Veille de sécurité · Menaces actives

Explorer le catalogue → Analyses Bulletins Éditeurs Méthode

DERNIÈRE SYNCHRONISATION · 05 nov. 2026, 20:00 · SOURCES PUBLIQUES

CATALOGUE KEV · il y a 15 heures // SCORES EPSS/CVSS · il y a 15 heures // VEILLE · il y a 5 minutes // INFRASTRUCTURE C2 · il y a 15 heures // CERT-FR (ANSSI) · il y a 15 heures

Liées au ransomware ET à forte probabilité d'exploitation (EPSS ≥ 50 %)

CVE-2021-21985 100%

VMware · vCenter Server

CVE-2021-22005 100%

VMware · vCenter Server

CVE-2019-11510 100%

Ivanti · Pulse Connect Secure

CVE-2021-34473 100%

Microsoft · Exchange Server

CVE-2019-0708 100%

Microsoft · Remote Desktop Services

CVE-2018-13379 100%

Fortinet · FortiOS

CVE-2021-35464 100%

ForgeRock · Access Management (AM)

CVE-2020-5902 100%

F5 · BIG-IP

CVE-2024-27834 Apple · Multiple Products· Authentification défaillante 1% 04 nov. 2026 CVE-2026-119977 WordPress · WordPress Core· CWE-367 1% 03 nov. 2026 CVE-2026-111357 Ivanti · Connect Secure· Authentification manquante 1% 30 oct. 2026 CVE-2026-118527 Ivanti · Connect Secure· CWE-340 1% 30 oct. 2026 CVE-2026-76418 Cisco · Secure Firewall ASA Software and Cisco Secure FTD Software· CWE-690 1% 29 oct. 2026 CVE-2026-97229 GitLab · Community Edition and Enterprise Edition· Débordement d’entier 65% 29 oct. 2026 CVE-2026-46300 Linux · Kernel· CWE-456 16% 28 oct. 2026 CVE-2026-41709 Broadcom · VMware ESX· CWE-778 1% 28 oct. 2026 CVE-2026-111497 Google · Brotli· CWE-252 83% 27 oct. 2026 CVE-2026-48356 Adobe · Commerce and Magento· Téléversement de fichier non restreint 47% 27 oct. 2026 CVE-2026-109619 PHP Group · PHP· Utilisation après libération (use-after-free) 100% 26 oct. 2026 CVE-2026-109618 PHP Group · PHP· Utilisation après libération (use-after-free) 100% 26 oct. 2026

Agrégat de sources publiques · titre + extrait + lien vers la source

The Hacker Newsdans 5 minutes

ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories

How much damage can someone do without breaking much? Quite a lot, it seems. A stolen login can open doors across several systems. A trusted setting can be used to lock people out. Even a simple file copy can reach place...

@cveNotifyil y a 12 minutes

🚨 CVE-2026-121959FreeRDP before 3.32.2 contains an infinite loop vulnerability in websocket_context_read that fails to handle a zero BIO re...

🚨 CVE-2026-121959FreeRDP before 3.32.2 contains an infinite loop vulnerability in websocket_context_read that fails to handle a zero BIO result with payload outstanding. A malicious RD Gateway can send a truncated WebSocket frame followed...

@cveNotifyil y a 12 minutes

🚨 CVE-2026-121958FreeRDP through 3.32.1 has a heap out-of-bounds write in the RDPGFX client because the delete_surface callback truncates s...

🚨 CVE-2026-121958FreeRDP through 3.32.1 has a heap out-of-bounds write in the RDPGFX client because the delete_surface callback truncates surface hash keys to 16 bits, leaving the surface table inconsistent so HashTable_GetKeys writes past...

@cveNotifyil y a 12 minutes

🚨 CVE-2026-121957FreeRDP before 3.32.2 contains a use-after-free vulnerability that allows malicious RDP servers to corrupt client memory b...

🚨 CVE-2026-121957FreeRDP before 3.32.2 contains a use-after-free vulnerability that allows malicious RDP servers to corrupt client memory by racing the RDPGFX ResetGraphics handler against the planar bitmap decoder. Attackers can send Rese...

@cveNotifyil y a 12 minutes

🚨 CVE-2026-121956FreeRDP before 3.32.2 contains a double free in the WinPR Kerberos SSPI retrieveSomeTgt function, which installs the krb5...

🚨 CVE-2026-121956FreeRDP before 3.32.2 contains a double free in the WinPR Kerberos SSPI retrieveSomeTgt function, which installs the krb5 default realm into a target principal that has an empty realm without taking ownership of it. Unauth...

@cveNotifyil y a 12 minutes

🚨 CVE-2026-121955FreeRDP before 3.32.2 contains a use-after-free vulnerability in Emulate_SCardReleaseContext that frees the emulated SCard...

🚨 CVE-2026-121955FreeRDP before 3.32.2 contains a use-after-free vulnerability in Emulate_SCardReleaseContext that frees the emulated SCardContext before its worker thread is cancelled and joined. A malicious server can send ESTABLISHCONTE...

@cveNotifyil y a 12 minutes

🚨 CVE-2026-121954FreeRDP before 3.32.2 has a heap out-of-bounds write in the planar codec because freerdp_bitmap_planar_context_reset commi...

🚨 CVE-2026-121954FreeRDP before 3.32.2 has a heap out-of-bounds write in the planar codec because freerdp_bitmap_planar_context_reset commits new dimensions before buffer reallocation succeeds, and a failed ResetGraphics is only logged. A...

@cveNotifyil y a 12 minutes

🚨 CVE-2026-121953FreeRDP before 3.32.2 has a use-after-free in the client's rdpgfx dynamic virtual channel: a duplicate-name channel with a...

🚨 CVE-2026-121953FreeRDP before 3.32.2 has a use-after-free in the client's rdpgfx dynamic virtual channel: a duplicate-name channel with a new ChannelId overwrites the listener's single callback slot, which rdpgfx_on_close frees without c...

@cveNotifyil y a 13 minutes

🚨 CVE-2026-121951FreeRDP 3.0.0 before 3.32.2 server-side RDP peer input parsing skips the six-byte body of a slow-path input event with an...

🚨 CVE-2026-121951FreeRDP 3.0.0 before 3.32.2 server-side RDP peer input parsing skips the six-byte body of a slow-path input event with an unknown message type without checking it lies within the packet's declared length, causing a WinPR s...

@cveNotifyil y a 13 minutes

🚨 CVE-2026-121950FreeRDP before 3.32.2 does not check the product of surface dimensions in gdi_CreateSurface when handling an RDPGFX CREATE...

🚨 CVE-2026-121950FreeRDP before 3.32.2 does not check the product of surface dimensions in gdi_CreateSurface when handling an RDPGFX CREATE_SURFACE PDU, causing an integer wrap and heap buffer overflow on 32-bit builds and an approximately...

@cveNotifyil y a 13 minutes

🚨 CVE-2026-87392Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported versio...

🚨 CVE-2026-87392Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker wi...

@cveNotifyil y a 13 minutes

🚨 CVE-2026-87391Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions t...

🚨 CVE-2026-87391Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privile...

@cveNotifyil y a 13 minutes

🚨 CVE-2026-87379Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions t...

🚨 CVE-2026-87379Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileg...

@cveNotifyil y a 13 minutes

🚨 CVE-2026-87378Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions t...

🚨 CVE-2026-87378Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileg...

@cveNotifyil y a 13 minutes

🚨 CVE-2026-87377Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported versio...

🚨 CVE-2026-87377Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker...

@cveNotifyil y a 13 minutes

🚨 CVE-2026-87376Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported versio...

🚨 CVE-2026-87376Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker...

@cveNotifyil y a 13 minutes

🚨 CVE-2026-87375Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions t...

🚨 CVE-2026-87375Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileg...

@cveNotifyil y a 13 minutes

🚨 CVE-2026-87369Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are...

🚨 CVE-2026-87369Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated atta...