Veille CVE

Samedi 12 septembre 2026

33 CVE

Critique 1 Élevée 17 Moyenne 15 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2026-84869 9.9 Critique Exploitée

    ConnectWise ScreenConnect

    A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.

  2. CVE-2026-83987 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  3. CVE-2026-83985 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  4. CVE-2026-83983 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  5. CVE-2026-83982 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  6. CVE-2026-83981 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  7. CVE-2026-83980 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  8. CVE-2026-83977 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  9. CVE-2026-83973 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  10. CVE-2026-83972 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  11. CVE-2026-83971 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  12. CVE-2026-83970 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  13. CVE-2026-83967 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  14. CVE-2026-83954 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  15. CVE-2026-78448 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  16. CVE-2026-73007 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  17. CVE-2026-73002 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  18. CVE-2026-72996 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  19. CVE-2026-82001 5.5 Moyenne

    Adobe Acrobat · Adobe Acrobat Reader · Adobe Acrobat 2024 · Adobe acrobat dc

    Acrobat Reader is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  20. CVE-2026-81982 5.5 Moyenne

    Adobe Acrobat · Adobe Acrobat Reader · Adobe Acrobat 2024 · Adobe acrobat dc

    Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  21. CVE-2026-81977 5.5 Moyenne

    Adobe Acrobat · Adobe Acrobat Reader · Adobe Acrobat 2024 · Adobe acrobat dc

    Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  22. CVE-2026-75740 5.4 Moyenne

    Adobe Experience Manager as a Cloud Service · Adobe Experience Manager 6.5 LTS · Adobe Experience Manager 6.5 · Adobe experience manager

    Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.

  23. CVE-2026-75735 5.4 Moyenne

    Adobe Experience Manager as a Cloud Service · Adobe Experience Manager 6.5 LTS · Adobe Experience Manager 6.5 · Adobe experience manager

    Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.

  24. CVE-2026-75729 5.4 Moyenne

    Adobe Experience Manager as a Cloud Service · Adobe Experience Manager 6.5 LTS · Adobe Experience Manager 6.5 · Adobe experience manager

    Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.

  25. CVE-2026-75722 5.4 Moyenne

    Adobe Experience Manager as a Cloud Service · Adobe Experience Manager 6.5 LTS · Adobe Experience Manager 6.5 · Adobe experience manager

    Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

  26. CVE-2026-75716 5.4 Moyenne

    Adobe Experience Manager as a Cloud Service · Adobe Experience Manager 6.5 LTS · Adobe Experience Manager 6.5 · Adobe experience manager

    Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

  27. CVE-2026-75706 5.4 Moyenne

    Adobe Experience Manager as a Cloud Service · Adobe Experience Manager 6.5 LTS · Adobe Experience Manager 6.5 · Adobe experience manager

    Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

  28. CVE-2026-75683 5.4 Moyenne

    Adobe Experience Manager as a Cloud Service · Adobe Experience Manager 6.5 LTS · Adobe Experience Manager 6.5 · Adobe experience manager

    Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

  29. CVE-2026-75677 5.4 Moyenne

    Adobe Experience Manager as a Cloud Service · Adobe Experience Manager 6.5 LTS · Adobe Experience Manager 6.5 · Adobe experience manager

    Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

  30. CVE-2026-75661 5.4 Moyenne

    Adobe Experience Manager as a Cloud Service · Adobe Experience Manager 6.5 LTS · Adobe Experience Manager 6.5 · Adobe experience manager

    Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

  31. CVE-2026-75642 5.4 Moyenne

    Adobe Experience Manager as a Cloud Service · Adobe Experience Manager 6.5 LTS · Adobe Experience Manager 6.5 · Adobe experience manager

    Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.

  32. CVE-2026-75635 5.4 Moyenne

    Adobe Experience Manager as a Cloud Service · Adobe Experience Manager 6.5 LTS · Adobe Experience Manager 6.5 · Adobe experience manager

    Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

  33. CVE-2026-19713 5.4 Moyenne

    Adobe Experience Manager as a Cloud Service · Adobe Experience Manager 6.5 LTS · Adobe Experience Manager 6.5 · Adobe experience manager

    Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.