Arsenal public
Exploits
871 CVE indexées ont un exploit public prêt à l'emploi, dont 108 au KEV CISA et 330 touchant une app suivie.
- CVE avec exploit
- 871
- Exploits recensés
- 1 034
- Au KEV CISA
- 108
- Sur le parc suivi
- 330
| CVE | Sévérité | Sources | EPSS | Apps |
|---|---|---|---|---|
|
CVE-2017-8548
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain informati… |
HIGH | ExploitDB | 68% | 
|
|
CVE-2016-7237
Local Security Authority Subsystem Service Denial of Service Vulnerability |
HIGH | ExploitDB | 67% | |
|
CVE-2016-7190
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (me… |
HIGH | ExploitDB | 67% |
|
|
CVE-2017-8601
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary… |
HIGH | ExploitDB | 67% |
|
|
CVE-2018-8145
An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide a… |
HIGH | ExploitDB | 67% |
|
|
CVE-2016-7240
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of s… |
HIGH | ExploitDB | 66% |
|
|
CVE-2017-14496
Indexed via Android Security Bulletin — full NVD metadata pending. |
HIGH | ExploitDB | 66% | |
|
CVE-2018-0933
ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to ho… |
HIGH | ExploitDB | 66% |
|
|
CVE-2018-0953
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, ak… |
HIGH | ExploitDB | 66% |
|
|
CVE-2018-0980
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft E… |
HIGH | ExploitDB | 66% |
|
|
CVE-2018-8139
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, ak… |
HIGH | ExploitDB | 66% |
|
|
CVE-2018-0934
ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to ho… |
HIGH | ExploitDB | 66% |
|
|
CVE-2017-11811
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execu… |
HIGH | ExploitDB | 65% |
|
|
CVE-2017-11909
ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the con… |
HIGH | ExploitDB | 65% |
|
|
CVE-2017-11911
ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the con… |
HIGH | ExploitDB | 65% |
|
|
CVE-2018-0835
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code ex… |
HIGH | ExploitDB | 65% |
|
|
CVE-2018-0837
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code ex… |
HIGH | ExploitDB | 65% |
|
|
CVE-2018-0838
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code ex… |
HIGH | ExploitDB | 65% |
|
|
CVE-2018-0860
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code ex… |
HIGH | ExploitDB | 65% |
|
|
CVE-2016-7203
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of s… |
HIGH | ExploitDB | 65% |
|
|
CVE-2017-11764
Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the co… |
HIGH | ExploitDB | 64% |
|
|
CVE-2017-11861
Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain th… |
HIGH | ExploitDB | 64% |
|
|
CVE-2017-9417
Broadcom BCM43xx Remote Code Execution Vulnerability |
HIGH | ExploitDB | 64% | |
|
CVE-2023-4911
KEV
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment vari… |
HIGH | ExploitDB | 64% | — |
|
CVE-2017-11799
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execu… |
HIGH | ExploitDB | 64% |
|
|
CVE-2011-0609
Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and… |
HIGH | ExploitDB | 64% | 
|
|
CVE-2016-0151
KEV
The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windo… |
HIGH | ExploitDB | 63% | |
|
CVE-2017-11914
ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same u… |
HIGH | ExploitDB | 63% |
|
|
CVE-2017-11918
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the … |
HIGH | ExploitDB | 63% |
|
|
CVE-2018-8617
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft E… |
HIGH | ExploitDB | 62% |
|
|
CVE-2017-11839
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacke… |
HIGH | ExploitDB | 62% |
|
|
CVE-2025-24054
KEV
NTLM Hash Disclosure Spoofing Vulnerability |
HIGH | ExploitDB | 62% | |
|
CVE-2017-0059
KEV
Microsoft Browser Information Disclosure Vulnerability |
HIGH | ExploitDB | 62% | — |
|
CVE-2018-6065
Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prio… |
HIGH | ExploitDB | 60% |
|
|
CVE-2024-21338
KEV
Windows Kernel Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 60% | |
|
CVE-2017-11840
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 al… |
HIGH | ExploitDB | 60% |
|
|
CVE-2017-11841
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 al… |
HIGH | ExploitDB | 60% |
|
|
CVE-2017-11870
ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user… |
HIGH | ExploitDB | 60% |
|
|
CVE-2016-7194
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (me… |
HIGH | ExploitDB | 58% |
|
|
CVE-2017-0101
KEV
Windows Transaction Manager Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 57% | — |
|
CVE-2016-3222
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted w… |
HIGH | ExploitDB | 57% |
|
|
CVE-2017-8635
Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 an… |
HIGH | ExploitDB | 56% |
|
|
CVE-2019-14322
In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames. |
HIGH | ExploitDB Nuclei | 56% | — |
|
CVE-2018-0935
Scripting Engine Memory Corruption Vulnerability |
HIGH | ExploitDB | 56% | — |
|
CVE-2023-22809
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variabl… |
HIGH | ExploitDB | 55% | — |
|
CVE-2026-2441
KEV
Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbo… |
HIGH | ExploitDB | 55% |
|
|
CVE-2018-0834
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code ex… |
HIGH | ExploitDB | 55% |
|
|
CVE-2016-3357
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Ma… |
HIGH | ExploitDB | 55% | 
|
|
CVE-2017-8657
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in … |
HIGH | ExploitDB | 55% |
|
|
CVE-2016-3209
GDI+ Information Disclosure Vulnerability |
HIGH | ExploitDB | 54% |
Exploits agrégés depuis ExploitDB, Nuclei, Metasploit et les PoC GitHub, mappés aux CVE que Scout indexe. À des fins de recherche défensive et de test d'exposition uniquement.