Multiples vulnérabilités dans Microsoft Edge (07 octobre 2026)
De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
CERT-FR · Avis
Cyber Threat Dashboard
Cybersecurity watch: alerts, vulnerabilities, news and tools to protect yourself.
1924Items
1308Last 7 days
161Today
819Critical + high
10/10/2026 15:30Last collection
CVE-2026-105485 — Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a r…
Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured device verification link by an authentic…
CVSS 6.8
NVD · CVE récentesCWE-294
CVE-2026-104945 — TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ SOAP handlers. An…
TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ SOAP handlers. An authenticated ONVIF client can submit an excessive number of preset-related elements, causing writes beyond t…
NVD · CVE récentesCWE-121
CVE-2026-104944 — TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer dispatch in its TDP (TP-Link Device Protoco…
TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer dispatch in its TDP (TP-Link Device Protocol) daemon. A single unauthenticated UDP datagram can cause an invalid indirect call, crashing the main service…
NVD · CVE récentesCWE-823
CVE-2026-104073 — NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-p…
NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other use…
CVSS 7.6
CVE-2026-103778 — Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vuln…
Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading…
CVSS 6.2
NVD · CVE récentesCWE-321
CVE-2026-103620 — A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository co…
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current default branch through the GraphQL API and cause an attacke…
NVD · CVE récentesCWE-862
CVE-2026-102322 — Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to…
Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVSS 9.6
NVD · CVE récentesCWE-863
CVE-2026-0198 — In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This…
In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not ne…
CVSS 4.4
NVD · CVE récentesCWE-862
CVE-2026-88252 — A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder servic…
A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service's available file descriptors (system handles used for open connections). By opening and maintaining many con…
CVSS 4.7
NVD · CVE récentesCWE-835
CVE-2026-66666 — Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embed…
Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data. This issue affects WordPress: from 7.1 through 7.1.2, from 7.0 through 7.0.6, from 6.9 thr…
NVD · CVE récentesCWE-201
CVE-2026-106117 — ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, decoding a strip TIFF using CCITT Group 3 or Mod…
ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, decoding a strip TIFF using CCITT Group 3 or Modified Huffman compression can pass attacker-expanded runs to BitWriterUtils.WriteBits without first checking t…
CVSS 7.5
NVD · CVE récentesCWE-787