Aller au contenu
Appaloosa Scout
Sélection de la langue
fr en

Vulnérabilités

Vulnérabilités des apps suivies

11 302 entrées

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

CVE
CVE-2025-30456
HIGH 7.8 Local

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia …

CVE-2025-30449
HIGH 7.8 Local

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app ma…

CVE-2025-30437
HIGH 7.4 Réseau

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to corrupt coprocessor memory.

CVE-2025-24277
HIGH 7.8 Local

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5,…

CVE-2025-24267
HIGH 7.8 Local

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app ma…

CVE-2025-24257
HIGH 7.1 Local

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, w…

CVE-2025-24255
HIGH 8.4 Local

A file access issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app …

CVE-2025-24254
HIGH 8.8 Réseau

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A user may…

CVE-2025-24243
HIGH 7.8 Local

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5,…

CVE-2025-24234
HIGH 7.8 Local

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app…

CVE-2025-24229
HIGH 7.4 Réseau

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A sandboxed app may be …

CVE-2025-24228
HIGH 7.8 Local

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An a…

CVE-2025-24221
HIGH 7.5 Réseau

This issue was addressed with improved data access restriction. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, visionOS 2.4. Sensitive keychai…

CVE-2025-24213
HIGH 7.8 Local

This issue was addressed with improved handling of floats. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvO…

CVE-2025-24209
HIGH 7.0 Réseau

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia…

CVE-2025-24196
HIGH 8.8 Réseau

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with user privi…

CVE-2025-24180
HIGH 8.1 Réseau

The issue was addressed with improved input validation. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS…

CVE-2025-24173
HIGH 7.8 Local

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 1…

CVE-2025-24170
HIGH 7.8 Local

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be ab…

CVE-2025-24095
HIGH 7.6 Réseau

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, visionOS 2.4. An app may be able to bypass Privac…

CVE-2024-54533
HIGH 7.0 Réseau

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A…

CVE-2024-56171
HIGH 7.8

[Apple libxml2] Parsing a file may lead to an unexpected app termination

CVE-2024-48958
HIGH 7.8

[Apple libarchive] An input validation issue was addressed

CVE-2024-54551
HIGH 7.5 Réseau

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3…

CVE-2024-44305
HIGH 7.8 Local

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.6. An app may be able to gain root privileges.

CVE-2024-44199
HIGH 7.1 Local

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.6. An app may be able to cause unexpected system ter…

CVE-2024-54525
HIGH 8.8 Réseau

A logic issue was addressed with improved file handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS …

CVE-2024-44276
HIGH 7.3 Réseau

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.2 and iPadOS 18.2. A user in a privileged netw…

CVE-2024-8176
HIGH 7.5 Réseau

A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML docume…

CVE-2025-26633
HIGH 7.0 KEV Local

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

CVE-2025-26634
HIGH 7.5

Windows Core Messaging Elevation of Privileges Vulnerability

CVE-2025-25008
HIGH 7.1

Windows Server Elevation of Privilege Vulnerability

CVE-2025-24997
HIGH 4.4

DirectX Graphics Kernel File Denial of Service Vulnerability

CVE-2025-24996
HIGH 6.5

NTLM Hash Disclosure Spoofing Vulnerability

CVE-2025-24995
HIGH 7.8

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2025-24994
HIGH 7.3

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

CVE-2025-24993
HIGH 7.8 KEV

Windows NTFS Remote Code Execution Vulnerability

CVE-2025-24992
HIGH 5.5

Windows NTFS Information Disclosure Vulnerability

CVE-2025-24991
HIGH 5.5 KEV

Windows NTFS Information Disclosure Vulnerability

CVE-2025-24988
HIGH 6.6

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

CVE-2025-24987
HIGH 6.6

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

CVE-2025-24985
HIGH 7.8 KEV

Windows Fast FAT File System Driver Remote Code Execution Vulnerability

CVE-2025-24984
HIGH 4.6 KEV

Windows NTFS Information Disclosure Vulnerability

CVE-2025-24983
HIGH 7.0 KEV

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVE-2025-24855
HIGH 7.8

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is…

CVE-2025-24076
HIGH 7.3

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

CVE-2025-24072
HIGH 7.8

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

CVE-2025-24071
HIGH 6.5

Microsoft Windows File Explorer Spoofing Vulnerability

CVE-2025-24067
HIGH 7.8

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2025-24066
HIGH 7.8

Kernel Streaming Service Driver Elevation of Privilege Vulnerability