Aller au contenu
Appaloosa Scout
Sélection de la langue
fr en

Vulnérabilités

Vulnérabilités des apps suivies

28 046 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 374 figurent au catalogue CISA KEV, donc leur exploitation est avérée.

CVE correspondantes
28 046
Activement exploitées
374
Fenêtre de publication
1997-01-01 → 2026-10-20

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

28 046 entrées
CVE
CVE-2025-54111
HIGH · éditeur

Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability

CVE-2025-54110
HIGH · éditeur

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-54109
HIGH · éditeur

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2025-54107
HIGH · éditeur

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-54106
HIGH · éditeur

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-54104
HIGH · éditeur

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2025-54103
HIGH · éditeur

Windows Management Service Elevation of Privilege Vulnerability

CVE-2025-54102
HIGH · éditeur

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

CVE-2025-54101
HIGH · éditeur

Windows SMB Client Remote Code Execution Vulnerability

CVE-2025-54099
HIGH · éditeur

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-54098
HIGH · éditeur

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-54097
HIGH · éditeur

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-54096
HIGH · éditeur

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-54095
HIGH · éditeur

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-54094
HIGH · éditeur

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2025-54093
HIGH · éditeur

Windows TCP/IP Driver Elevation of Privilege Vulnerability

CVE-2025-54092
HIGH · éditeur

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-54091
HIGH · éditeur

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-53810
HIGH · éditeur

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2025-53808
HIGH · éditeur

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2025-53807
HIGH · éditeur

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2025-53806
HIGH · éditeur

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-53805
HIGH · éditeur

HTTP.sys Denial of Service Vulnerability

CVE-2025-53804
HIGH · éditeur

Windows Kernel-Mode Driver Information Disclosure Vulnerability

CVE-2025-53803
HIGH · éditeur

Windows Kernel Memory Information Disclosure Vulnerability

CVE-2025-53802
HIGH · éditeur

Windows Bluetooth Service Elevation of Privilege Vulnerability

CVE-2025-53801
HIGH · éditeur

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2025-53800
CRITICAL · éditeur

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2025-53798
HIGH · éditeur

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-53797
HIGH · éditeur

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-53796
HIGH · éditeur

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-49734
HIGH · éditeur

PowerShell Direct Elevation of Privilege Vulnerability

CVE-2025-3212
MEDIUM 5.3

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows…

CVE-2025-39682
CRITICAL 9.8 KEV

In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process …

CVE-2025-48581
HIGH 8.4

In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the code. This could lead to local escalat…

CVE-2025-48560
MEDIUM 5.5

In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could lead to local information disclosure w…

CVE-2025-48559
MEDIUM 5.5

In multiple functions of AppOpsService.java, there is a possible add a large amount of app ops due to improper input validation. This could lead to local denia…

CVE-2025-48549
HIGH 7.8

In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of p…

CVE-2025-48544
HIGH 7.8

In multiple locations, there is a possible way to read files belonging to other apps due to SQL injection. This could lead to local escalation of privilege wit…

CVE-2025-48541
HIGH 7.8

In onCreate of FaceSettings.java, there is a possible way to remove biometric unlock across user profiles due to improper input validation. This could lead to …

CVE-2025-48533
HIGH 7.0

In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition. This could lead to local esc…

CVE-2025-48529
MEDIUM 5.5

In setRingtoneUri of VoicemailNotificationSettingsUtil.java , there is a possible cross user data leak due to a confused deputy. This could lead to local infor…

CVE-2025-32347
HIGH 7.8

In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent. This could lead to l…

CVE-2025-32331
HIGH 7.8

In showDismissibleKeyguard of KeyguardService.java, there is a possible way to bypass app pinning due to a logic error in the code. This could lead to local es…

CVE-2025-26444
HIGH 7.8

In onHandleForceStop of VoiceInteractionManagerService.java, there is a bug that could cause the system to incorrectly revert to the default assistant applicat…

CVE-2025-26423
MEDIUM 6.2

In validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a permanent DoS due to a missing bounds check. This could lead to …

CVE-2025-56139
MEDIUM 5.3

LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when a user replaces the original …

CVE-2025-9867
MEDIUM 5.4

Inappropriate implementation in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTM…

CVE-2025-9866
HIGH 8.8

Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HT…

CVE-2025-9865
MEDIUM 5.4

Inappropriate implementation in Toolbar in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker who convinced a user to engage in specific…

Gérez votre parc avec Appaloosa

Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.

Découvrir le MDM Appaloosa