Vulnérabilités
Vulnérabilités des apps suivies
28 050 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 374 figurent au catalogue CISA KEV, donc leur exploitation est avérée.
- CVE correspondantes
- 28 050
- Activement exploitées
- 374
- Fenêtre de publication
- 1997-01-01 → 2026-10-20
Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.
| CVE |
|---|
|
CVE-2016-3297
HIGH 8.8
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v… |
|
CVE-2016-3295
HIGH 7.5
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via … |
|
CVE-2016-3294
HIGH 7.5
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge M… |
|
CVE-2016-3291
LOW 2.4
Microsoft Internet Explorer 11 and Microsoft Edge mishandle cross-origin requests, which allows remote attackers to obtain sensitive information via a crafted … |
|
CVE-2016-3247
HIGH 7.5
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft… |
|
CVE-2016-0141
MEDIUM 6.5
The Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certificate-store private key during a document-save operation, whi… |
|
CVE-2016-3375
CRITICAL · éditeur
Scripting Engine Memory Corruption Vulnerability |
|
CVE-2016-3373
HIGH · éditeur
Windows Kernel Local Elevation of Privilege Vulnerability |
|
CVE-2016-3371
HIGH · éditeur
Windows Elevation of Privilege Vulnerability |
|
CVE-2016-3369
HIGH · éditeur
Windows IPSec Denial of Service Vulnerability |
|
CVE-2016-3368
HIGH · éditeur
Windows Remote Code Execution Vulnerability |
|
CVE-2016-3356
CRITICAL · éditeur
GDI+ Remote Code Execution Vulnerability |
|
CVE-2016-3355
HIGH · éditeur
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2016-3354
HIGH · éditeur
GDI+ Information Disclosure Vulnerability |
|
CVE-2016-3352
HIGH · éditeur
Windows Information Disclosure Vulnerability |
|
CVE-2016-3349
HIGH · éditeur
Win32k Elevation of Privilege Vulnerability |
|
CVE-2016-3348
HIGH · éditeur
Win32k Elevation of Privilege Vulnerability |
|
CVE-2016-3346
HIGH · éditeur
Windows Permissions Enforcement Elevation of Privilege Vulnerability |
|
CVE-2016-3345
HIGH · éditeur
Windows SMB Authenticated Remote Code Execution Vulnerability |
|
CVE-2016-3344
HIGH · éditeur
Windows Secure Kernel Mode Information Disclosure Vulnerability |
|
CVE-2016-3306
HIGH · éditeur
Windows Session Object Elevation of Privilege Vulnerability |
|
CVE-2016-3305
HIGH · éditeur
Windows Session Object Elevation of Privilege Vulnerability |
|
CVE-2016-3302
HIGH · éditeur
Windows Lock Screen Elevation of Privilege Vulnerability |
|
CVE-2016-3877
CRITICAL 9.8
Unspecified vulnerability in Android before 2016-09-01 has unknown impact and attack vectors. |
|
CVE-2016-7395
HIGH 8.8
SkPath.cpp in Skia, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, does not properly validate the return va… |
|
CVE-2016-5167
HIGH 8.8
Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allow attackers to cause a denia… |
|
CVE-2016-5166
LOW 3.1
The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:… |
|
CVE-2016-5165
MEDIUM 6.1
Cross-site scripting (XSS) vulnerability in the Developer Tools (aka DevTools) subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53… |
|
CVE-2016-5164
MEDIUM 6.1
Cross-site scripting (XSS) vulnerability in WebKit/Source/platform/v8_inspector/V8Debugger.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Window… |
|
CVE-2016-5162
MEDIUM 6.5
The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.… |
|
CVE-2016-5161
HIGH 8.8
The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X… |
|
CVE-2016-5160
MEDIUM 6.5
The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.… |
|
CVE-2016-5159
HIGH 8.8
Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remo… |
|
CVE-2016-5158
HIGH 8.8
Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X a… |
|
CVE-2016-5157
HIGH 8.8
Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS … |
|
CVE-2016-5156
HIGH 8.8
extensions/renderer/event_bindings.cc in the event bindings in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux attempts … |
|
CVE-2016-5155
MEDIUM 6.5
Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly validate access to the initial document, which allows … |
|
CVE-2016-5154
HIGH 8.8
Multiple heap-based buffer overflows in PDFium, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote… |
|
CVE-2016-5153
HIGH 8.8
The Web Animations implementation in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, improperly relie… |
|
CVE-2016-5152
HIGH 8.8
Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X… |
|
CVE-2016-5151
HIGH 8.8
PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux mishandles timers, which allows remote attackers to cause a de… |
|
CVE-2016-5150
HIGH 8.8
WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on… |
|
CVE-2016-5149
HIGH 8.8
The extensions subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux relies on an IFRAME source URL to identify a… |
|
CVE-2016-5148
MEDIUM 6.1
Cross-site scripting (XSS) vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows re… |
|
CVE-2016-5147
MEDIUM 6.1
Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles deferred page loads, which allows remote a… |
|
CVE-2016-7153
MEDIUM 5.3
+1
The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote att… |
|
CVE-2016-7152
MEDIUM 5.3
+1
The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote atta… |
|
CVE-2016-5699
MEDIUM 6.1
CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows r… |
|
CVE-2016-5636
CRITICAL 9.8
Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attacker… |
|
CVE-2016-0772
MEDIUM 6.5
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might a… |
Gérez votre parc avec Appaloosa
Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.