Vulnérabilités

Vulnérabilités des apps suivies

845 entrées

Toutes les CVE 16 390 KEV CISA 286 Toutes sévérités Critique Élevé Modéré Faible Masquer les N/A

Toutes plateformes iOS Android macOS Windows

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

CVE	Sévérité	Vecteur	KEV	Apps	Publié	Description
CVE-2024-38060 CRITICAL 8.8 2024-07-09 Windows Imaging Component Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	—	2024-07-09	Windows Imaging Component Remote Code Execution Vulnerability
CVE-2024-30080 CRITICAL 9.8 Réseau 2024-06-11 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	CRITICAL 9.8	Réseau	—	—	2024-06-11	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2024-3863 CRITICAL 9.8 Réseau 1 apps 2024-04-16 The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only affected Windows operating systems. Other operating syst…	CRITICAL 9.8	Réseau	—	1	2024-04-16	The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only affected Windows operating systems. Other operating syst…
CVE-2024-21408 CRITICAL 5.5 2024-03-12 Windows Hyper-V Denial of Service Vulnerability	CRITICAL 5.5	—	—	—	2024-03-12	Windows Hyper-V Denial of Service Vulnerability
CVE-2024-21407 CRITICAL 8.1 2024-03-12 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL 8.1	—	—	—	2024-03-12	Windows Hyper-V Remote Code Execution Vulnerability
CVE-2024-24691 CRITICAL 9.6 Réseau 1 apps 2024-02-14 Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user t…	CRITICAL 9.6	Réseau	—	1	2024-02-14	Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user t…
CVE-2024-20700 CRITICAL 7.5 2024-01-09 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL 7.5	—	—	—	2024-01-09	Windows Hyper-V Remote Code Execution Vulnerability
CVE-2024-20674 CRITICAL 8.8 2024-01-09 Windows Kerberos Security Feature Bypass Vulnerability	CRITICAL 8.8	—	—	—	2024-01-09	Windows Kerberos Security Feature Bypass Vulnerability
CVE-2023-35641 CRITICAL 8.8 2023-12-12 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	—	2023-12-12	Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
CVE-2023-35630 CRITICAL 8.8 2023-12-12 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	—	2023-12-12	Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
CVE-2023-35628 CRITICAL 8.1 2023-12-12 Windows MSHTML Platform Remote Code Execution Vulnerability	CRITICAL 8.1	—	—	—	2023-12-12	Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2023-36400 CRITICAL 8.8 2023-11-14 Windows HMAC Key Derivation Elevation of Privilege Vulnerability	CRITICAL 8.8	—	—	—	2023-11-14	Windows HMAC Key Derivation Elevation of Privilege Vulnerability
CVE-2023-36397 CRITICAL 9.8 2023-11-14 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability	CRITICAL 9.8	—	—	—	2023-11-14	Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2023-5730 CRITICAL 9.8 Réseau 1 apps 2023-10-25 Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence of memory corruption and we presume tha…	CRITICAL 9.8	Réseau	—	1	2023-10-25	Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence of memory corruption and we presume tha…
CVE-2023-41774 CRITICAL 8.1 2023-10-10 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability	CRITICAL 8.1	—	—	—	2023-10-10	Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-41773 CRITICAL 8.1 2023-10-10 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability	CRITICAL 8.1	—	—	—	2023-10-10	Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-41771 CRITICAL 8.1 2023-10-10 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability	CRITICAL 8.1	—	—	—	2023-10-10	Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-41770 CRITICAL 8.1 2023-10-10 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability	CRITICAL 8.1	—	—	—	2023-10-10	Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-41769 CRITICAL 8.1 2023-10-10 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability	CRITICAL 8.1	—	—	—	2023-10-10	Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-41768 CRITICAL 8.1 2023-10-10 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability	CRITICAL 8.1	—	—	—	2023-10-10	Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-41767 CRITICAL 8.1 2023-10-10 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability	CRITICAL 8.1	—	—	—	2023-10-10	Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-41765 CRITICAL 8.1 2023-10-10 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability	CRITICAL 8.1	—	—	—	2023-10-10	Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-38166 CRITICAL 8.1 2023-10-10 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability	CRITICAL 8.1	—	—	—	2023-10-10	Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-36718 CRITICAL 7.8 2023-10-10 Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability	CRITICAL 7.8	—	—	—	2023-10-10	Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability
CVE-2023-36697 CRITICAL 6.8 2023-10-10 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	CRITICAL 6.8	—	—	—	2023-10-10	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-35349 CRITICAL 9.8 2023-10-10 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	CRITICAL 9.8	—	—	—	2023-10-10	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-5176 CRITICAL 9.8 Réseau 1 apps 2023-09-27 Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we presume tha…	CRITICAL 9.8	Réseau	—	1	2023-09-27	Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we presume tha…
CVE-2023-5174 CRITICAL 9.8 Réseau 1 apps 2023-09-27 If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free a…	CRITICAL 9.8	Réseau	—	1	2023-09-27	If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free a…
CVE-2023-5168 CRITICAL 9.8 Réseau 1 apps 2023-09-27 A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially exploitable …	CRITICAL 9.8	Réseau	—	1	2023-09-27	A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially exploitable …
CVE-2023-38148 CRITICAL 8.8 2023-09-12 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	—	2023-09-12	Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
CVE-2022-48565 CRITICAL 9.8 Réseau 1 apps 2023-08-22 An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoi…	CRITICAL 9.8	Réseau	—	1	2023-08-22	An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoi…
CVE-2023-39213 CRITICAL 9.6 Réseau 1 apps 2023-08-08 Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an…	CRITICAL 9.6	Réseau	—	1	2023-08-08	Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an…
CVE-2023-39216 CRITICAL 9.6 Réseau 1 apps 2023-08-08 Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network a…	CRITICAL 9.6	Réseau	—	1	2023-08-08	Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network a…
CVE-2023-36911 CRITICAL 9.8 Réseau 2023-08-08 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	CRITICAL 9.8	Réseau	—	—	2023-08-08	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36910 CRITICAL 9.8 Réseau 2023-08-08 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	CRITICAL 9.8	Réseau	—	—	2023-08-08	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36534 CRITICAL 9.3 Réseau 1 apps 2023-08-08 Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.	CRITICAL 9.3	Réseau	—	1	2023-08-08	Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.
CVE-2023-35385 CRITICAL 9.8 Réseau 2023-08-08 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	CRITICAL 9.8	Réseau	—	—	2023-08-08	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-35367 CRITICAL 9.8 2023-07-11 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	CRITICAL 9.8	—	—	—	2023-07-11	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2023-35366 CRITICAL 9.8 2023-07-11 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	CRITICAL 9.8	—	—	—	2023-07-11	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2023-35365 CRITICAL 9.8 2023-07-11 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	CRITICAL 9.8	—	—	—	2023-07-11	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2023-35352 CRITICAL 7.5 2023-07-11 Windows Remote Desktop Security Feature Bypass Vulnerability	CRITICAL 7.5	—	—	—	2023-07-11	Windows Remote Desktop Security Feature Bypass Vulnerability
CVE-2023-35315 CRITICAL 8.8 2023-07-11 Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	—	2023-07-11	Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability
CVE-2023-35297 CRITICAL 8.1 2023-07-11 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability	CRITICAL 8.1	—	—	—	2023-07-11	Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2023-32057 CRITICAL 9.8 2023-07-11 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	CRITICAL 9.8	—	—	—	2023-07-11	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-34416 CRITICAL 9.8 Réseau 1 apps 2023-06-19 Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume t…	CRITICAL 9.8	Réseau	—	1	2023-06-19	Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume t…
CVE-2023-29542 CRITICAL 9.8 Réseau 1 apps 2023-06-19 A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .downlo…	CRITICAL 9.8	Réseau	—	1	2023-06-19	A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .downlo…
CVE-2023-29531 CRITICAL 9.8 Réseau 1 apps 2023-06-19 An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potentially exploitable crash. *This bug onl…	CRITICAL 9.8	Réseau	—	1	2023-06-19	An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potentially exploitable crash. *This bug onl…
CVE-2023-32015 CRITICAL 9.8 2023-06-13 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability	CRITICAL 9.8	—	—	—	2023-06-13	Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2023-32014 CRITICAL 9.8 2023-06-13 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability	CRITICAL 9.8	—	—	—	2023-06-13	Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2023-32013 CRITICAL 5.3 2023-06-13 Windows Hyper-V Denial of Service Vulnerability	CRITICAL 5.3	—	—	—	2023-06-13	Windows Hyper-V Denial of Service Vulnerability