Vulnérabilités activement exploitées (KEV CISA)

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, m…

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

CRITICAL 9.8

2025-09-24

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…

In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process …

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, …

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.…

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, …

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15…

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS…

CRITICAL 9.8

2024-10-09

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulner…

CRITICAL 9.6

2024-08-21

Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security s…

CRITICAL 9.6

2024-05-28

Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch…

CRITICAL 9.6

2024-05-15

Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chr…

CRITICAL 9.6

2024-05-14

Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a …

CRITICAL 9.8

2024-02-13

Microsoft Outlook Remote Code Execution Vulnerability

CRITICAL 9.6

2023-11-29

Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a s…

CRITICAL 9.6

Android

2023-04-19

Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a s…

CRITICAL 9.8

2023-03-14

Microsoft Outlook Elevation of Privilege Vulnerability

CRITICAL 9.6

2022-11-25

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform …

CRITICAL 9.6

2022-09-26

Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially…

Active Directory Domain Services Elevation of Privilege Vulnerability

CRITICAL 10.0

Xcode

2021-12-10

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameter…

CRITICAL 9.6

2021-10-08

Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sa…

CRITICAL 9.6

2021-10-08

Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perfo…

Windows MSHTML Platform Remote Code Execution Vulnerability

HTTP Protocol Stack Remote Code Execution Vulnerability

CRITICAL 9.6

Android

2020-11-03

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa…

Netlogon Elevation of Privilege Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

Adobe Font Manager Library Remote Code Execution Vulnerability

Adobe Font Manager Library Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows S…

CRITICAL 10.0

2019-07-23

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process op…

GDI+ Remote Code Execution Vulnerability

Windows Search Remote Code Execution Vulnerability

LNK Remote Code Execution Vulnerability

Windows SMB Remote Code Execution Vulnerability

Windows SMB Remote Code Execution Vulnerability

Windows SMB Remote Code Execution Vulnerability

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

Microsoft Graphics Remote Code Execution Vulnerability

GDI+ Remote Code Execution Vulnerability

CRITICAL 9.8

2014-02-05

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linu…

CRITICAL 9.8

2010-10-28

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when Ja…