Vulnérabilités
Vulnérabilités des apps suivies
28 046 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 374 figurent au catalogue CISA KEV, donc leur exploitation est avérée.
- CVE correspondantes
- 28 046
- Activement exploitées
- 374
- Fenêtre de publication
- 1997-01-01 → 2026-10-20
Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.
| CVE |
|---|
|
CVE-2017-5064
HIGH 8.8
Incorrect handling of DOM changes in Blink in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially exploit heap corruption … |
|
CVE-2017-5061
MEDIUM 5.3
A race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibo… |
|
CVE-2017-5058
HIGH 8.8
A use after free in PrintPreview in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially perform out of bounds memory acces… |
|
CVE-2017-5056
HIGH 8.8
A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perf… |
|
CVE-2017-5055
HIGH 8.8
A use after free in printing in Google Chrome prior to 57.0.2987.133 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read vi… |
|
CVE-2017-7137
HIGH 7.8
An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to execute a… |
|
CVE-2017-7136
HIGH 7.8
An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to execute a… |
|
CVE-2017-7135
HIGH 7.8
An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to execute a… |
|
CVE-2017-7134
HIGH 7.8
An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to execute a… |
|
CVE-2015-1239
MEDIUM 6.5
Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a deni… |
|
CVE-2017-8726
MEDIUM 4.3
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the curre… |
|
CVE-2017-11826
HIGH 7.8
KEV
Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 200… |
|
CVE-2017-11821
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scri… |
|
CVE-2017-11812
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of … |
|
CVE-2017-11811
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte… |
|
CVE-2017-11809
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte… |
|
CVE-2017-11808
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte… |
|
CVE-2017-11807
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scri… |
|
CVE-2017-11806
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scri… |
|
CVE-2017-11805
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scri… |
|
CVE-2017-11804
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte… |
|
CVE-2017-11802
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte… |
|
CVE-2017-11800
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current use… |
|
CVE-2017-11799
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte… |
|
CVE-2017-11798
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the curre… |
|
CVE-2017-11796
HIGH 7.5
ChakraCore and Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engi… |
|
CVE-2017-11794
MEDIUM 4.3
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system, due to how Microsoft Edge handles… |
|
CVE-2017-11792
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user, due to how the scrip… |
|
CVE-2017-11776
HIGH 7.5
Microsoft Outlook 2016 allows an attacker to obtain the email content of a user, due to how Outlook 2016 discloses user email content, aka "Microsoft Outlook I… |
|
CVE-2017-11774
HIGH 7.8
KEV
Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles … |
|
CVE-2017-8727
CRITICAL · éditeur
Internet Explorer Memory Corruption Vulnerability |
|
CVE-2017-8718
HIGH · éditeur
Microsoft JET Database Engine Remote Code Execution Vulnerability |
|
CVE-2017-8717
HIGH · éditeur
Microsoft JET Database Engine Remote Code Execution Vulnerability |
|
CVE-2017-8715
HIGH · éditeur
Device Guard Code Integrity Policy Security Feature Bypass Vulnerability |
|
CVE-2017-8703
HIGH · éditeur
Windows Subsystem for Linux Denial of Service Vulnerability |
|
CVE-2017-8694
HIGH · éditeur
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2017-8693
HIGH · éditeur
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2017-8689
HIGH · éditeur
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2017-13080
Windows Wireless WPA Group Key Reinstallation Vulnerability |
|
CVE-2017-11829
HIGH · éditeur
Windows Update Delivery Optimization Elevation of Privilege Vulnerability |
|
CVE-2017-11824
HIGH · éditeur
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2017-11823
HIGH · éditeur
Device Guard Code Integrity Policy Security Feature Bypass Vulnerability |
|
CVE-2017-11818
HIGH · éditeur
Windows Storage Security Feature Bypass Vulnerability |
|
CVE-2017-11817
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-11816
HIGH · éditeur
Windows GDI Information Disclosure Vulnerability |
|
CVE-2017-11815
HIGH · éditeur
Windows SMB Information Disclosure Vulnerability |
|
CVE-2017-11814
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-11785
HIGH · éditeur
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-11783
HIGH · éditeur
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2017-11782
HIGH · éditeur
Windows SMB Elevation of Privilege Vulnerability |
Gérez votre parc avec Appaloosa
Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.