Vulnérabilités
Vulnérabilités des apps suivies
27 631 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 374 figurent au catalogue CISA KEV, donc leur exploitation est avérée.
- CVE correspondantes
- 27 631
- Activement exploitées
- 374
- Fenêtre de publication
- 1997-01-01 → 2026-10-15
Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.
| CVE |
|---|
|
CVE-2019-2110
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2019-10535
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2019-10490
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2018-19824
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2018-13916
CRITICAL · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2018-11902
HIGH · éditeur
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2019-17051
HIGH 7.8
Evernote before 7.13 GA on macOS allows code execution because the com.apple.quarantine attribute is not used for attachment files, as demonstrated by a one-cl… |
|
CVE-2019-16935
MEDIUM 6.1
The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/Do… |
|
CVE-2019-11927
HIGH 7.8
An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags … |
|
CVE-2019-11755
HIGH 7.5
A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer was shown as having a valid digital signature, although the sign… |
|
CVE-2019-11752
HIGH 8.8
It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and a potentially exploi… |
|
CVE-2019-11746
HIGH 8.8
A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This results in a potentially exploitable c… |
|
CVE-2019-11744
MEDIUM 6.1
Some HTML elements, such as <title> and <textarea>, can contain literal angle brackets without treating them as markup. It is possible to pass a li… |
|
CVE-2019-11743
LOW 3.7
Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instances for the unload event, which restricts … |
|
CVE-2019-11742
MEDIUM 6.5
A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and a <canvas> element due to an err… |
|
CVE-2019-11740
HIGH 8.8
Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox 60.8. Some of these bugs showed evidenc… |
|
CVE-2019-11739
MEDIUM 6.5
Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunde… |
|
CVE-2019-8075
HIGH 7.5
Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Di… |
|
CVE-2019-16248
MEDIUM 5.5
The "delete for" feature in Telegram before 5.11 on Android does not delete shared media files from the Telegram Images directory. In other words, there is a p… |
|
CVE-2019-1300
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1299
MEDIUM 6.5
An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory, aka 'Microsoft Edge based on Edge H… |
|
CVE-2019-1298
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1297
HIGH 8.8
KEV
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
|
CVE-2019-1263
MEDIUM 5.5
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosur… |
|
CVE-2019-1237
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1220
MEDIUM 4.3
A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of requests for specific URLs, aka 'Microsoft… |
|
CVE-2019-1217
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1138
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1303
HIGH · éditeur
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1294
HIGH · éditeur
Windows Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2019-1293
HIGH · éditeur
Windows SMB Client Driver Information Disclosure Vulnerability |
|
CVE-2019-1292
HIGH · éditeur
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1291
CRITICAL · éditeur
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2019-1290
CRITICAL · éditeur
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2019-1289
HIGH · éditeur
Windows Update Delivery Optimization Elevation of Privilege Vulnerability |
|
CVE-2019-1287
HIGH · éditeur
Windows Network Connectivity Assistant Elevation of Privilege Vulnerability |
|
CVE-2019-1286
HIGH · éditeur
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-1285
HIGH · éditeur
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-1282
HIGH · éditeur
Windows Common Log File System Driver Information Disclosure Vulnerability |
|
CVE-2019-1280
CRITICAL · éditeur
LNK Remote Code Execution Vulnerability |
|
CVE-2019-1278
HIGH · éditeur
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1277
HIGH · éditeur
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2019-1274
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-1273
HIGH · éditeur
Active Directory Federation Services XSS Vulnerability |
|
CVE-2019-1272
HIGH · éditeur
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2019-1271
HIGH · éditeur
Windows Media Elevation of Privilege Vulnerability |
|
CVE-2019-1270
HIGH · éditeur
Microsoft Windows Store Installer Elevation of Privilege Vulnerability |
|
CVE-2019-1269
HIGH · éditeur
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2019-1268
HIGH · éditeur
Winlogon Elevation of Privilege Vulnerability |
|
CVE-2019-1267
HIGH · éditeur
Microsoft Compatibility Appraiser Elevation of Privilege Vulnerability |
Gérez votre parc avec Appaloosa
Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.