Vulnérabilités des apps suivies

HIGH 8.3

2026-05-14

Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted H…

HIGH 8.8

2026-05-14

Out of bounds write in WebAudio in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTM…

HIGH 8.3

2026-05-14

Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a san…

HIGH 8.8

2026-05-14

Use after free in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chrom…

HIGH 7.5

2026-05-14

Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chrom…

HIGH 8.3

2026-05-14

Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium …

HIGH 8.8

2026-05-14

Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted …

HIGH 8.8

2026-05-14

Use after free in Blink in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. …

HIGH 8.8

2026-05-14

Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gest…

MEDIUM 5.3

2026-05-14

Insufficient validation of untrusted input in DataTransfer in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in…

HIGH 8.3

2026-05-14

Use after free in HID in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially …

HIGH 8.3

2026-05-14

Use after free in Aura in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a san…

HIGH 8.3

2026-05-14

Use after free in Input in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially p…

HIGH 8.3

2026-05-14

Use after free in FileSystem in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to poten…

CRITICAL 9.6

2026-05-14

Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chrom…

HIGH 7.5

2026-05-14

Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an o…

HIGH 8.8

2026-05-14

Heap buffer overflow in WebML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML …

CRITICAL 9.6

2026-05-14

Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network.

HIGH 7.4

Microsoft Outlook

2026-05-12

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a…

HIGH 7.7

2026-05-12

Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.

CRITICAL · éditeur

2026-05-12

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

HIGH 7.1

Microsoft PowerPoint

2026-05-12

Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally.

HIGH 7.1

Microsoft Word

2026-05-12

Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile…

MEDIUM 4.3

2026-05-12

Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

HIGH 8.8

2026-05-12

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

HIGH 7.8

2026-05-12

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

Windows TCP/IP Denial of Service Vulnerability

Windows TCP/IP Denial of Service Vulnerability

Windows TCP/IP Denial of Service Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileg…

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

HIGH 8.4

2026-05-12

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

HIGH 8.4

2026-05-12

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

HIGH 8.4

2026-05-12

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CRITICAL · éditeur

2026-05-12

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

HIGH 7.8

2026-05-12

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 8.4

2026-05-12

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

HIGH 7.8

2026-05-12

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

HIGH 7.8

2026-05-12

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 8.4

2026-05-12

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

MEDIUM 5.5

2026-05-12

Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

HIGH 8.8

2026-05-12

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

MEDIUM 4.3

Microsoft Edge

2026-05-12

User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a net…

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile…

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile…

Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate p…