Vulnérabilités des apps suivies

Windows Kernel Information Disclosure Vulnerability

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Windows Device Association Broker Service Elevation of Privilege Vulnerability

Windows USB Video Class System Driver Information Disclosure Vulnerability

Windows Remote Desktop Protocol Security Feature Bypass

Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability

Windows BitLocker Security Feature Bypass Vulnerability

Windows BitLocker Security Feature Bypass Vulnerability

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Windows Kernel Security Feature Bypass Vulnerability

Windows BitLocker Security Feature Bypass Vulnerability

Windows BitLocker Security Feature Bypass Vulnerability

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

Windows BitLocker Security Feature Bypass Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability

Windows Storage Management Provider Information Disclosure Vulnerability

Xbox IStorageService Elevation of Privilege Vulnerability

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Hello Security Feature Bypass Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Device Association Broker Service Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Graphics Component Elevation of Privilege Vulnerability

Virtual Secure Mode Spoofing Vulnerability

Microsoft Brokering File System Elevation of Privilege Vulnerability

Microsoft Failover Cluster Information Disclosure Vulnerability

PowerShell Elevation of Privilege Vulnerability

Windows Agere Modem Driver Elevation of Privilege Vulnerability

A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26. An app may bypass Gatekeeper checks.

MEDIUM 4.0

Firefox

2025-09-30

Cookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing information from private tabs to escape Inc…

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 and iPadOS 18.7.1, iOS 26.0.1 and iPadOS 26.0.1, ma…

HIGH 8.8

2025-09-24

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…

HIGH 8.8

2025-09-24

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…

CRITICAL 9.1

2025-09-24

Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (C…

HIGH 8.8

2025-09-24

Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via malicious network t…

HIGH 8.8

2025-09-24

Use after free in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch…

HIGH 8.8

2025-09-24

Use after free in Dawn in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

Cryptographic issue while performing RSA PKCS padding decoding.

MEDIUM 4.7

Microsoft Edge

2025-09-16

Insufficient ui warning of dangerous operations in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.

HIGH 8.8

2025-09-16

Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruptio…

MEDIUM 6.2

2025-09-16

Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140…