Vulnérabilités des apps suivies

Windows Bus Filter Driver Elevation of Privilege Vulnerability

Windows Collaborative Translation Framework Elevation of Privilege Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Microsoft ODBC Driver Remote Code Execution Vulnerability

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Windows GDI Elevation of Privilege Vulnerability

Windows Media Remote Code Execution Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Windows Filtering Platform Elevation of Privilege Vulnerability

iSCSI Target WMI Provider Remote Code Execution Vulnerability

Windows Geolocation Service Remote Code Execution Vulnerability

Windows Media Remote Code Execution Vulnerability

Windows Authentication Elevation of Privilege Vulnerability

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

GDI Elevation of Privilege Vulnerability

Windows GDI Elevation of Privilege Vulnerability

DHCP Server Service Information Disclosure Vulnerability

Windows Remote Desktop Security Feature Bypass Vulnerability

Windows Group Policy Elevation of Privilege Vulnerability

NTFS Elevation of Privilege Vulnerability

Windows CryptoAPI Denial of Service Vulnerability

Windows CryptoAPI Denial of Service Vulnerability

MEDIUM 5.5

2023-06-07

CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c.

HIGH 8.8

2023-06-02

Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCreight and the Mozilla Fuzzing Team repor…

HIGH 8.8

2023-06-02

When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird…

MEDIUM · éditeur

2023-06-02

An attacker could have positioned a `datalist` element to obscure the address bar. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderb…

MEDIUM 6.5

2023-06-02

A type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

HIGH 8.8

2023-06-02

A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefo…

MEDIUM 6.5

2023-06-02

An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102…

MEDIUM 4.3

2023-06-02

In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attac…

HIGH 8.8

2023-06-02

Memory safety bugs present in Firefox 110 and Firefox ESR 102.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort…

MEDIUM 6.5

2023-06-02

Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks. This vulnerability af…

MEDIUM 6.5

2023-06-02

When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resolved those …

HIGH 8.8

2023-06-02

While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash.…

MEDIUM 6.5

2023-06-02

When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. This may have lead future code…

MEDIUM 6.5

2023-06-02

Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially …

HIGH 8.8

Mozilla Thunderbird

2023-06-02

Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these c…

MEDIUM 6.5

2023-06-02

When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash. This vulnerability affects Firefox < 110, T…

HIGH 8.8

2023-06-02

Module load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in <code>ScriptLoadContext</code>. Th…

MEDIUM 6.5

2023-06-02

Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn wo…

HIGH 8.8

2023-06-02

An invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to undefined behavior. This vulnerability affects Firefox < 110, Th…

HIGH 8.8

2023-06-02

Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-…

HIGH 8.1

2023-06-02

After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network …

HIGH 8.8

2023-06-02

When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded was not correctly calculated potentially leading …

HIGH 8.8

Mozilla Firefox

2023-06-02

Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in …

MEDIUM 5.4

2023-06-02

A background script invoking <code>requestFullscreen</code> and then blocking the main thread could force the browser into fullscreen mode indefinitely, result…