Vulnérabilités des apps suivies

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

MEDIUM 6.1

Navigateur Opera

2020-12-23

URLs using “javascript:” have the protocol removed when pasted into the address bar to protect users from cross-site scripting (XSS) attacks, but in certain ci…

In startInputUncheckedLocked of InputMethodManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local informa…

MEDIUM 4.3

Microsoft Edge

2020-12-10

Microsoft Edge for Android Spoofing Vulnerability

MEDIUM 4.2

Microsoft Edge

2020-12-10

Chakra Scripting Engine Memory Corruption Vulnerability

MEDIUM 6.5

2020-12-10

Microsoft Excel Security Feature Bypass Vulnerability

HIGH 7.8

2020-12-10

Microsoft Excel Remote Code Execution Vulnerability

HIGH 7.8

2020-12-10

Microsoft Excel Remote Code Execution Vulnerability

HIGH 7.8

2020-12-10

Microsoft Excel Remote Code Execution Vulnerability

MEDIUM 5.5

2020-12-10

Microsoft Excel Information Disclosure Vulnerability

HIGH 7.8

2020-12-10

Microsoft Excel Remote Code Execution Vulnerability

HIGH 7.8

2020-12-10

Microsoft PowerPoint Remote Code Execution Vulnerability

HIGH 7.8

2020-12-10

Microsoft Excel Remote Code Execution Vulnerability

MEDIUM 6.5

2020-12-10

Microsoft Outlook Information Disclosure Vulnerability

HIGH 8.8

Mozilla Thunderbird

2020-12-09

When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on p…

HIGH 8.8

2020-12-09

Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some of these bugs showed evidence of memory corruption and we presu…

MEDIUM 6.5

2020-12-09

Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; res…

MEDIUM 6.5

2020-12-09

Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed password. If, when…

MEDIUM 6.5

2020-12-09

When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming from a DoH resolver.…

HIGH 8.8

2020-12-09

If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other pointers, leading to a potential use-after-free…

HIGH 8.8

2020-12-09

During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potent…

MEDIUM 6.1

2020-12-09

Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached through a ServiceWorker. This could lead to a…

MEDIUM 6.1

2020-12-09

In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and therefore lead to XSS. This vulnerability affects Firefox …

MEDIUM 4.3

2020-12-09

It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or other…

MEDIUM 6.1

2020-12-09

A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of expl…

HIGH 8.8

2020-12-09

In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. This vulnerab…

LOW 3.3

iTunes

2020-12-08

An information disclosure issue existed in the transition of program state. This issue was addressed with improved state handling. This issue is fixed in iTune…

HIGH 7.8

iTunes

2020-12-08

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iTunes for Windows 12.10.9. Processing a m…

A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSP…

A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may al…

Windows SMB Information Disclosure Vulnerability

Windows Overlay Filter Security Feature Bypass Vulnerability

Windows Error Reporting Information Disclosure Vulnerability

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Lock Screen Security Feature Bypass Vulnerability

Windows GDI+ Information Disclosure Vulnerability

Windows Digital Media Receiver Elevation of Privilege Vulnerability

Windows NTFS Remote Code Execution Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Windows Error Reporting Information Disclosure Vulnerability

Windows Network Connections Service Elevation of Privilege Vulnerability

Kerberos Security Feature Bypass Vulnerability

Windows Backup Engine Elevation of Privilege Vulnerability

Windows Backup Engine Elevation of Privilege Vulnerability

Windows Backup Engine Elevation of Privilege Vulnerability

Windows Backup Engine Elevation of Privilege Vulnerability