Vulnérabilités
Vulnérabilités des apps suivies
20 991 CVE touchent une app ou un OS suivi (toutes sévérités, Windows). 304 figurent au catalogue CISA KEV, donc leur exploitation est avérée.
- CVE correspondantes
- 20 991
- Activement exploitées
- 304
- Fenêtre de publication
- 1997-01-01 → 2026-11-10
Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.
| CVE |
|---|
|
CVE-2026-96133
MEDIUM 5.5
Improper access control in Windows Graphics Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-96129
HIGH 7.8
Inclusion of functionality from untrusted control sphere in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96127
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96126
HIGH 7.8
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96124
HIGH 7.0
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96122
HIGH 7.8
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96117
HIGH 7.8
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96115
HIGH 8.0
Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-96112
MEDIUM 5.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information locally. |
|
CVE-2026-96110
MEDIUM 5.5
Use after free in Windows OLE allows an authorized attacker to disclose information locally. |
|
CVE-2026-96107
HIGH 7.0
Null pointer dereference in Windows Phone Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96103
HIGH 7.8
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96102
HIGH 7.8
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96101
MEDIUM 5.5
Files or directories accessible to external parties in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information l… |
|
CVE-2026-96097
HIGH 7.0
Release of invalid pointer or reference in Windows Brokering File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96093
MEDIUM 4.7
Out-of-bounds read in Windows Internet (wininet.dll) allows an authorized attacker to disclose information locally. |
|
CVE-2026-96088
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an autho… |
|
CVE-2026-96086
MEDIUM 6.5
Out-of-bounds read in Windows WLAN Service allows an unauthorized attacker to deny service over an adjacent network. |
|
CVE-2026-96085
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96084
HIGH 7.8
Heap-based buffer overflow in Graphic Fonts allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96082
MEDIUM 6.5
Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network. |
|
CVE-2026-96078
CRITICAL 9.8
Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96077
HIGH 7.5
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-96076
HIGH 7.8
Use after free in Windows DIAL Client allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96075
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub allows an authorized attacker to elevate pr… |
|
CVE-2026-96074
HIGH 7.8
Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96073
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96072
HIGH 7.0
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96067
CRITICAL 9.8
Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96066
HIGH 7.8
Stack-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96062
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96061
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96060
HIGH 7.8
Out-of-bounds read in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96059
MEDIUM 5.5
Use after free in HID class driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-96058
MEDIUM 4.6
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information with a physical attack. |
|
CVE-2026-96057
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96056
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96055
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96053
HIGH 7.8
Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an authorized attacker to elevate privileg… |
|
CVE-2026-96052
HIGH 7.8
Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96051
HIGH 7.0
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96048
MEDIUM 4.7
Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-96047
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96046
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96043
HIGH 7.0
Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96042
HIGH 7.0
Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96041
MEDIUM 5.5
Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-96038
HIGH 7.8
Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96037
HIGH 7.8
Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96036
HIGH 7.8
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally. |
Gérez votre parc avec Appaloosa
Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.