Vulnérabilités
Vulnérabilités des apps suivies
27 656 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 374 figurent au catalogue CISA KEV, donc leur exploitation est avérée.
- CVE correspondantes
- 27 656
- Activement exploitées
- 374
- Fenêtre de publication
- 1997-01-01 → 2026-10-15
Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.
| CVE |
|---|
|
CVE-2018-5161
MEDIUM 4.3
Crafted message headers can cause a Thunderbird process to hang on receiving the message. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 5… |
|
CVE-2018-5159
CRITICAL 9.8
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds wr… |
|
CVE-2018-5155
CRITICAL 9.8
A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in a potentially exploitable crash. This vu… |
|
CVE-2018-5154
CRITICAL 9.8
A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. T… |
|
CVE-2018-5150
CRITICAL 9.8
Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evidence of memory corruption and we presume … |
|
CVE-2018-5146
CRITICAL · éditeur
An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox… |
|
CVE-2018-5145
CRITICAL 9.8
Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these… |
|
CVE-2018-5144
HIGH 7.3
An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox… |
|
CVE-2018-5129
HIGH 8.6
A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbo… |
|
CVE-2018-5127
HIGH 8.8
A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potentially exploitable crash. This vulnerability… |
|
CVE-2018-5125
HIGH 8.8
Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
|
CVE-2018-5117
MEDIUM 5.3
If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to spoof the displayed U… |
|
CVE-2018-5104
CRITICAL 9.8
A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable cra… |
|
CVE-2018-5103
CRITICAL 9.8
A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This results in a potentially exploitable crash. … |
|
CVE-2018-5102
CRITICAL 9.8
A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable crash. This vulnerabi… |
|
CVE-2018-5099
CRITICAL 9.8
A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that have previously been freed, resulting in… |
|
CVE-2018-5098
CRITICAL 9.8
A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content. This results in a potentially explo… |
|
CVE-2018-5097
CRITICAL 9.8
A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by script content during the… |
|
CVE-2018-5096
CRITICAL 9.8
A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerability affe… |
|
CVE-2018-5095
CRITICAL 9.8
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the u… |
|
CVE-2018-5089
CRITICAL 9.8
Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
|
CVE-2017-7848
MEDIUM 5.3
RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affects Thunderbird < 52.5.2. |
|
CVE-2017-7847
MEDIUM 4.3
Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name. This vulnerability affects Thunderbird < 52.5.2. |
|
CVE-2017-7846
HIGH 8.8
It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website, e.g. via "View -> Feed article -> Website" or in the standard… |
|
CVE-2017-7845
HIGH 8.8
A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library, used for WebGL content. This is due to an inco… |
|
CVE-2017-7830
MEDIUM 6.5
The Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same-origin policy violation and could allow for data theft of URLs… |
|
CVE-2017-7829
MEDIUM 5.3
It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The real sender's address is not displayed i… |
|
CVE-2017-7828
CRITICAL 9.8
A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been freed while still in use. This results in a… |
|
CVE-2017-7826
CRITICAL 9.8
Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
|
CVE-2017-7825
MEDIUM 5.3
Several fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name … |
|
CVE-2017-7824
CRITICAL 9.8
A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being … |
|
CVE-2017-7823
MEDIUM 5.4
The content security policy (CSP) "sandbox" directive did not create a unique origin for the document, causing it to behave as if the "allow-same-origin" keywo… |
|
CVE-2017-7819
CRITICAL 9.8
A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during the resizing have been freed from memory. T… |
|
CVE-2017-7818
CRITICAL 9.8
A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) elements within containers through the DOM. T… |
|
CVE-2017-7814
HIGH 7.8
File downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks though the Phishing and Malware Protection feature and its bl… |
|
CVE-2017-7810
CRITICAL 9.8
Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
|
CVE-2017-7809
CRITICAL 9.8
A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results i… |
|
CVE-2017-7807
HIGH 8.1
A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requir… |
|
CVE-2017-7805
HIGH 7.5
During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for later messages but in some cases, the han… |
|
CVE-2017-7804
HIGH 7.5
The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious code in concert with another vulnerability to write arbitrary d… |
|
CVE-2017-7803
HIGH 7.5
When a page's content security policy (CSP) header contains a "sandbox" directive, other directives are ignored. This results in the incorrect enforcement of C… |
|
CVE-2017-7802
CRITICAL 9.8
A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack… |
|
CVE-2017-7801
CRITICAL 9.8
A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where the updated style object is freed while… |
|
CVE-2017-7800
CRITICAL 9.8
A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This res… |
|
CVE-2017-7793
CRITICAL 9.8
A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially expl… |
|
CVE-2017-7792
CRITICAL 9.8
A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This resul… |
|
CVE-2017-7791
MEDIUM 5.3
On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoo… |
|
CVE-2017-7787
HIGH 7.5
Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page… |
|
CVE-2017-7786
CRITICAL 9.8
A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulne… |
|
CVE-2017-7785
CRITICAL 9.8
A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable… |
Gérez votre parc avec Appaloosa
Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.