Vulnérabilités activement exploitées (KEV CISA)

Internet Shortcut Files Security Feature Bypass Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS …

HIGH 8.8

2024-01-16

Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be …

HIGH 8.8

2023-12-21

Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag…

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2.…

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the w…

Windows Mark of the Web Security Feature Bypass Vulnerability

Microsoft WordPad Information Disclosure Vulnerability

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

HIGH 8.8

+2

2023-09-28

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap…

HIGH 7.8

2023-09-13

Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerabil…

HIGH 8.8

Android

2023-09-12

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write v…

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

HIGH 8.8

2023-09-05

Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security s…

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

HIGH 7.8

WinRAR

2023-08-23

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because …

Windows Search Remote Code Execution Vulnerability

HIGH 8.8

2023-07-11

Microsoft Outlook Security Feature Bypass Vulnerability

Windows Error Reporting Service Elevation of Privilege Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

Windows MSHTML Platform Elevation of Privilege Vulnerability

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

Microsoft Streaming Service Elevation of Privilege Vulnerability

HIGH 8.8

2023-06-05

Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

Win32k Elevation of Privilege Vulnerability

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

HIGH 8.8

2023-04-14

Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

Windows Graphics Component Remote Code Execution Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

HIGH 7.8

2023-01-18

Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerabil…

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

HIGH 8.8

2022-12-02

Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…

Windows Scripting Languages Remote Code Execution Vulnerability