Vulnérabilités
Vulnérabilités des apps suivies
8 497 entrées
Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.
| CVE |
|---|
|
CVE-2025-59511
HIGH 7.8
Windows WLAN Service Elevation of Privilege Vulnerability |
|
CVE-2025-59510
HIGH 5.5
Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability |
|
CVE-2025-59509
HIGH 5.5
Windows Speech Recognition Information Disclosure Vulnerability |
|
CVE-2025-59508
HIGH 7.0
Windows Speech Recognition Elevation of Privilege Vulnerability |
|
CVE-2025-59507
HIGH 7.0
Windows Speech Runtime Elevation of Privilege Vulnerability |
|
CVE-2025-59506
HIGH 7.0
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-59505
HIGH 7.8
Windows Smart Card Reader Elevation of Privilege Vulnerability |
|
CVE-2025-6075
MEDIUM 5.5
Local 1 apps
If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables. |
|
CVE-2025-11721
CRITICAL 9.8
Réseau 1 apps
Memory safety bug present in Firefox 143 and Thunderbird 143. This bug showed evidence of memory corruption and we presume that with enough effort this could h… |
|
CVE-2025-11719
CRITICAL 9.8
Réseau 1 apps
Starting in Thunderbird 143, the use of the native messaging API by web extensions on Windows could lead to crashes caused by use-after-free memory corruption.… |
|
CVE-2025-11716
MEDIUM 6.5
Réseau 1 apps
Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnerability was fixed in Firefox 144 and Thu… |
|
CVE-2025-11715
HIGH 8.8
Réseau 1 apps
Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruptio… |
|
CVE-2025-11714
HIGH 8.8
Réseau 1 apps
Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence… |
|
CVE-2025-11713
HIGH 8.1
Réseau 1 apps
Insufficient escaping in the “Copy as cURL” feature could have been used to trick a user into executing unexpected code on Windows. This did not affect the app… |
|
CVE-2025-11712
MEDIUM 6.1
Réseau 1 apps
A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a… |
|
CVE-2025-11711
MEDIUM 6.5
Réseau 1 apps
There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable. This vulnerability was fixed in Firefox 144, Firefo… |
|
CVE-2025-11710
CRITICAL 9.8
Réseau 1 apps
A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised proce… |
|
CVE-2025-11709
CRITICAL 9.8
Réseau 1 apps
A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vulnerability … |
|
CVE-2025-11708
CRITICAL 9.8
Réseau 1 apps
Use-after-free in MediaTrackGraphImpl::GetInstance(). This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4. |
|
CVE-2025-59502
MEDIUM 7.5
Remote Procedure Call Denial of Service Vulnerability |
|
CVE-2025-59295
HIGH 8.8
Windows URL Parsing Remote Code Execution Vulnerability |
|
CVE-2025-59294
HIGH 2.1
Windows Taskbar Live Preview Information Disclosure Vulnerability |
|
CVE-2025-59290
HIGH 7.8
Windows Bluetooth Service Elevation of Privilege Vulnerability |
|
CVE-2025-59289
HIGH 7.0
Windows Bluetooth Service Elevation of Privilege Vulnerability |
|
CVE-2025-59287
CRITICAL 9.8
KEV
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability |
|
CVE-2025-59284
HIGH 3.3
Windows NTLM Spoofing Vulnerability |
|
CVE-2025-59282
HIGH 7.0
Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability |
|
CVE-2025-59280
HIGH 3.1
Windows SMB Client Tampering Vulnerability |
|
CVE-2025-59278
HIGH 7.8
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2025-59277
HIGH 7.8
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2025-59275
HIGH 7.8
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2025-59261
HIGH 7.0
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2025-59260
HIGH 5.5
Microsoft Failover Cluster Virtual Driver Information Disclosure Vulnerability |
|
CVE-2025-59259
HIGH 6.5
Windows Local Session Manager (LSM) Denial of Service Vulnerability |
|
CVE-2025-59258
HIGH 6.2
Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability |
|
CVE-2025-59257
HIGH 6.5
Windows Local Session Manager (LSM) Denial of Service Vulnerability |
|
CVE-2025-59255
HIGH 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-59254
HIGH 7.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-59253
HIGH 5.5
Windows Search Service Denial of Service Vulnerability |
|
CVE-2025-59244
HIGH 6.5
NTLM Hash Disclosure Spoofing Vulnerability |
|
CVE-2025-59242
HIGH 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-59241
HIGH 7.8
Windows Health and Optimized Experiences Elevation of Privilege Vulnerability |
|
CVE-2025-59230
HIGH 7.8
KEV
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
|
CVE-2025-59214
HIGH 6.5
Microsoft Windows File Explorer Spoofing Vulnerability |
|
CVE-2025-59211
HIGH 5.5
Windows Push Notification Information Disclosure Vulnerability |
|
CVE-2025-59210
HIGH 7.4
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
|
CVE-2025-59209
HIGH 5.5
Windows Push Notification Information Disclosure Vulnerability |
|
CVE-2025-59208
HIGH 7.1
Windows MapUrlToZone Information Disclosure Vulnerability |
|
CVE-2025-59207
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-59206
HIGH 7.4
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |