Vulnérabilités
Vulnérabilités des apps suivies
26 371 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 373 figurent au catalogue CISA KEV, donc leur exploitation est avérée.
- CVE correspondantes
- 26 371
- Activement exploitées
- 373
- Fenêtre de publication
- 1997-01-01 → 2026-10-06
Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.
| CVE |
|---|
|
CVE-2022-1143
HIGH 8.8
Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to … |
|
CVE-2022-1142
HIGH 8.8
Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to … |
|
CVE-2022-1141
HIGH 8.8
Use after free in File Manager in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to… |
|
CVE-2022-1139
MEDIUM 6.5
Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted … |
|
CVE-2022-1138
MEDIUM 6.5
Inappropriate implementation in Web Cursor in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who had compromised the renderer process to obscur… |
|
CVE-2022-1137
MEDIUM 6.5
Inappropriate implementation in Extensions in Google Chrome prior to 100.0.4896.60 allowed an attacker who convinced a user to install a malicious extension to… |
|
CVE-2022-1136
HIGH 8.8
Use after free in Tab Strip in Google Chrome prior to 100.0.4896.60 allowed an attacker who convinced a user to install a malicious extension to potentially ex… |
|
CVE-2022-1135
HIGH 8.8
Use after free in Shopping Cart in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via standard feature u… |
|
CVE-2022-1134
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-1133
HIGH 8.8
Use after free in WebRTC Perf in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-1132
MEDIUM 6.1
Inappropriate implementation in Virtual Keyboard in Google Chrome on Chrome OS prior to 100.0.4896.60 allowed a local attacker to bypass navigation restriction… |
|
CVE-2022-1131
HIGH 8.8
Use after free in Cast UI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-1130
HIGH 8.1
Insufficient validation of trust input in WebOTP in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to send arbitrary intents from an… |
|
CVE-2022-1129
MEDIUM 6.5
Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to spoof the contents of the Omni… |
|
CVE-2022-1128
MEDIUM 6.5
Inappropriate implementation in Web Share API in Google Chrome on Windows prior to 100.0.4896.60 allowed an attacker on the local network segment to leak cross… |
|
CVE-2022-1127
HIGH 8.8
Use after free in QR Code Generator in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interacti… |
|
CVE-2022-1125
HIGH 8.8
Use after free in Portals in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to pote… |
|
CVE-2022-1096
HIGH 8.8
KEV
Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-0980
HIGH 8.8
Use after free in New Tab Page in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install a malicious extension to potentially … |
|
CVE-2022-0979
HIGH 8.8
Use after free in Safe Browsing in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user int… |
|
CVE-2022-0978
HIGH 8.8
Use after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-0977
CRITICAL 9.6
Use after free in Browser UI in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user inte… |
|
CVE-2022-0976
HIGH 8.8
Heap buffer overflow in GPU in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-0975
HIGH 8.8
Use after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-0974
HIGH 8.8
Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user int… |
|
CVE-2022-0973
CRITICAL 9.6
Use after free in Safe Browsing in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-0972
HIGH 8.8
Use after free in Extensions in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install a malicious extension to potentially ex… |
|
CVE-2022-0971
HIGH 8.8
Use after free in Blink Layout in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who had compromised the renderer process to potentia… |
|
CVE-2022-29187
HIGH 7.8
Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is vulnerable to privil… |
|
CVE-2022-33644
HIGH · éditeur
Xbox Live Save Service Elevation of Privilege Vulnerability |
|
CVE-2022-30226
HIGH · éditeur
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2022-30225
HIGH · éditeur
Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2022-30224
HIGH · éditeur
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
|
CVE-2022-30223
HIGH · éditeur
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2022-30222
HIGH · éditeur
Windows Shell Remote Code Execution Vulnerability |
|
CVE-2022-30221
CRITICAL · éditeur
Windows Graphics Component Remote Code Execution Vulnerability |
|
CVE-2022-30220
HIGH · éditeur
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2022-30216
HIGH · éditeur
Windows Server Service Tampering Vulnerability |
|
CVE-2022-30215
HIGH · éditeur
Active Directory Federation Services Elevation of Privilege Vulnerability |
|
CVE-2022-30214
HIGH · éditeur
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-30213
HIGH · éditeur
Windows GDI+ Information Disclosure Vulnerability |
|
CVE-2022-30212
HIGH · éditeur
Windows Connected Devices Platform Service Information Disclosure Vulnerability |
|
CVE-2022-30211
HIGH · éditeur
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
|
CVE-2022-30209
HIGH · éditeur
Windows IIS Server Elevation of Privilege Vulnerability |
|
CVE-2022-30208
HIGH · éditeur
Windows Security Account Manager (SAM) Denial of Service Vulnerability |
|
CVE-2022-30206
HIGH · éditeur
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2022-30205
HIGH · éditeur
Windows Group Policy Elevation of Privilege Vulnerability |
|
CVE-2022-30203
HIGH · éditeur
Windows Boot Manager Security Feature Bypass Vulnerability |
|
CVE-2022-30202
HIGH · éditeur
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
|
CVE-2022-29900
HIGH · éditeur
AMD: CVE-2022-29900 AMD CPU Branch Type Confusion |
Gérez votre parc avec Appaloosa
Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.