Vulnérabilités

Vulnérabilités des apps suivies

29 924 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 377 figurent au catalogue CISA KEV, donc leur exploitation est avérée.

CVE correspondantes: 29 924
Activement exploitées: 377
Fenêtre de publication: 1997-01-01 → 2026-11-10

Toutes les CVE 29 924 KEV CISA 377 Exploit public 643 Toutes sévérités Critique Élevé Modéré Faible Masquer les N/A

Toutes plateformes iOS Android macOS Windows

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

29 924 entrées

CVE	Sévérité	KEV	Apps	Publié
CVE-2026-92043 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunder…	HIGH 8.8	—		2026-09-15
CVE-2026-92042 HIGH 7.5 2026-09-15 Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	HIGH 7.5	—		2026-09-15
CVE-2026-92041 CRITICAL 9.1 2026-09-15 Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	CRITICAL 9.1	—		2026-09-15
CVE-2026-92040 HIGH 8.8 2026-09-15 Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	HIGH 8.8	—		2026-09-15
CVE-2026-92039 MEDIUM 6.3 2026-09-15 Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	MEDIUM 6.3	—		2026-09-15
CVE-2026-92038 CRITICAL 9.1 2026-09-15 Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153…	CRITICAL 9.1	—		2026-09-15
CVE-2026-92037 CRITICAL 9.8 2026-09-15 Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	CRITICAL 9.8	—		2026-09-15
CVE-2026-92036 CRITICAL 9.8 2026-09-15 Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	CRITICAL 9.8	—		2026-09-15
CVE-2026-92035 CRITICAL 9.6 2026-09-15 Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 156, Firefox ESR 153…	CRITICAL 9.6	—		2026-09-15
CVE-2026-92034 CRITICAL 9.1 2026-09-15 Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	CRITICAL 9.1	—		2026-09-15
CVE-2026-92032 CRITICAL 9.6 2026-09-15 Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbir…	CRITICAL 9.6	—		2026-09-15
CVE-2026-92031 MEDIUM 6.5 2026-09-15 Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156…	MEDIUM 6.5	—		2026-09-15
CVE-2026-92030 MEDIUM 5.4 2026-09-15 Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thund…	MEDIUM 5.4	—		2026-09-15
CVE-2026-92029 HIGH 8.8 2026-09-15 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T…	HIGH 8.8	—		2026-09-15
CVE-2026-92028 HIGH 8.8 2026-09-15 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thund…	HIGH 8.8	—		2026-09-15
CVE-2026-92027 HIGH 8.8 2026-09-15 Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbi…	HIGH 8.8	—		2026-09-15
CVE-2026-92026 HIGH 8.8 2026-09-15 Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 14…	HIGH 8.8	—		2026-09-15
CVE-2026-92025 HIGH 8.8 2026-09-15 Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunde…	HIGH 8.8	—		2026-09-15
CVE-2026-92024 HIGH 8.8 2026-09-15 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T…	HIGH 8.8	—		2026-09-15
CVE-2026-92023 HIGH 8.8 2026-09-15 Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T…	HIGH 8.8	—		2026-09-15
CVE-2026-92022 HIGH 8.8 2026-09-15 Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thund…	HIGH 8.8	—		2026-09-15
CVE-2026-92021 HIGH 8.8 2026-09-15 Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16.	HIGH 8.8	—		2026-09-15
CVE-2026-92020 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41…	HIGH 8.8	—		2026-09-15
CVE-2026-92019 HIGH 8.1 2026-09-15 Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153…	HIGH 8.1	—		2026-09-15
CVE-2026-92018 CRITICAL 9.6 2026-09-15 Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thund…	CRITICAL 9.6	—		2026-09-15
CVE-2026-92017 HIGH 8.8 2026-09-15 Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 15…	HIGH 8.8	—		2026-09-15
CVE-2026-92016 HIGH 8.8 2026-09-15 Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Th…	HIGH 8.8	—		2026-09-15
CVE-2026-92015 HIGH 8.8 2026-09-15 Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Th…	HIGH 8.8	—		2026-09-15
CVE-2026-92014 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, an…	HIGH 8.8	—		2026-09-15
CVE-2026-92013 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92012 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92011 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92010 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92009 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92008 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92007 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92006 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92005 MEDIUM 5.3 2026-09-15 Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T…	MEDIUM 5.3	—		2026-09-15
CVE-2026-86924 MEDIUM 5.5 iOS macOS 2026-09-14 A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gat…	MEDIUM 5.5	—	iOS macOS	2026-09-14
CVE-2026-86917 HIGH 7.8 macOS 2026-09-14 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may b…	HIGH 7.8	—	macOS	2026-09-14
CVE-2026-86911 MEDIUM 5.5 macOS 2026-09-14 This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protec…	MEDIUM 5.5	—	macOS	2026-09-14
CVE-2026-86910 MEDIUM 5.5 macOS 2026-09-14 A permissions issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An applicat…	MEDIUM 5.5	—	macOS	2026-09-14
CVE-2026-86909 MEDIUM 4.4 macOS 2026-09-14 A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Gatekeeper checks.	MEDIUM 4.4	—	macOS	2026-09-14
CVE-2026-86905 MEDIUM 5.5 iOS macOS 2026-09-14 This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to…	MEDIUM 5.5	—	iOS macOS	2026-09-14
CVE-2026-86904 HIGH 7.5 iOS 2026-09-14 A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be …	HIGH 7.5	—	iOS	2026-09-14
CVE-2026-86903 MEDIUM 5.5 iOS macOS 2026-09-14 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, wa…	MEDIUM 5.5	—	iOS macOS	2026-09-14
CVE-2026-86902 MEDIUM 5.5 macOS 2026-09-14 A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sonoma 14.8.…	MEDIUM 5.5	—	macOS	2026-09-14
CVE-2026-86901 HIGH 7.1 macOS 2026-09-14 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT vol…	HIGH 7.1	—	macOS	2026-09-14
CVE-2026-86900 MEDIUM 6.5 macOS 2026-09-14 An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT vol…	MEDIUM 6.5	—	macOS	2026-09-14
CVE-2026-86898 MEDIUM 5.4 iOS macOS 2026-09-14 A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening …	MEDIUM 5.4	—	iOS macOS	2026-09-14

Gérez votre parc avec Appaloosa

Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.

Découvrir le MDM Appaloosa