Vulnérabilités
Vulnérabilités des apps suivies
27 656 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 374 figurent au catalogue CISA KEV, donc leur exploitation est avérée.
- CVE correspondantes
- 27 656
- Activement exploitées
- 374
- Fenêtre de publication
- 1997-01-01 → 2026-10-15
Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.
| CVE |
|---|
|
CVE-2018-6039
MEDIUM 6.1
Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a cra… |
|
CVE-2018-6038
MEDIUM 6.5
Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. |
|
CVE-2018-6037
MEDIUM 6.5
Inappropriate implementation in autofill in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain autofill data with insufficient user gestu… |
|
CVE-2018-6036
MEDIUM 6.5
Insufficient data validation in V8 in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user data via a crafted HTML page. |
|
CVE-2018-6035
HIGH 8.8
Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a cr… |
|
CVE-2018-6034
HIGH 8.1
Insufficient data validation in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted H… |
|
CVE-2018-6033
HIGH 8.8
Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox v… |
|
CVE-2018-6032
MEDIUM 6.5
Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a cra… |
|
CVE-2018-6031
HIGH 8.8
Use after free in PDFium in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. |
|
CVE-2018-14647
HIGH 7.5
Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks a… |
|
CVE-2018-10496
HIGH 8.8
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Internet Browser Fixed in version 6.4.0.15. User in… |
|
CVE-2018-1000802
CRITICAL 9.8
Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') … |
|
CVE-2018-8469
HIGH 7.4
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr… |
|
CVE-2018-8467
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8466
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8465
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8464
HIGH 7.5
An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Executio… |
|
CVE-2018-8463
HIGH 7.4
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr… |
|
CVE-2018-8459
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption… |
|
CVE-2018-8457
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr… |
|
CVE-2018-8456
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption… |
|
CVE-2018-8452
MEDIUM 4.3
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engin… |
|
CVE-2018-8430
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file, aka "Word PDF Remote Code Execution Vulnerability.… |
|
CVE-2018-8429
MEDIUM 5.5
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosur… |
|
CVE-2018-8425
MEDIUM 4.3
A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microso… |
|
CVE-2018-8367
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8366
LOW 3.1
An information disclosure vulnerability exists when the Microsoft Edge Fetch API incorrectly handles a filtered response type, aka "Microsoft Edge Information … |
|
CVE-2018-8354
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-8331
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Rem… |
|
CVE-2018-8315
MEDIUM 4.2
An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Di… |
|
CVE-2018-6976
MEDIUM 5.3
The VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the SQLite database. This vulnerability relates to unencrypted file… |
|
CVE-2018-8475
CRITICAL · éditeur
Windows Remote Code Execution Vulnerability |
|
CVE-2018-8468
HIGH · éditeur
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-8462
HIGH · éditeur
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-8455
HIGH · éditeur
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-8449
HIGH · éditeur
Device Guard Security Feature Bypass Vulnerability |
|
CVE-2018-8446
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-8445
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-8443
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-8442
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-8441
HIGH · éditeur
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2018-8440
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2018-8439
CRITICAL · éditeur
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2018-8438
HIGH · éditeur
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2018-8437
HIGH · éditeur
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2018-8436
HIGH · éditeur
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2018-8435
HIGH · éditeur
Windows Hyper-V Security Feature Bypass Vulnerability |
|
CVE-2018-8434
HIGH · éditeur
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2018-8433
HIGH · éditeur
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2018-8424
HIGH · éditeur
Windows GDI Information Disclosure Vulnerability |
Gérez votre parc avec Appaloosa
Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.