Vulnérabilités
Vulnérabilités des apps suivies
27 631 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 374 figurent au catalogue CISA KEV, donc leur exploitation est avérée.
- CVE correspondantes
- 27 631
- Activement exploitées
- 374
- Fenêtre de publication
- 1997-01-01 → 2026-10-15
Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.
| CVE |
|---|
|
CVE-2019-5783
HIGH 8.8
Missing URI encoding of untrusted input in DevTools in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform a Dangling Markup Injection att… |
|
CVE-2019-5782
HIGH 8.8
Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a craf… |
|
CVE-2019-5781
MEDIUM 6.5
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (… |
|
CVE-2019-5780
HIGH 7.8
Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript … |
|
CVE-2019-5779
MEDIUM 4.3
Insufficient policy validation in ServiceWorker in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to bypass navigation restrictions via a crafte… |
|
CVE-2019-5778
MEDIUM 6.5
A missing case for handling special schemes in permission request checks in Extensions in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced… |
|
CVE-2019-5777
MEDIUM 6.5
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (… |
|
CVE-2019-5776
MEDIUM 6.5
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (… |
|
CVE-2019-5775
MEDIUM 6.5
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (… |
|
CVE-2019-5774
HIGH 8.8
Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who conv… |
|
CVE-2019-5773
MEDIUM 6.5
Insufficient origin validation in IndexedDB in Google Chrome prior to 72.0.3626.81 allowed a remote attacker who had compromised the renderer process to bypass… |
|
CVE-2019-5772
HIGH 8.8
Sharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap co… |
|
CVE-2019-5771
HIGH 8.8
An incorrect JIT of GLSL shaders in SwiftShader in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code via a crafted HTML p… |
|
CVE-2019-5770
HIGH 8.8
Insufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory read via a crafted H… |
|
CVE-2019-5769
HIGH 8.8
Incorrect handling of invalid end character position when front rendering in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentia… |
|
CVE-2019-5768
MEDIUM 6.5
DevTools API not correctly gating on extension capability in DevTools in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to instal… |
|
CVE-2019-5767
MEDIUM 6.5
Insufficient protection of permission UI in WebAPKs in Google Chrome on Android prior to 72.0.3626.81 allowed an attacker who convinced the user to install a m… |
|
CVE-2019-5766
MEDIUM 6.5
Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted … |
|
CVE-2019-5765
MEDIUM 5.5
An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker to obtain potentially sensitive informa… |
|
CVE-2019-5764
HIGH 8.8
Incorrect pointer management in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
|
CVE-2019-5763
HIGH 8.8
Failure to check error conditions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
|
CVE-2019-5762
HIGH 8.8
Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sand… |
|
CVE-2019-5761
HIGH 8.8
Incorrect object lifecycle management in SwiftShader in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption vi… |
|
CVE-2019-5760
HIGH 8.8
Insufficient checks of pointer validity in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a… |
|
CVE-2019-5759
CRITICAL 9.6
Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72.0.3626.81 allowed a remote attacker to potentially perform … |
|
CVE-2019-5758
HIGH 8.8
Incorrect object lifecycle management in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a cr… |
|
CVE-2019-5757
HIGH 8.8
An incorrect object type assumption in SVG in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit object corruption via a craf… |
|
CVE-2019-5756
HIGH 8.8
Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sand… |
|
CVE-2019-5755
HIGH 8.1
Incorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform arbitrary read/write via a crafted HTML p… |
|
CVE-2019-5754
MEDIUM 6.5
Implementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an attacker running or able to cause use of a proxy server to obtain cle… |
|
CVE-2018-20253
HIGH 7.8
In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability during parsing of a crafted LHA / LZH archive formats. Successful… |
|
CVE-2019-0674
HIGH · éditeur
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability |
|
CVE-2019-0673
HIGH · éditeur
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability |
|
CVE-2019-0671
HIGH · éditeur
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability |
|
CVE-2019-0663
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-0662
CRITICAL · éditeur
GDI+ Remote Code Execution Vulnerability |
|
CVE-2019-0660
HIGH · éditeur
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-0659
HIGH · éditeur
Windows Storage Service Elevation of Privilege Vulnerability |
|
CVE-2019-0656
HIGH · éditeur
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2019-0637
HIGH · éditeur
Windows Defender Firewall Security Feature Bypass Vulnerability |
|
CVE-2019-0636
HIGH · éditeur
Windows Information Disclosure Vulnerability |
|
CVE-2019-0635
HIGH · éditeur
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2019-0633
HIGH · éditeur
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2019-0632
HIGH · éditeur
Windows Security Feature Bypass Vulnerability |
|
CVE-2019-0631
HIGH · éditeur
Windows Security Feature Bypass Vulnerability |
|
CVE-2019-0630
HIGH · éditeur
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2019-0628
HIGH · éditeur
Win32k Information Disclosure Vulnerability |
|
CVE-2019-0627
HIGH · éditeur
Windows Security Feature Bypass Vulnerability |
|
CVE-2019-0626
CRITICAL · éditeur
Windows DHCP Server Remote Code Execution Vulnerability |
|
CVE-2019-0625
HIGH · éditeur
Jet Database Engine Remote Code Execution Vulnerability |
Gérez votre parc avec Appaloosa
Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.