Veille CVE

Semaine du 9 mars au 15 mars 2026

6 CVE

Critique 0 Élevée 2 Moyenne 0 Faible 0 Non évaluée 4 Tri : plus récentes
  1. CVE-2026-3910 8.8 Élevée Exploitée

    Google Chrome

    Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

  2. CVE-2026-3909 8.8 Élevée Exploitée

    Google Chrome

    Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

  3. CVE-2025-68613 – Non évaluée Exploitée

    n8n n8n

    n8n Improper Control of Dynamically-Managed Code Resources Vulnerability — n8n contains an improper control of dynamically managed code resources vulnerability in its workflow expression evaluation system that allows for remote code execution.

  4. CVE-2026-1603 – Non évaluée Exploitée

    Ivanti Endpoint Manager (EPM)

    Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability — Ivanti Endpoint Manager (EPM) contains an authentication bypass using an alternate path or channel vulnerability that could allow a remote unauthenticated attacker to leak specific stored credential data.

  5. CVE-2025-26399 – Non évaluée Exploitée Rançongiciel

    SolarWinds Web Help Desk

    SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability — SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to run commands on the host machine.

  6. CVE-2021-22054 – Non évaluée Exploitée

    Omnissa Workspace One UEM

    Omnissa Workspace ONE Server-Side Request Forgery — Omnissa Workspace One UEM formerly known as VMware Workspace One UEM contains a server-side request forgery (SSRF) vulnerability that could allow a malicious actor with network access to UEM to send their requests without authentication and to gain access to sensitive information.