Vulnérabilités

Vulnérabilités des apps suivies

8 498 entrées

Toutes les CVE 16 392 KEV CISA 288 Toutes sévérités Critique Élevé Modéré Faible Masquer les N/A

Toutes plateformes iOS Android macOS Windows

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

CVE	Sévérité	Vecteur	KEV	Apps	Publié	Description
CVE-2022-0566 HIGH 8.8 Réseau 1 apps 2022-12-22 It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of-bounds write of one byte when processing the message.…	HIGH 8.8	Réseau	—	1	2022-12-22	It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of-bounds write of one byte when processing the message.…
CVE-2021-4140 CRITICAL 10.0 Réseau 1 apps 2022-12-22 It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, …	CRITICAL 10.0	Réseau	—	1	2022-12-22	It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, …
CVE-2021-4129 CRITICAL 9.8 Réseau 1 apps 2022-12-22 Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported memory safe…	CRITICAL 9.8	Réseau	—	1	2022-12-22	Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported memory safe…
CVE-2021-4127 CRITICAL 9.8 Réseau 1 apps 2022-12-22 An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird < 78.9 and…	CRITICAL 9.8	Réseau	—	1	2022-12-22	An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird < 78.9 and…
CVE-2021-4126 MEDIUM 6.5 Réseau 1 apps 2022-12-22 When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added by a mailing list …	MEDIUM 6.5	Réseau	—	1	2022-12-22	When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added by a mailing list …
CVE-2020-15685 HIGH 8.8 Réseau 1 apps 2022-12-22 During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session. This vulner…	HIGH 8.8	Réseau	—	1	2022-12-22	During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session. This vulner…
CVE-2022-3775 HIGH 7.1 Local 2022-12-19 When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size.…	HIGH 7.1	Local	—	—	2022-12-19	When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size.…
CVE-2022-2601 HIGH 8.6 Local 2022-12-14 A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, all…	HIGH 8.6	Local	—	—	2022-12-14	A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, all…
CVE-2022-44710 HIGH 7.8 2022-12-13 DirectX Graphics Kernel Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-12-13	DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2022-44707 HIGH 6.5 2022-12-13 Windows Kernel Denial of Service Vulnerability	HIGH 6.5	—	—	—	2022-12-13	Windows Kernel Denial of Service Vulnerability
CVE-2022-44698 MEDIUM 5.4 KEV 2022-12-13 Windows SmartScreen Security Feature Bypass Vulnerability	MEDIUM 5.4	—	KEV	—	2022-12-13	Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2022-44697 HIGH 7.8 2022-12-13 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-12-13	Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2022-44689 HIGH 7.8 2022-12-13 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-12-13	Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
CVE-2022-44683 HIGH 7.8 2022-12-13 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-12-13	Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-44682 HIGH 6.8 2022-12-13 Windows Hyper-V Denial of Service Vulnerability	HIGH 6.8	—	—	—	2022-12-13	Windows Hyper-V Denial of Service Vulnerability
CVE-2022-44681 HIGH 7.8 2022-12-13 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-12-13	Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-44680 HIGH 7.8 2022-12-13 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-12-13	Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2022-44679 HIGH 6.5 2022-12-13 Windows Graphics Component Information Disclosure Vulnerability	HIGH 6.5	—	—	—	2022-12-13	Windows Graphics Component Information Disclosure Vulnerability
CVE-2022-44678 HIGH 7.8 2022-12-13 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-12-13	Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-44677 HIGH 7.8 2022-12-13 Windows Projected File System Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-12-13	Windows Projected File System Elevation of Privilege Vulnerability
CVE-2022-44676 CRITICAL 8.1 2022-12-13 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability	CRITICAL 8.1	—	—	—	2022-12-13	Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-44675 HIGH 7.8 2022-12-13 Windows Bluetooth Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-12-13	Windows Bluetooth Driver Elevation of Privilege Vulnerability
CVE-2022-44674 HIGH 5.5 2022-12-13 Windows Bluetooth Driver Information Disclosure Vulnerability	HIGH 5.5	—	—	—	2022-12-13	Windows Bluetooth Driver Information Disclosure Vulnerability
CVE-2022-44673 HIGH 7.0 2022-12-13 Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability	HIGH 7.0	—	—	—	2022-12-13	Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2022-44671 HIGH 7.8 2022-12-13 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-12-13	Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2022-44670 CRITICAL 8.1 2022-12-13 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability	CRITICAL 8.1	—	—	—	2022-12-13	Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-44669 HIGH 7.0 2022-12-13 Windows Error Reporting Elevation of Privilege Vulnerability	HIGH 7.0	—	—	—	2022-12-13	Windows Error Reporting Elevation of Privilege Vulnerability
CVE-2022-44668 HIGH 7.8 2022-12-13 Windows Media Remote Code Execution Vulnerability	HIGH 7.8	—	—	—	2022-12-13	Windows Media Remote Code Execution Vulnerability
CVE-2022-44667 HIGH 7.8 2022-12-13 Windows Media Remote Code Execution Vulnerability	HIGH 7.8	—	—	—	2022-12-13	Windows Media Remote Code Execution Vulnerability
CVE-2022-44666 HIGH 7.8 2022-12-13 Windows Contacts Remote Code Execution Vulnerability	HIGH 7.8	—	—	—	2022-12-13	Windows Contacts Remote Code Execution Vulnerability
CVE-2022-41121 HIGH 7.8 2022-12-13 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-12-13	Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2022-41094 HIGH 7.8 2022-12-13 Windows Hyper-V Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-12-13	Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2022-41077 HIGH 7.8 2022-12-13 Windows Fax Compose Form Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-12-13	Windows Fax Compose Form Elevation of Privilege Vulnerability
CVE-2022-41076 CRITICAL 8.5 2022-12-13 PowerShell Remote Code Execution Vulnerability	CRITICAL 8.5	—	—	—	2022-12-13	PowerShell Remote Code Execution Vulnerability
CVE-2022-41074 HIGH 5.5 2022-12-13 Windows Graphics Component Information Disclosure Vulnerability	HIGH 5.5	—	—	—	2022-12-13	Windows Graphics Component Information Disclosure Vulnerability
CVE-2022-41128 HIGH 8.8 KEV Réseau 2022-11-09 Windows Scripting Languages Remote Code Execution Vulnerability	HIGH 8.8	Réseau	KEV	—	2022-11-09	Windows Scripting Languages Remote Code Execution Vulnerability
CVE-2022-41125 HIGH 7.8 KEV Local 2022-11-09 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2022-11-09	Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2022-41118 HIGH 7.5 Réseau 2022-11-09 Windows Scripting Languages Remote Code Execution Vulnerability	HIGH 7.5	Réseau	—	—	2022-11-09	Windows Scripting Languages Remote Code Execution Vulnerability
CVE-2022-41114 HIGH 7.0 Local 2022-11-09 Windows Bind Filter Driver Elevation of Privilege Vulnerability	HIGH 7.0	Local	—	—	2022-11-09	Windows Bind Filter Driver Elevation of Privilege Vulnerability
CVE-2022-41113 HIGH 7.8 Local 2022-11-09 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability	HIGH 7.8	Local	—	—	2022-11-09	Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVE-2022-41109 HIGH 7.8 Local 2022-11-09 Windows Win32k Elevation of Privilege Vulnerability	HIGH 7.8	Local	—	—	2022-11-09	Windows Win32k Elevation of Privilege Vulnerability
CVE-2022-41102 HIGH 7.8 Local 2022-11-09 Windows Overlay Filter Elevation of Privilege Vulnerability	HIGH 7.8	Local	—	—	2022-11-09	Windows Overlay Filter Elevation of Privilege Vulnerability
CVE-2022-41101 HIGH 7.8 Local 2022-11-09 Windows Overlay Filter Elevation of Privilege Vulnerability	HIGH 7.8	Local	—	—	2022-11-09	Windows Overlay Filter Elevation of Privilege Vulnerability
CVE-2022-41100 HIGH 7.8 Local 2022-11-09 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability	HIGH 7.8	Local	—	—	2022-11-09	Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2022-41099 MEDIUM 4.6 Physique 2022-11-09 BitLocker Security Feature Bypass Vulnerability	MEDIUM 4.6	Physique	—	—	2022-11-09	BitLocker Security Feature Bypass Vulnerability
CVE-2022-41098 MEDIUM 5.5 Local 2022-11-09 Windows GDI+ Information Disclosure Vulnerability	MEDIUM 5.5	Local	—	—	2022-11-09	Windows GDI+ Information Disclosure Vulnerability
CVE-2022-41097 MEDIUM 6.5 Réseau 2022-11-09 Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability	MEDIUM 6.5	Réseau	—	—	2022-11-09	Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability
CVE-2022-41096 HIGH 7.8 Local 2022-11-09 Microsoft DWM Core Library Elevation of Privilege Vulnerability	HIGH 7.8	Local	—	—	2022-11-09	Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2022-41095 HIGH 7.8 Local 2022-11-09 Windows Digital Media Receiver Elevation of Privilege Vulnerability	HIGH 7.8	Local	—	—	2022-11-09	Windows Digital Media Receiver Elevation of Privilege Vulnerability
CVE-2022-41093 HIGH 7.8 Local 2022-11-09 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability	HIGH 7.8	Local	—	—	2022-11-09	Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability