Vulnérabilités
Vulnérabilités des apps suivies
25 753 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 372 figurent au catalogue CISA KEV, donc leur exploitation est avérée.
- CVE correspondantes
- 25 753
- Activement exploitées
- 372
- Fenêtre de publication
- 1997-01-01 → 2026-09-17
Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.
| CVE |
|---|
|
CVE-2026-33841
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-33840
HIGH 7.8
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32170
MEDIUM 6.7
Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-46311
HIGH 7.5
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.… |
|
CVE-2025-43524
HIGH 8.8
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.2. An app … |
|
CVE-2026-8401
CRITICAL 9.8
Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11. |
|
CVE-2026-8391
MEDIUM 5.3
Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11. |
|
CVE-2026-8390
HIGH 7.3
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150.0.3. |
|
CVE-2026-8389
HIGH 8.8
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3. |
|
CVE-2026-8388
MEDIUM 6.5
Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11,… |
|
CVE-2026-43049
HIGH · éditeur
HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure |
|
CVE-2026-42896
HIGH · éditeur
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2026-42825
HIGH · éditeur
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2026-41097
HIGH · éditeur
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2026-41096
CRITICAL · éditeur
Windows DNS Client Remote Code Execution Vulnerability |
|
CVE-2026-41095
HIGH · éditeur
Data Deduplication Elevation of Privilege Vulnerability |
|
CVE-2026-41089
CRITICAL · éditeur
Windows Netlogon Remote Code Execution Vulnerability |
|
CVE-2026-40415
HIGH · éditeur
Windows TCP/IP Remote Code Execution Vulnerability |
|
CVE-2026-40410
HIGH · éditeur
Windows SMB Client Elevation of Privilege Vulnerability |
|
CVE-2026-40408
HIGH · éditeur
Windows WAN ARP Driver Elevation of Privilege Vulnerability |
|
CVE-2026-40407
HIGH · éditeur
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2026-40406
HIGH · éditeur
Windows TCP/IP Information Disclosure Vulnerability |
|
CVE-2026-40405
HIGH · éditeur
Windows TCP/IP Denial of Service Vulnerability |
|
CVE-2026-40403
CRITICAL · éditeur
Windows Graphics Component Remote Code Execution Vulnerability |
|
CVE-2026-40402
CRITICAL · éditeur
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-40398
HIGH · éditeur
Windows Remote Desktop Services Elevation of Privilege Vulnerability |
|
CVE-2026-40382
HIGH · éditeur
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2026-40380
HIGH · éditeur
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability |
|
CVE-2026-40377
HIGH · éditeur
Microsoft Cryptographic Services Elevation of Privilege Vulnerability |
|
CVE-2026-35424
HIGH · éditeur
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability |
|
CVE-2026-35423
HIGH · éditeur
Windows 11 Telnet Client Information Disclosure Vulnerability |
|
CVE-2026-35422
HIGH · éditeur
Windows TCP/IP Driver Security Feature Bypass Vulnerability |
|
CVE-2026-35421
CRITICAL · éditeur
Windows GDI Remote Code Execution Vulnerability |
|
CVE-2026-35420
HIGH · éditeur
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-35419
HIGH · éditeur
Windows DWM Core Library Information Disclosure Vulnerability |
|
CVE-2026-35418
HIGH · éditeur
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-35415
HIGH · éditeur
Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
|
CVE-2026-34351
HIGH · éditeur
Windows TCP/IP Elevation of Privilege Vulnerability |
|
CVE-2026-34350
HIGH · éditeur
Windows Storport Miniport Driver Denial of Service Vulnerability |
|
CVE-2026-34347
HIGH · éditeur
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2026-34344
HIGH · éditeur
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2026-34343
HIGH · éditeur
Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability |
|
CVE-2026-34342
HIGH · éditeur
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2026-34341
HIGH · éditeur
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability |
|
CVE-2026-34340
HIGH · éditeur
Windows Projected File System Elevation of Privilege Vulnerability |
|
CVE-2026-34339
HIGH · éditeur
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
|
CVE-2026-34338
HIGH · éditeur
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2026-34337
HIGH · éditeur
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-34334
HIGH · éditeur
Windows TCP/IP Elevation of Privilege Vulnerability |
|
CVE-2026-34333
HIGH · éditeur
Windows Win32k Elevation of Privilege Vulnerability |
Gérez votre parc avec Appaloosa
Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.