Vulnérabilités

Vulnérabilités des apps suivies

26 374 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 373 figurent au catalogue CISA KEV, donc leur exploitation est avérée.

CVE correspondantes: 26 374
Activement exploitées: 373
Fenêtre de publication: 1997-01-01 → 2026-10-06

Toutes les CVE 26 374 KEV CISA 373 Exploit public 638 Toutes sévérités Critique Élevé Modéré Faible Masquer les N/A

Toutes plateformes iOS Android macOS Windows

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

26 374 entrées

CVE	Sévérité	KEV	Apps	Publié
CVE-2021-21148 HIGH 8.8 KEV 2021-02-09 Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	KEV		2021-02-09
CVE-2021-21147 MEDIUM 4.3 2021-02-09 Inappropriate implementation in Skia in Google Chrome prior to 88.0.4324.146 allowed a local attacker to spoof the contents of the Omnibox (URL bar) via a craf…	MEDIUM 4.3	—		2021-02-09
CVE-2021-21146 CRITICAL 9.6 2021-02-09 Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker who had compromised the renderer process to potentially perform …	CRITICAL 9.6	—		2021-02-09
CVE-2021-21145 HIGH 8.8 2021-02-09 Use after free in Fonts in Google Chrome prior to 88.0.4324.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-02-09
CVE-2021-21144 HIGH 8.8 2021-02-09 Heap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potenti…	HIGH 8.8	—		2021-02-09
CVE-2021-21143 HIGH 8.8 2021-02-09 Heap buffer overflow in Extensions in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potenti…	HIGH 8.8	—		2021-02-09
CVE-2021-21142 CRITICAL 9.6 2021-02-09 Use after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML …	CRITICAL 9.6	—		2021-02-09
CVE-2021-21141 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a craft…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21140 MEDIUM 6.8 2021-02-09 Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB devic…	MEDIUM 6.8	—		2021-02-09
CVE-2021-21139 MEDIUM 6.5 2021-02-09 Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21138 HIGH 8.6 2021-02-09 Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a crafted file.	HIGH 8.6	—		2021-02-09
CVE-2021-21137 MEDIUM 6.5 2021-02-09 Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21136 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted …	MEDIUM 6.5	—		2021-02-09
CVE-2021-21135 MEDIUM 6.5 2021-02-09 Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML p…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21134 MEDIUM 6.5 2021-02-09 Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page.	MEDIUM 6.5	—		2021-02-09
CVE-2021-21133 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass naviga…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21132 CRITICAL 9.6 2021-02-09 Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted…	CRITICAL 9.6	—		2021-02-09
CVE-2021-21131 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a cra…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21130 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a cra…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21129 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a cra…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21128 HIGH 8.8 2021-02-09 Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-02-09
CVE-2021-21127 HIGH 8.8 2021-02-09 Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted …	HIGH 8.8	—		2021-02-09
CVE-2021-21126 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Ex…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21125 HIGH 8.1 2021-02-09 Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restriction…	HIGH 8.1	—		2021-02-09
CVE-2021-21124 CRITICAL 9.6 2021-02-09 Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox esc…	CRITICAL 9.6	—		2021-02-09
CVE-2021-21123 MEDIUM 6.5 2021-02-09 Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafte…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21122 HIGH 8.8 2021-02-09 Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-02-09
CVE-2021-21121 CRITICAL 9.6 2021-02-09 Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML …	CRITICAL 9.6	—		2021-02-09
CVE-2021-21120 HIGH 8.8 2021-02-09 Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-02-09
CVE-2021-21119 HIGH 8.8 2021-02-09 Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap c…	HIGH 8.8	—		2021-02-09
CVE-2021-21118 HIGH 8.8 2021-02-09 Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory access via a cr…	HIGH 8.8	—		2021-02-09
CVE-2021-21117 HIGH 7.8 2021-02-09 Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a cr…	HIGH 7.8	—		2021-02-09
CVE-2020-16044 HIGH 8.8 2021-02-09 Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet.	HIGH 8.8	—		2021-02-09
CVE-2021-3347 HIGH · éditeur Android 2021-02-09 Microsoft Security Update Guide entry — NVD enrichira.	HIGH · éditeur	—	Android	2021-02-09
CVE-2021-25195 HIGH · éditeur Windows 2021-02-09 Windows PKU2U Elevation of Privilege Vulnerability	HIGH · éditeur	—	Windows	2021-02-09
CVE-2021-24106 HIGH · éditeur Windows 2021-02-09 Windows DirectX Information Disclosure Vulnerability	HIGH · éditeur	—	Windows	2021-02-09
CVE-2021-24103 HIGH · éditeur Windows 2021-02-09 Windows Event Tracing Elevation of Privilege Vulnerability	HIGH · éditeur	—	Windows	2021-02-09
CVE-2021-24102 HIGH · éditeur Windows 2021-02-09 Windows Event Tracing Elevation of Privilege Vulnerability	HIGH · éditeur	—	Windows	2021-02-09
CVE-2021-24098 HIGH · éditeur Windows 2021-02-09 Windows Console Driver Denial of Service Vulnerability	HIGH · éditeur	—	Windows	2021-02-09
CVE-2021-24096 HIGH · éditeur Windows 2021-02-09 Windows Kernel Elevation of Privilege Vulnerability	HIGH · éditeur	—	Windows	2021-02-09
CVE-2021-24094 CRITICAL · éditeur Windows 2021-02-09 Windows TCP/IP Remote Code Execution Vulnerability	CRITICAL · éditeur	—	Windows	2021-02-09
CVE-2021-24093 CRITICAL · éditeur Windows 2021-02-09 Windows Graphics Component Remote Code Execution Vulnerability	CRITICAL · éditeur	—	Windows	2021-02-09
CVE-2021-24091 CRITICAL · éditeur Windows 2021-02-09 Windows Camera Codec Pack Remote Code Execution Vulnerability	CRITICAL · éditeur	—	Windows	2021-02-09
CVE-2021-24088 CRITICAL · éditeur Windows 2021-02-09 Windows Local Spooler Remote Code Execution Vulnerability	CRITICAL · éditeur	—	Windows	2021-02-09
CVE-2021-24086 HIGH · éditeur Windows 2021-02-09 Windows TCP/IP Denial of Service Vulnerability	HIGH · éditeur	—	Windows	2021-02-09
CVE-2021-24084 HIGH · éditeur Windows 2021-02-09 Windows Mobile Device Management Information Disclosure Vulnerability	HIGH · éditeur	—	Windows	2021-02-09
CVE-2021-24083 HIGH · éditeur Windows 2021-02-09 Windows Address Book Remote Code Execution Vulnerability	HIGH · éditeur	—	Windows	2021-02-09
CVE-2021-24082 HIGH · éditeur Windows 2021-02-09 Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability	HIGH · éditeur	—	Windows	2021-02-09
CVE-2021-24081 CRITICAL · éditeur Windows 2021-02-09 Microsoft Windows Codecs Library Remote Code Execution Vulnerability	CRITICAL · éditeur	—	Windows	2021-02-09
CVE-2021-24080 MEDIUM · éditeur Windows 2021-02-09 Windows Trust Verification API Denial of Service Vulnerability	MEDIUM · éditeur	—	Windows	2021-02-09

Gérez votre parc avec Appaloosa

Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.

Découvrir le MDM Appaloosa