Vulnérabilités activement exploitées (KEV CISA)

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.…

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If…

HIGH 8.8

iOS macOS

2025-07-15

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox…

HIGH 8.0

Xcode

2025-07-08

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to int…

HIGH 8.1

2025-06-30

Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium secur…

HIGH 7.8

WinRAR

2025-06-21

RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected install…

This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.…

Windows SMB Client Elevation of Privilege Vulnerability

Internet Shortcut Files Remote Code Execution Vulnerability

HIGH 8.8

2025-06-03

Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Scripting Engine Memory Corruption Vulnerability

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.…

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, …

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

HIGH 8.3

2025-03-26

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandb…

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15…

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

Windows NTFS Information Disclosure Vulnerability

Windows Fast FAT File System Driver Remote Code Execution Vulnerability

Windows NTFS Information Disclosure Vulnerability

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

NTLM Hash Disclosure Spoofing Vulnerability

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

Windows Storage Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 1…

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS…

HIGH 7.0

7-Zip

2025-01-25

7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installat…

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPad…

The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 1…

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds…

Windows Task Scheduler Elevation of Privilege Vulnerability

NTLM Hash Disclosure Spoofing Vulnerability

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

CRITICAL 9.8

2024-10-09

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulner…