Veille de sécurité · Menaces actives

Explorer le catalogue → Analyses Bulletins Éditeurs Méthode

DERNIÈRE SYNCHRONISATION · 04 nov. 2026, 18:00 · SOURCES PUBLIQUES

CATALOGUE KEV · il y a 13 heures // SCORES EPSS/CVSS · il y a 13 heures // VEILLE · il y a 35 minutes // INFRASTRUCTURE C2 · il y a 13 heures // CERT-FR (ANSSI) · il y a 13 heures

Liées au ransomware ET à forte probabilité d'exploitation (EPSS ≥ 50 %)

CVE-2021-21985 100%

VMware · vCenter Server

CVE-2021-22005 100%

VMware · vCenter Server

CVE-2019-11510 100%

Ivanti · Pulse Connect Secure

CVE-2021-34473 100%

Microsoft · Exchange Server

CVE-2019-0708 100%

Microsoft · Remote Desktop Services

CVE-2018-13379 100%

Fortinet · FortiOS

CVE-2021-35464 100%

ForgeRock · Access Management (AM)

CVE-2020-5902 100%

F5 · BIG-IP

CVE-2026-119977 WordPress · WordPress Core· CWE-367 1% 03 nov. 2026 CVE-2026-111357 Ivanti · Connect Secure· Authentification manquante 1% 30 oct. 2026 CVE-2026-118527 Ivanti · Connect Secure· CWE-340 30 oct. 2026 CVE-2026-76418 Cisco · Secure Firewall ASA Software and Cisco Secure FTD Software· CWE-690 1% 29 oct. 2026 CVE-2026-97229 GitLab · Community Edition and Enterprise Edition· Débordement d’entier 28% 29 oct. 2026 CVE-2026-46300 Linux · Kernel· CWE-456 16% 28 oct. 2026 CVE-2026-41709 Broadcom · VMware ESX· CWE-778 1% 28 oct. 2026 CVE-2026-111497 Google · Brotli· CWE-252 83% 27 oct. 2026 CVE-2026-48356 Adobe · Commerce and Magento· Téléversement de fichier non restreint 45% 27 oct. 2026 CVE-2026-109619 PHP Group · PHP· Utilisation après libération (use-after-free) 100% 26 oct. 2026 CVE-2026-109618 PHP Group · PHP· Utilisation après libération (use-after-free) 100% 26 oct. 2026 CVE-2026-110447 Collabora · Collabora Online – Built-in CODE Server· Injection de commande système (OS) 73% 23 oct. 2026

Agrégat de sources publiques · titre + extrait + lien vers la source

The Hacker Newsdans 3 heures

Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root

A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The attacker's code then runs as root, according to advisories that&...

The Hacker Newsdans 3 heures

SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records

SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched. Details of the security flaws, which affect SonicWall GMS 9.5.2 and earlier vers...

The Hacker Newsdans 3 heures

Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit

Cybersecurity researchers have disclosed details of an OpenAI Codex jailbreak bundle that's designed to modify an artificial intelligence (AI) agent's trusted instructions to insert advertisements for a third-party AI ga...

The Hacker Newsdans 1 heure

APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Uk...

@cveNotifyil y a 43 minutes

🚨 CVE-2026-121078Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary co...

🚨 CVE-2026-121078Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)🎖@cveNotify

@cveNotifyil y a 43 minutes

🚨 CVE-2026-121077Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering t...

🚨 CVE-2026-121077Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security...

@cveNotifyil y a 43 minutes

🚨 CVE-2026-121076Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to...

🚨 CVE-2026-121076Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Hi...

@cveNotifyil y a 44 minutes

🚨 CVE-2026-121074Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially ex...

🚨 CVE-2026-121074Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)...

@cveNotifyil y a 44 minutes

🚨 CVE-2026-121071Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social...

🚨 CVE-2026-121071Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chro...

@cveNotifyil y a 44 minutes

🚨 CVE-2026-121070Use after free in WTF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside t...

🚨 CVE-2026-121070Use after free in WTF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)🎖@cveNotify

@cveNotifyil y a 44 minutes

🚨 CVE-2026-121069Use after free in Track in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside...

🚨 CVE-2026-121069Use after free in Track in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)🎖@cveNotify

@cveNotifyil y a 44 minutes

🚨 CVE-2026-121068Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside th...

🚨 CVE-2026-121068Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)🎖@cveNotify

@cveNotifyil y a 44 minutes

🚨 CVE-2026-121061Use after free in Modularization in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary co...

🚨 CVE-2026-121061Use after free in Modularization in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)🎖@cveNotify

@cveNotifyil y a 44 minutes

🚨 CVE-2026-121057Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside th...

🚨 CVE-2026-121057Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)🎖@cveNotify

@cveNotifyil y a 44 minutes

🚨 CVE-2026-121048Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside th...

🚨 CVE-2026-121048Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)🎖@cveNotify

@cveNotifyil y a 44 minutes

🚨 CVE-2026-121044Use after free in Layout in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code insid...

🚨 CVE-2026-121044Use after free in Layout in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)🎖@cveNotify

@cveNotifyil y a 44 minutes

🚨 CVE-2026-121036Use after free in CSS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside t...

🚨 CVE-2026-121036Use after free in CSS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)🎖@cveNotify

@cveNotifyil y a 44 minutes

🚨 CVE-2026-86978This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvO...

🚨 CVE-2026-86978This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An app may be able to access sensitive user data.🎖@cveNotify