KEV CISA

Vulnérabilités activement exploitées (KEV CISA)

102 CVE activement exploitées (toutes sévérités, macOS) touchent une app ou un OS suivi. La CISA confirme leur exploitation pour chacune.

CVE correspondantes: 102
Activement exploitées: 102
Fenêtre de publication: 2007-02-03 → 2026-09-09

Toutes les CVE 9 398 KEV CISA 102 Exploit public 6 Toutes sévérités Critique Élevé Modéré Faible Masquer les N/A

Toutes plateformes iOS Android macOS Windows

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

102 entrées macOS KEV CISA Tout effacer

CVE	Sévérité	Apps	Publié
CVE-2026-87491 HIGH 8.8 2026-09-09 Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag…	HIGH 8.8		2026-09-09
CVE-2026-85046 HIGH 8.8 2026-09-03 Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C…	HIGH 8.8		2026-09-03
CVE-2026-65400 CRITICAL 9.8 macOS 2026-08-06 An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, m…	CRITICAL 9.8	macOS	2026-08-06
CVE-2026-11645 HIGH 8.8 2026-06-09 Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted …	HIGH 8.8		2026-06-09
CVE-2026-34621 HIGH 8.6 2026-04-11 Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype…	HIGH 8.6		2026-04-11
CVE-2026-5281 HIGH 8.8 2026-04-01 Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code vi…	HIGH 8.8		2026-04-01
CVE-2026-3910 HIGH 8.8 2026-03-13 Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted H…	HIGH 8.8		2026-03-13
CVE-2026-3909 HIGH 8.8 2026-03-13 Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (…	HIGH 8.8		2026-03-13
CVE-2026-2441 HIGH 8.8 2026-02-13 Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch…	HIGH 8.8		2026-02-13
CVE-2026-20700 HIGH 7.8 macOS iOS 2026-02-11 A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS …	HIGH 7.8	macOS iOS	2026-02-11
CVE-2026-21509 HIGH 7.8 2026-01-26 Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.	HIGH 7.8		2026-01-26
CVE-2025-43529 HIGH 8.8 macOS iOS 2025-12-17 A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.…	HIGH 8.8	macOS iOS	2025-12-17
CVE-2025-43520 MEDIUM 5.5 iOS macOS 2025-12-12 A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Seq…	MEDIUM 5.5	iOS macOS	2025-12-12
CVE-2025-43510 HIGH 7.8 iOS macOS 2025-12-12 A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS…	HIGH 7.8	iOS macOS	2025-12-12
CVE-2025-14174 HIGH 8.8 macOS iOS 2025-12-12 Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a cra…	HIGH 8.8	macOS iOS	2025-12-12
CVE-2025-13223 HIGH 8.8 2025-11-17 Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…	HIGH 8.8		2025-11-17
CVE-2025-10585 CRITICAL 9.8 2025-09-24 Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…	CRITICAL 9.8		2025-09-24
CVE-2025-43300 CRITICAL 10.0 iOS macOS 2025-08-21 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, …	CRITICAL 10.0	iOS macOS	2025-08-21
CVE-2025-31277 HIGH 8.8 iOS macOS 2025-07-30 The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.…	HIGH 8.8	iOS macOS	2025-07-30
CVE-2025-6558 HIGH 8.8 iOS macOS 2025-07-15 Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox…	HIGH 8.8	iOS macOS	2025-07-15
CVE-2025-48384 HIGH 8.0 Xcode 2025-07-08 Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to int…	HIGH 8.0	Xcode	2025-07-08
CVE-2025-6554 HIGH 8.1 2025-06-30 Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium secur…	HIGH 8.1		2025-06-30
CVE-2025-43200 MEDIUM 4.2 iOS macOS 2025-06-16 This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.…	MEDIUM 4.2	iOS macOS	2025-06-16
CVE-2025-5419 HIGH 8.8 2025-06-03 Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …	HIGH 8.8		2025-06-03
CVE-2025-31201 CRITICAL 9.8 iOS macOS 2025-04-16 This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.…	CRITICAL 9.8	iOS macOS	2025-04-16
CVE-2025-31200 CRITICAL 9.8 iOS macOS 2025-04-16 A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, …	CRITICAL 9.8	iOS macOS	2025-04-16
CVE-2025-2783 HIGH 8.3 2025-03-26 Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandb…	HIGH 8.3		2025-03-26
CVE-2025-24201 CRITICAL 10.0 iOS macOS 2025-03-11 An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15…	CRITICAL 10.0	iOS macOS	2025-03-11
CVE-2025-24085 CRITICAL 10.0 iOS macOS 2025-01-27 A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS…	CRITICAL 10.0	iOS macOS	2025-01-27
CVE-2024-44309 MEDIUM 6.3 iOS macOS 2024-11-20 A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPad…	MEDIUM 6.3	iOS macOS	2024-11-20
CVE-2024-44308 HIGH 8.8 iOS macOS 2024-11-20 The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 1…	HIGH 8.8	iOS macOS	2024-11-20
CVE-2024-38226 HIGH 7.3 2024-09-10 Microsoft Publisher Security Feature Bypass Vulnerability	HIGH 7.3		2024-09-10
CVE-2024-7971 CRITICAL 9.6 2024-08-21 Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security s…	CRITICAL 9.6		2024-08-21
CVE-2024-7965 HIGH 8.8 2024-08-21 Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …	HIGH 8.8		2024-08-21
CVE-2024-5274 CRITICAL 9.6 2024-05-28 Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch…	CRITICAL 9.6		2024-05-28
CVE-2024-4947 CRITICAL 9.6 2024-05-15 Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chr…	CRITICAL 9.6		2024-05-15
CVE-2024-4761 HIGH 8.8 2024-05-14 Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. …	HIGH 8.8		2024-05-14
CVE-2024-4671 CRITICAL 9.6 2024-05-14 Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a …	CRITICAL 9.6		2024-05-14
CVE-2024-23296 HIGH 7.8 macOS iOS 2024-03-05 A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey…	HIGH 7.8	macOS iOS	2024-03-05
CVE-2024-23225 HIGH 7.8 macOS iOS 2024-03-05 A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey…	HIGH 7.8	macOS iOS	2024-03-05
CVE-2024-21413 CRITICAL 9.8 2024-02-13 Microsoft Outlook Remote Code Execution Vulnerability	CRITICAL 9.8		2024-02-13
CVE-2024-23222 HIGH 8.8 iOS macOS 2024-01-23 A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS …	HIGH 8.8	iOS macOS	2024-01-23
CVE-2024-0519 HIGH 8.8 2024-01-16 Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …	HIGH 8.8		2024-01-16
CVE-2023-7024 HIGH 8.8 2023-12-21 Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag…	HIGH 8.8		2023-12-21
CVE-2023-6345 CRITICAL 9.6 2023-11-29 Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a s…	CRITICAL 9.6		2023-11-29
CVE-2023-5217 HIGH 8.8 +2 2023-09-28 Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap…	HIGH 8.8	+2	2023-09-28
CVE-2023-26369 HIGH 7.8 2023-09-13 Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerabil…	HIGH 7.8		2023-09-13
CVE-2023-36761 MEDIUM 6.5 2023-09-12 Microsoft Word Information Disclosure Vulnerability	MEDIUM 6.5		2023-09-12
CVE-2023-4863 HIGH 8.8 Android 2023-09-12 Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write v…	HIGH 8.8	Android	2023-09-12
CVE-2023-4762 HIGH 8.8 2023-09-05 Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security s…	HIGH 8.8		2023-09-05

Gérez votre parc avec Appaloosa

Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.

Découvrir le MDM Appaloosa