Vulnérabilités

Vulnérabilités des apps suivies

26 371 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 373 figurent au catalogue CISA KEV, donc leur exploitation est avérée.

CVE correspondantes: 26 371
Activement exploitées: 373
Fenêtre de publication: 1997-01-01 → 2026-10-06

Toutes les CVE 26 371 KEV CISA 373 Exploit public 638 Toutes sévérités Critique Élevé Modéré Faible Masquer les N/A

Toutes plateformes iOS Android macOS Windows

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

26 371 entrées

CVE	Sévérité	KEV	Publié
CVE-2026-100832 HIGH 8.8 2026-09-29 Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.4…	HIGH 8.8	—	2026-09-29
CVE-2026-100831 HIGH 8.8 2026-09-29 Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Fir…	HIGH 8.8	—	2026-09-29
CVE-2026-100830 HIGH 8.1 2026-09-29 Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	HIGH 8.1	—	2026-09-29
CVE-2026-100829 CRITICAL 9.6 2026-09-29 Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	CRITICAL 9.6	—	2026-09-29
CVE-2026-100828 CRITICAL 9.6 2026-09-29 Mitigation bypass in the Bookmarks & History component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	CRITICAL 9.6	—	2026-09-29
CVE-2026-100826 MEDIUM 6.5 2026-09-29 Denial-of-service in the Storage: StorageManager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox …	MEDIUM 6.5	—	2026-09-29
CVE-2026-100825 HIGH 8.8 2026-09-29 Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	HIGH 8.8	—	2026-09-29
CVE-2026-100824 HIGH 8.8 2026-09-29 Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	HIGH 8.8	—	2026-09-29
CVE-2026-100822 MEDIUM 5.4 2026-09-29 Spoofing issue in the Networking: HTTP component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	MEDIUM 5.4	—	2026-09-29
CVE-2026-100821 MEDIUM 4.7 2026-09-29 Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird …	MEDIUM 4.7	—	2026-09-29
CVE-2026-100820 HIGH 8.8 2026-09-29 Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, F…	HIGH 8.8	—	2026-09-29
CVE-2026-100819 CRITICAL 9.6 2026-09-29 Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140…	CRITICAL 9.6	—	2026-09-29
CVE-2026-100818 CRITICAL 9.6 2026-09-29 Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thun…	CRITICAL 9.6	—	2026-09-29
CVE-2026-100817 MEDIUM 5.4 2026-09-29 Other issue in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	MEDIUM 5.4	—	2026-09-29
CVE-2026-100816 HIGH 8.1 2026-09-29 Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	HIGH 8.1	—	2026-09-29
CVE-2026-100815 HIGH 8.8 2026-09-29 Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox…	HIGH 8.8	—	2026-09-29
CVE-2026-100814 HIGH 8.8 2026-09-29 Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, a…	HIGH 8.8	—	2026-09-29
CVE-2026-100813 HIGH 8.8 2026-09-29 Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	HIGH 8.8	—	2026-09-29
CVE-2026-100812 MEDIUM 6.5 2026-09-29 Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	MEDIUM 6.5	—	2026-09-29
CVE-2026-100811 CRITICAL 9.6 2026-09-29 Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17,…	CRITICAL 9.6	—	2026-09-29
CVE-2026-100810 CRITICAL 9.8 2026-09-29 Other issue in the DevTools component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	CRITICAL 9.8	—	2026-09-29
CVE-2026-100809 HIGH 8.1 2026-09-29 Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	HIGH 8.1	—	2026-09-29
CVE-2026-100808 HIGH 8.8 2026-09-29 Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	HIGH 8.8	—	2026-09-29
CVE-2026-100807 HIGH 8.8 2026-09-29 Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird…	HIGH 8.8	—	2026-09-29
CVE-2026-100806 MEDIUM 4.3 2026-09-29 Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	MEDIUM 4.3	—	2026-09-29
CVE-2026-100805 HIGH 7.5 2026-09-29 Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	HIGH 7.5	—	2026-09-29
CVE-2026-100804 CRITICAL 9.6 2026-09-29 Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	CRITICAL 9.6	—	2026-09-29
CVE-2026-100803 HIGH 8.1 2026-09-29 Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 1…	HIGH 8.1	—	2026-09-29
CVE-2026-100802 MEDIUM 4.3 2026-09-29 Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	MEDIUM 4.3	—	2026-09-29
CVE-2026-100801 HIGH 8.8 2026-09-29 Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, …	HIGH 8.8	—	2026-09-29
CVE-2026-100800 CRITICAL 9.6 2026-09-29 Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 1…	CRITICAL 9.6	—	2026-09-29
CVE-2026-100799 MEDIUM 4.3 2026-09-29 Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	MEDIUM 4.3	—	2026-09-29
CVE-2026-100798 HIGH 8.1 2026-09-29 Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	HIGH 8.1	—	2026-09-29
CVE-2026-100797 HIGH 8.8 2026-09-29 Privilege escalation due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbir…	HIGH 8.8	—	2026-09-29
CVE-2026-100796 HIGH 8.8 2026-09-29 Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	HIGH 8.8	—	2026-09-29
CVE-2026-100795 MEDIUM 6.5 2026-09-29 Denial-of-service in the Networking component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	MEDIUM 6.5	—	2026-09-29
CVE-2026-100794 CRITICAL 9.6 2026-09-29 Sandbox escape due to incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, …	CRITICAL 9.6	—	2026-09-29
CVE-2026-100793 MEDIUM 6.5 2026-09-29 JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	MEDIUM 6.5	—	2026-09-29
CVE-2026-100792 HIGH 7.1 2026-09-29 JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbir…	HIGH 7.1	—	2026-09-29
CVE-2026-100791 HIGH 8.8 2026-09-29 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fi…	HIGH 8.8	—	2026-09-29
CVE-2026-100790 HIGH 8.8 2026-09-29 Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, F…	HIGH 8.8	—	2026-09-29
CVE-2026-100789 HIGH 8.8 2026-09-29 Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, …	HIGH 8.8	—	2026-09-29
CVE-2026-100788 CRITICAL 9.8 2026-09-29 Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 1…	CRITICAL 9.8	—	2026-09-29
CVE-2026-100787 CRITICAL 9.6 2026-09-29 Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	CRITICAL 9.6	—	2026-09-29
CVE-2026-100786 CRITICAL 9.6 2026-09-29 Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunder…	CRITICAL 9.6	—	2026-09-29
CVE-2026-100785 HIGH 8.8 2026-09-29 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fi…	HIGH 8.8	—	2026-09-29
CVE-2026-100784 HIGH 8.8 2026-09-29 Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153…	HIGH 8.8	—	2026-09-29
CVE-2026-100783 MEDIUM 4.3 2026-09-29 Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, F…	MEDIUM 4.3	—	2026-09-29
CVE-2026-100782 HIGH 8.8 2026-09-29 Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunde…	HIGH 8.8	—	2026-09-29
CVE-2026-100781 CRITICAL 9.6 2026-09-29 Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, T…	CRITICAL 9.6	—	2026-09-29

Gérez votre parc avec Appaloosa

Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.

Découvrir le MDM Appaloosa