege Vulnerability
CVE-2026-2803 HIGH 7.5 Réseau 1 apps 2026-02-24 Information disclosure, mitigation bypass in the Settings UI component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.	HIGH 7.5	Réseau	—	1	2026-02-24	Information disclosure, mitigation bypass in the Settings UI component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
CVE-2026-2801 HIGH 7.5 Réseau 1 apps 2026-02-24 Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.	HIGH 7.5	Réseau	—	1	2026-02-24	Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
CVE-2026-2798 HIGH 8.8 Réseau 1 apps 2026-02-24 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.	HIGH 8.8	Réseau	—	1	2026-02-24	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
CVE-2026-2783 HIGH 7.5 Réseau 1 apps 2026-02-24 Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thund…	HIGH 7.5	Réseau	—	1	2026-02-24	Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thund…
CVE-2026-2769 HIGH 8.8 Réseau 1 apps 2026-02-24 Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Th…	HIGH 8.8	Réseau	—	1	2026-02-24	Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Th…
CVE-2026-2447 HIGH 8.8 Réseau 1 apps 2026-02-16 Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbir…	HIGH 8.8	Réseau	—	1	2026-02-16	Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbir…
CVE-2026-21533 HIGH 7.8 KEV 2026-02-10 Windows Remote Desktop Services Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2026-02-10	Windows Remote Desktop Services Elevation of Privilege Vulnerability
CVE-2026-21519 HIGH 7.8 KEV 2026-02-10 Desktop Window Manager Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2026-02-10	Desktop Window Manager Elevation of Privilege Vulnerability
CVE-2026-21513 HIGH 8.8 KEV 2026-02-10 MSHTML Framework Security Feature Bypass Vulnerability	HIGH 8.8	—	KEV	—	2026-02-10	MSHTML Framework Security Feature Bypass Vulnerability
CVE-2026-21510 HIGH 8.8 KEV 2026-02-10 Windows Shell Security Feature Bypass Vulnerability	HIGH 8.8	—	KEV	—	2026-02-10	Windows Shell Security Feature Bypass Vulnerability
CVE-2026-21508 HIGH 7.0 2026-02-10 Windows Storage Elevation of Privilege Vulnerability	HIGH 7.0	—	—	—	2026-02-10	Windows Storage Elevation of Privilege Vulnerability
CVE-2026-21255 HIGH 8.8 2026-02-10 Windows Hyper-V Security Feature Bypass Vulnerability	HIGH 8.8	—	—	—	2026-02-10	Windows Hyper-V Security Feature Bypass Vulnerability
CVE-2026-21253 HIGH 7.0 2026-02-10 Mailslot File System Elevation of Privilege Vulnerability	HIGH 7.0	—	—	—	2026-02-10	Mailslot File System Elevation of Privilege Vulnerability
CVE-2026-21251 HIGH 7.8 2026-02-10 Cluster Client Failover (CCF) Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2026-02-10	Cluster Client Failover (CCF) Elevation of Privilege Vulnerability
CVE-2026-21250 HIGH 7.8 2026-02-10 Windows HTTP.sys Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2026-02-10	Windows HTTP.sys Elevation of Privilege Vulnerability
CVE-2026-21249 HIGH 3.3 2026-02-10 Windows NTLM Spoofing Vulnerability	HIGH 3.3	—	—	—	2026-02-10	Windows NTLM Spoofing Vulnerability
CVE-2026-21248 HIGH 7.3 2026-02-10 Windows Hyper-V Remote Code Execution Vulnerability	HIGH 7.3	—	—	—	2026-02-10	Windows Hyper-V Remote Code Execution Vulnerability
CVE-2026-21247 HIGH 7.3 2026-02-10 Windows Hyper-V Remote Code Execution Vulnerability	HIGH 7.3	—	—	—	2026-02-10	Windows Hyper-V Remote Code Execution Vulnerability
CVE-2026-21246 HIGH 7.8 2026-02-10 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2026-02-10	Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2026-21245 HIGH 7.8 2026-02-10 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2026-02-10	Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-21244 HIGH 7.3 2026-02-10 Windows Hyper-V Remote Code Execution Vulnerability	HIGH 7.3	—	—	—	2026-02-10	Windows Hyper-V Remote Code Execution Vulnerability
CVE-2026-21243 HIGH 7.5 2026-02-10 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability	HIGH 7.5	—	—	—	2026-02-10	Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
CVE-2026-21242 HIGH 7.0 2026-02-10 Windows Subsystem for Linux Elevation of Privilege Vulnerability	HIGH 7.0	—	—	—	2026-02-10	Windows Subsystem for Linux Elevation of Privilege Vulnerability
CVE-2026-21241 HIGH 7.0 2026-02-10 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	HIGH 7.0	—	—	—	2026-02-10	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2026-21240 HIGH 7.8 2026-02-10 Windows HTTP.sys Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2026-02-10	Windows HTTP.sys Elevation of Privilege Vulnerability
CVE-2026-21239 HIGH 7.8 2026-02-10 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2026-02-10	Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-21238 HIGH 7.8 2026-02-10 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2026-02-10	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2026-21237 HIGH 7.0 2026-02-10 Windows Subsystem for Linux Elevation of Privilege Vulnerability	HIGH 7.0	—	—	—	2026-02-10	Windows Subsystem for Linux Elevation of Privilege Vulnerability
CVE-2026-21236 HIGH 7.8 2026-02-10 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2026-02-10	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2026-21235 HIGH 7.3 2026-02-10 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH 7.3	—	—	—	2026-02-10	Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2026-21234 HIGH 7.0 2026-02-10 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability	HIGH 7.0	—	—	—	2026-02-10	Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
CVE-2026-21232 HIGH 7.8 2026-02-10 Windows HTTP.sys Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2026-02-10	Windows HTTP.sys Elevation of Privilege Vulnerability
CVE-2026-21231 HIGH 7.8 2026-02-10 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2026-02-10	Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-21222 HIGH 5.5 2026-02-10 Windows Kernel Information Disclosure Vulnerability	HIGH 5.5	—	—	—	2026-02-10	Windows Kernel Information Disclosure Vulnerability
CVE-2026-20846 HIGH 7.5 2026-02-10 GDI+ Denial of Service Vulnerability	HIGH 7.5	—	—	—	2026-02-10	GDI+ Denial of Service Vulnerability
CVE-2023-2804 HIGH 6.5 2026-02-10 Red Hat, Inc. CVE-2023-2804: Heap Based Overflow libjpeg-turbo	HIGH 6.5	—	—	—	2026-02-10	Red Hat, Inc. CVE-2023-2804: Heap Based Overflow libjpeg-turbo
CVE-2025-11002 HIGH 7.8 Local 1 apps 2026-01-23 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte…	HIGH 7.8	Local	—	1	2026-01-23	7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte…
CVE-2026-21221 HIGH 7.0 Local 2026-01-13 Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authoriz…	HIGH 7.0	Local	—	—	2026-01-13	Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authoriz…
CVE-2026-20941 HIGH 7.8 Local 2026-01-13 Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.	HIGH 7.8	Local	—	—	2026-01-13	Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.
CVE-2026-20940 HIGH 7.8 Local 2026-01-13 Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.	HIGH 7.8	Local	—	—	2026-01-13	Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-20938 HIGH 7.8 Local 2026-01-13 Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.	HIGH 7.8	Local	—	—	2026-01-13	Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-20934 HIGH 7.5 Réseau 2026-01-13 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate priv…	HIGH 7.5	Réseau	—	—	2026-01-13	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate priv…
CVE-2026-20931 HIGH 8.0 Réseau adjacent 2026-01-13 External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network.	HIGH 8.0	Réseau adjacent	—	—	2026-01-13	External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network.