Vulnérabilités des apps suivies

MEDIUM 6.5

2018-06-19

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker …

HIGH 7.5

2018-06-18

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use…

MEDIUM 5.5

2018-06-14

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosur…

MEDIUM 6.5

2018-06-14

An elevation of privilege vulnerability exists when Microsoft Outlook does not validate attachment headers properly, aka "Microsoft Outlook Elevation of Privil…

HIGH 7.5

Microsoft Edge

2018-06-14

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T…

MEDIUM 4.3

Microsoft Edge

2018-06-14

A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka "Microsoft Edge Security Feature Bypas…

MEDIUM 4.3

Microsoft Edge

2018-06-14

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerabili…

HIGH 7.5

Microsoft Edge

2018-06-14

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…

HIGH 7.5

Microsoft Edge

2018-06-14

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…

HIGH 7.5

Microsoft Edge

2018-06-14

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T…

HIGH 7.5

Microsoft Edge

2018-06-14

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T…

MEDIUM 4.3

Microsoft Edge

2018-06-14

An information disclosure vulnerability exists when Edge improperly marks files, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Micros…

MEDIUM 6.4

Dropbox

2018-06-13

An issue was discovered in the com.getdropbox.Dropbox app 100.2 for iOS. The LAContext class for Biometric (TouchID) validation allows authentication bypass by…

Media Foundation Memory Corruption Vulnerability

Windows GDI Information Disclosure Vulnerability

Win32k Elevation of Privilege Vulnerability

HTTP Protocol Stack Remote Code Execution Vulnerability

HTTP.sys Denial of Service Vulnerability

Windows DNSAPI Remote Code Execution Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

Hypervisor Code Integrity Elevation of Privilege Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

Windows Desktop Bridge Elevation of Privilege Vulnerability

Windows Remote Code Execution Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

Windows Remote Code Execution Vulnerability

Windows Wireless Network Profile Information Disclosure Vulnerability

Windows Desktop Bridge Elevation of Privilege Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Denial of Service Vulnerability

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

WEBDAV Denial of Service Vulnerability

HIDParser Elevation of Privilege Vulnerability

Cortana Elevation of Privilege Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Code Integrity Module Denial of Service Vulnerability

NTFS Elevation of Privilege Vulnerability

Windows Elevation of Privilege Vulnerability

MEDIUM 6.5

Mozilla Thunderbird

2018-06-11

Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.

HIGH 7.5

Mozilla Thunderbird

2018-06-11

Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.

CRITICAL 9.8

2018-06-11

Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes du…

HIGH 8.1

2018-06-11

A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the us…

HIGH 7.5

2018-06-11

In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated with downloaded files and will not show any …

MEDIUM 4.3

Mozilla Thunderbird

2018-06-11

It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a user opening a remote attachment which is …

MEDIUM 5.3

2018-06-11

Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element. This could allow a m…

HIGH 7.5

Mozilla Thunderbird

2018-06-11

Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird …