Vulnérabilités activement exploitées (KEV CISA)

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

HIGH 8.8

2026-02-13

Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch…

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

Windows SMB Client Elevation of Privilege Vulnerability

Scripting Engine Memory Corruption Vulnerability

HIGH 8.3

2025-03-26

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandb…

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

NTLM Hash Disclosure Spoofing Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the w…

Win32k Elevation of Privilege Vulnerability

Netlogon Elevation of Privilege Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows S…

HIGH 8.8

2020-03-02

Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild a…

Windows Installer Elevation of Privilege Vulnerability

Windows CryptoAPI Spoofing Vulnerability

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil…

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP…

Microsoft Windows Elevation of Privilege Vulnerability

Windows Elevation of Privilege Vulnerability

Windows Elevation of Privilege Vulnerability

CRITICAL 10.0

2019-07-23

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process op…

HIGH 8.8

2019-07-23

A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware…

Windows Error Reporting Elevation of Privilege Vulnerability

Windows Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

HIGH 7.8

WinRAR

2019-02-05

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When…

Microsoft Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privil…

HIGH 7.5

2018-06-11

A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox a…

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution …

Microsoft COM for Windows Remote Code Execution Vulnerability

LNK Remote Code Execution Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows COM Elevation of Privilege Vulnerability

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.…

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.…

Windows SMB Remote Code Execution Vulnerability

Windows SMB Information Disclosure Vulnerability

Windows SMB Remote Code Execution Vulnerability

Windows SMB Remote Code Execution Vulnerability

HIGH 8.1

Microsoft Edge

2017-02-26

Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningEle…

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Window…

HIGH 8.8

Microsoft Edge

2016-11-10

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…

HIGH 8.8

Microsoft Edge

2016-11-10

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…

Windows Kernel Elevation of Privilege Vulnerability

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows…