Vulnérabilités
Vulnérabilités des apps suivies
8 497 entrées
Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.
| CVE |
|---|
|
CVE-2023-32019
HIGH 4.7
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2023-32018
HIGH 7.8
Windows Hello Remote Code Execution Vulnerability |
|
CVE-2023-32017
HIGH 7.8
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability |
|
CVE-2023-32016
HIGH 5.5
Windows Installer Information Disclosure Vulnerability |
|
CVE-2023-32015
CRITICAL 9.8
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
|
CVE-2023-32014
CRITICAL 9.8
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
|
CVE-2023-32013
CRITICAL 5.3
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2023-32012
HIGH 7.8
Windows Container Manager Service Elevation of Privilege Vulnerability |
|
CVE-2023-32011
HIGH 7.5
Windows iSCSI Discovery Service Denial of Service Vulnerability |
|
CVE-2023-32010
HIGH 7.0
Windows Bus Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2023-32009
HIGH 8.8
Windows Collaborative Translation Framework Elevation of Privilege Vulnerability |
|
CVE-2023-32008
HIGH 7.8
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
|
CVE-2023-29373
HIGH 8.8
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2023-29372
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2023-29371
HIGH 7.8
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2023-29370
HIGH 7.8
Windows Media Remote Code Execution Vulnerability |
|
CVE-2023-29369
HIGH 6.5
Remote Procedure Call Runtime Denial of Service Vulnerability |
|
CVE-2023-29368
HIGH 7.0
Windows Filtering Platform Elevation of Privilege Vulnerability |
|
CVE-2023-29367
HIGH 7.8
iSCSI Target WMI Provider Remote Code Execution Vulnerability |
|
CVE-2023-29366
HIGH 7.8
Windows Geolocation Service Remote Code Execution Vulnerability |
|
CVE-2023-29365
HIGH 7.8
Windows Media Remote Code Execution Vulnerability |
|
CVE-2023-29364
HIGH 7.0
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2023-29363
CRITICAL 9.8
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
|
CVE-2023-29362
HIGH 8.8
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2023-29361
HIGH 7.0
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2023-29360
HIGH 8.4
KEV
Microsoft Streaming Service Elevation of Privilege Vulnerability |
|
CVE-2023-29359
HIGH 7.8
GDI Elevation of Privilege Vulnerability |
|
CVE-2023-29358
HIGH 7.8
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2023-29355
HIGH 5.3
DHCP Server Service Information Disclosure Vulnerability |
|
CVE-2023-29352
HIGH 6.5
Windows Remote Desktop Security Feature Bypass Vulnerability |
|
CVE-2023-29351
HIGH 8.1
Windows Group Policy Elevation of Privilege Vulnerability |
|
CVE-2023-29346
HIGH 7.8
NTFS Elevation of Privilege Vulnerability |
|
CVE-2023-24938
HIGH 6.5
Windows CryptoAPI Denial of Service Vulnerability |
|
CVE-2023-24937
HIGH 6.5
Windows CryptoAPI Denial of Service Vulnerability |
|
CVE-2023-33595
MEDIUM 5.5
Local 1 apps
CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c. |
|
CVE-2023-32215
HIGH 8.8
Réseau 1 apps
Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCreight and the Mozilla Fuzzing Team repor… |
|
CVE-2023-32213
HIGH 8.8
Réseau 1 apps
When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird… |
|
CVE-2023-32212
MEDIUM 4.3
Réseau 1 apps
An attacker could have positioned a `datalist` element to obscure the address bar. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderb… |
|
CVE-2023-32211
MEDIUM 6.5
Réseau 1 apps
A type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11. |
|
CVE-2023-32207
HIGH 8.8
Réseau 1 apps
A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefo… |
|
CVE-2023-32206
MEDIUM 6.5
Réseau 1 apps
An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102… |
|
CVE-2023-32205
MEDIUM 4.3
Réseau 1 apps
In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attac… |
|
CVE-2023-28176
HIGH 8.8
Réseau 1 apps
Memory safety bugs present in Firefox 110 and Firefox ESR 102.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort… |
|
CVE-2023-28164
MEDIUM 6.5
Réseau 1 apps
Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks. This vulnerability af… |
|
CVE-2023-28163
MEDIUM 6.5
Réseau 1 apps
When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resolved those … |
|
CVE-2023-28162
HIGH 8.8
Réseau 1 apps
While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash.… |
|
CVE-2023-25752
MEDIUM 6.5
Réseau 1 apps
When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. This may have lead future code… |
|
CVE-2023-25751
MEDIUM 6.5
Réseau 1 apps
Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially … |
|
CVE-2023-25746
HIGH 8.8
Réseau 1 apps
Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these c… |
|
CVE-2023-25742
MEDIUM 6.5
Réseau 1 apps
When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash. This vulnerability affects Firefox < 110, T… |