Vulnérabilités
Vulnérabilités des apps suivies
26 363 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 373 figurent au catalogue CISA KEV, donc leur exploitation est avérée.
- CVE correspondantes
- 26 363
- Activement exploitées
- 373
- Fenêtre de publication
- 1997-01-01 → 2026-10-06
Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.
| CVE |
|---|
|
CVE-2023-23402
HIGH · éditeur
Windows Media Remote Code Execution Vulnerability |
|
CVE-2023-23401
HIGH · éditeur
Windows Media Remote Code Execution Vulnerability |
|
CVE-2023-23400
HIGH · éditeur
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2023-23394
HIGH · éditeur
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability |
|
CVE-2023-23393
HIGH · éditeur
Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability |
|
CVE-2023-23392
CRITICAL · éditeur
HTTP Protocol Stack Remote Code Execution Vulnerability |
|
CVE-2023-23388
HIGH · éditeur
Windows Bluetooth Driver Elevation of Privilege Vulnerability |
|
CVE-2023-23385
HIGH · éditeur
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability |
|
CVE-2023-21708
CRITICAL · éditeur
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2023-1018
CRITICAL · éditeur
CERT/CC: CVE-2023-1018 TPM2.0 Module Library Elevation of Privilege Vulnerability |
|
CVE-2023-1017
CRITICAL · éditeur
CERT/CC: CVE-2023-1017 TPM2.0 Module Library Elevation of Privilege Vulnerability |
|
CVE-2021-29647
MEDIUM · éditeur
Microsoft Security Update Guide entry — NVD enrichira. |
|
CVE-2023-1236
MEDIUM 4.3
Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML… |
|
CVE-2023-1235
MEDIUM 6.3
Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit he… |
|
CVE-2023-1234
MEDIUM 4.3
Inappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to perform domain spoofing via a crafted H… |
|
CVE-2023-1233
MEDIUM 4.3
Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious exte… |
|
CVE-2023-1232
MEDIUM 4.3
Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to obtain potentially sensitive informatio… |
|
CVE-2023-1231
MEDIUM 4.3
Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to potentially spoof the contents of the … |
|
CVE-2023-1230
MEDIUM 4.3
Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malici… |
|
CVE-2023-1229
MEDIUM 4.3
Inappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a cr… |
|
CVE-2023-1228
MEDIUM 4.3
Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a… |
|
CVE-2023-1227
HIGH 8.8
Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user to engage in specific UI interaction to… |
|
CVE-2023-1226
MEDIUM 6.5
Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content security policy via a c… |
|
CVE-2023-1225
MEDIUM 4.3
Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 111.0.5563.64 allowed a remote attacker to bypass same origin policy via a craft… |
|
CVE-2023-1224
MEDIUM 4.3
Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a c… |
|
CVE-2023-1223
MEDIUM 4.3
Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origin data via a crafte… |
|
CVE-2023-1222
HIGH 8.8
Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
|
CVE-2023-1221
MEDIUM 4.3
Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious exten… |
|
CVE-2023-1220
HIGH 8.8
Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit h… |
|
CVE-2023-1219
HIGH 8.8
Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially explo… |
|
CVE-2023-1218
HIGH 8.8
Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
|
CVE-2023-1217
MEDIUM 6.5
Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process … |
|
CVE-2023-1216
HIGH 8.8
Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in direct UI interaction to … |
|
CVE-2023-1215
HIGH 8.8
Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
|
CVE-2023-1214
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
|
CVE-2023-1213
HIGH 8.8
Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.… |
|
CVE-2023-20966
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2023-20964
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2023-20963
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2023-20962
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2023-20960
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2023-20959
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2023-20958
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2023-20957
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2023-20956
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2023-20955
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2023-20954
CRITICAL · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2023-20953
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2023-20952
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2023-20951
CRITICAL · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
Gérez votre parc avec Appaloosa
Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.