Vulnérabilités des apps suivies

HIGH 7.8

2025-03-11

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-03-11

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

HIGH 7.0

2025-03-11

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-03-11

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Remote Desktop Client Remote Code Execution Vulnerability

Windows Core Messaging Elevation of Privileges Vulnerability

Windows Server Elevation of Privilege Vulnerability

DirectX Graphics Kernel File Denial of Service Vulnerability

NTLM Hash Disclosure Spoofing Vulnerability

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

Windows NTFS Information Disclosure Vulnerability

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is…

Windows Subsystem for Linux (WSL2) Kernel Remote Code Execution Vulnerability

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Microsoft Windows File Explorer Spoofing Vulnerability

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Windows Domain Name Service Remote Code Execution Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Windows USB Video Class System Driver Information Disclosure Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Windows Remote Desktop Services Remote Code Execution Vulnerability

MapUrlToZone Security Feature Bypass Vulnerability

Windows exFAT File System Remote Code Execution Vulnerability

Synaptics: CVE-2024-9157 Synaptics Service Binaries DLL Loading Vulnerability

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue

HIGH 8.8

2025-03-10

Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chr…

HIGH 8.8

2025-03-10

Use after free in Inspector in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (…

HIGH 8.8

2025-03-10

Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…

HIGH 8.8

2025-03-10

Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…

HIGH 7.0

Mozilla Thunderbird

2025-03-10

Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown…

MEDIUM 5.3

Mozilla Thunderbird

2025-03-10

When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested emai…

A logic issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, watchOS 11. A malicious app may be ab…

A clickjacking issue was addressed with improved out-of-process view handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be abl…