Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-103572 (GCVE-0-2026-103572)
Vulnerability from cvelistv5 – Published: 2026-10-13 18:56 – Updated: 2026-10-14 17:47- CWE-94 - Improper Control of Generation of Code ('Code Injection')
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Microsoft | Microsoft Visual Studio 2022 version 17.14 |
Affected:
17.14.0 , < 17.14.42
(custom)
|
guessed | |
| Microsoft | Microsoft Visual Studio 2026 version 18.10 |
Affected:
18.10.0 , < 18.10.4
(custom)
|
guessed |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-103572",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:13:16.613335Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T21:15:35.236Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Microsoft Visual Studio 2022 version 17.14",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.14.42",
"status": "affected",
"version": "17.14.0",
"versionType": "custom"
}
]
},
{
"product": "Microsoft Visual Studio 2026 version 18.10",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "18.10.4",
"status": "affected",
"version": "18.10.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.10:*:*:*:*:*:*:*:*",
"versionEndExcluding": "18.10.4",
"versionStartIncluding": "18.10.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.14.42",
"versionStartIncluding": "17.14.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Improper control of generation of code (\u0027code injection\u0027) in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-14T17:47:34.559Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103572"
}
],
"title": "Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-103572",
"datePublished": "2026-10-13T18:56:39.614Z",
"dateReserved": "2026-09-30T20:48:29.840Z",
"dateUpdated": "2026-10-14T17:47:34.559Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-103572",
"date": "2026-10-14",
"epss": "0.00822",
"percentile": "0.56362"
},
"nvd": {
"cve": {
"affected": [
{
"affectedData": [
{
"product": "Microsoft Visual Studio 2022 version 17.14",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.14.42",
"status": "affected",
"version": "17.14.0",
"versionType": "custom"
}
]
},
{
"product": "Microsoft Visual Studio 2026 version 18.10",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "18.10.4",
"status": "affected",
"version": "18.10.0",
"versionType": "custom"
}
]
}
],
"source": "secure@microsoft.com"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper control of generation of code (\u0027code injection\u0027) in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network."
}
],
"id": "CVE-2026-103572",
"lastModified": "2026-10-13T22:17:25.633",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "secure@microsoft.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-103572",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:13:16.613335Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-10-13T19:17:53.293",
"references": [
{
"source": "secure@microsoft.com",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103572"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-94"
}
],
"source": "secure@microsoft.com",
"type": "Secondary"
}
]
}
}
}
}
CERTFR-2026-AVI-1316
Vulnerability from certfr_avis - Published: 2026-10-14 - Updated: 2026-10-14
De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | N/A | Microsoft Dynamics NAV 2018 versions antérieures à 11.0.50736.0 | ||
| Microsoft | N/A | Microsoft.AspNetCore.SignalR.Protocols.MessagePack versions antérieures à 8.0.32 | ||
| Microsoft | N/A | Microsoft SQL Server 2017 pour systèmes x64 (GDR) versions antérieures à 14.0.2140.2 | ||
| Microsoft | N/A | Microsoft.AspNetCore.Components.WebAssembly.Server versions antérieures à 9.0.21 | ||
| Microsoft | N/A | Skype pour Business Server Subscription Edition RTM versions antérieures à 7.0.2046.889 | ||
| Microsoft | N/A | Microsoft.AspNetCore.SignalR.Protocols.MessagePack versions antérieures à 10.0.13 | ||
| Microsoft | N/A | Microsoft Visual Studio 2026 version 18.10 antérieures à 18.10.4 | ||
| Microsoft | N/A | Microsoft Exchange Server 2019 Cumulative Update 15 versions antérieures à 15.02.1748.055 | ||
| Microsoft | N/A | Microsoft SharePoint Enterprise Server 2016 | ||
| Microsoft | N/A | Microsoft SQL Server 2019 pour systèmes x64 (GDR) versions antérieures à 15.0.2200.2 | ||
| Microsoft | N/A | Sysinternals Suite versions antérieures à 1.03 | ||
| Microsoft | N/A | Microsoft.Native.Quic.MsQuic.Schannel versions antérieures à 2.6.2 | ||
| Microsoft | N/A | System.Security.Cryptography.Xml versions antérieures à 11.0.0-rc.2 | ||
| Microsoft | N/A | Microsoft SQL Server 2025 pour systèmes x64 (GDR) versions antérieures à 17.0.1145.4 | ||
| Microsoft | N/A | System.Security.Cryptography.Xml versions antérieures à 8.0.5 | ||
| Microsoft | N/A | Microsoft SQL Server 2019 pour systèmes x64 (CU32) versions antérieures à 15.0.4500.2 | ||
| Microsoft | N/A | Microsoft.AspNetCore.Authentication.Negotiate versions antérieures à 9.0.21 | ||
| Microsoft | N/A | Skype pour Business Server 2015 CU13 versions antérieures à 6.0.9319.886 | ||
| Microsoft | N/A | MessagePack 2.5.303 versions antérieures à 2.5.303 | ||
| Microsoft | N/A | Microsoft Exchange Server 2016 Cumulative Update 23 versions antérieures à 15.01.2507.077 | ||
| Microsoft | N/A | Microsoft.AspNetCore.Components.WebAssembly.Server versions antérieures à 11.0.0-rc.2.26478.115 | ||
| Microsoft | N/A | HEVC Video Extensions from Device Manufacturer versions antérieures à 2.5.25.0 | ||
| Microsoft | N/A | System.Security.Cryptography.Pkcs versions antérieures à 11.0.0-rc.2 | ||
| Microsoft | N/A | Skype pour Business Server Subscription Edition CU1 versions antérieures à 7.0.2046.889 | ||
| Microsoft | N/A | Microsoft Configuration Manager 2503 versions antérieures à 5.00.9135.1040 | ||
| Microsoft | N/A | Microsoft.AspNetCore.Components.WebAssembly.Server versions antérieures à 8.0.32 | ||
| Microsoft | N/A | System.Security.Cryptography.Pkcs versions antérieures à 9.0.21 | ||
| Microsoft | N/A | Raw Image Extension versions antérieures à 2.4.36.0 | ||
| Microsoft | N/A | PowerShell 7.4 versions antérieures à 7.4.21 | ||
| Microsoft | N/A | Microsoft Configuration Manager 2509 versions antérieures à 5.00.9141.1041 | ||
| Microsoft | N/A | PowerShell 7.6 versions antérieures à 7.6.7 | ||
| Microsoft | N/A | Microsoft Power Apps versions antérieures à 2608.5 | ||
| Microsoft | N/A | Microsoft.AspNetCore.SignalR.Common versions antérieures à 11.0.0-rc.2 | ||
| Microsoft | N/A | Microsoft SQL Server 2025 pour systèmes x64 (CU8) | ||
| Microsoft | N/A | MPEG-2 Video Extension versions antérieures à 1.2.32.0 | ||
| Microsoft | N/A | Microsoft SQL Server 2022 pour systèmes x64 (GDR) versions antérieures à 16.0.1210.3 | ||
| Microsoft | N/A | System.Security.Cryptography.Xml versions antérieures à 10.0.13 | ||
| Microsoft | N/A | Microsoft SharePoint Server Subscription Edition versions antérieures à 16.0.20326.20190 | ||
| Microsoft | N/A | HEVC Video Extensions pour Licensed Applications versions antérieures à 2.4.85.0 | ||
| Microsoft | N/A | Microsoft Paint versions antérieures à 11.2605.91.0 | ||
| Microsoft | N/A | Microsoft.AspNetCore.SignalR.Common versions antérieures à 8.0.32 | ||
| Microsoft | N/A | Microsoft PowerToys versions antérieures à 0.101.2632.0 | ||
| Microsoft | N/A | Microsoft SQL Server 2022 pour systèmes x64 (CU27) versions antérieures à 16.0.4305.5 | ||
| Microsoft | N/A | Microsoft SQL Server 2017 pour systèmes x64 (CU31) versions antérieures à 14.0.3560.2 | ||
| Microsoft | N/A | Linux kernel - Microsoft MANA Network Driver | ||
| Microsoft | N/A | Raw Image Extension versions antérieures à 2.5.35.0 | ||
| Microsoft | N/A | Microsoft SharePoint Server Subscription Edition | ||
| Microsoft | N/A | Microsoft.AspNetCore.SignalR.Common versions antérieures à 10.0.13 | ||
| Microsoft | N/A | Skype pour Business Server 2019 CU8 versions antérieures à 7.0.2046.583 | ||
| Microsoft | N/A | Microsoft Power Apps pour Android versions antérieures à 3.26085.7 | ||
| Microsoft | N/A | Linux 3P (Third Party) Distros versions antérieures à 7.3 | ||
| Microsoft | N/A | Microsoft.AspNetCore.SignalR.Protocols.MessagePack versions antérieures à 9.0.21 | ||
| Microsoft | N/A | Microsoft.AspNetCore.Authentication.Negotiate versions antérieures à 10.0.13 | ||
| Microsoft | N/A | Microsoft Defender pour Endpoint pour Linux | ||
| Microsoft | N/A | Microsoft Exchange Server 2019 Cumulative Update 14 versions antérieures à 15.02.1544.050 | ||
| Microsoft | N/A | Microsoft Configuration Manager 2603 versions antérieures à 5.00.9146.1026 | ||
| Microsoft | N/A | Microsoft Configuration Manager 2503 versions antérieures à 5.00.9135.1042 | ||
| Microsoft | N/A | Microsoft.AspNetCore.Authentication.Negotiate versions antérieures à 8.0.32 | ||
| Microsoft | N/A | HEVC Video Extensions versions antérieures à 2.4.87.0 | ||
| Microsoft | N/A | Microsoft Exchange Server Subscription Edition RTM versions antérieures à 15.02.2562.056 | ||
| Microsoft | N/A | Microsoft Dynamics NAV 2017 versions antérieures à 30713 | ||
| Microsoft | N/A | PowerShell 7.5 versions antérieures à 7.5.12 | ||
| Microsoft | N/A | System.Security.Cryptography.Xml versions antérieures à 9.0.21 | ||
| Microsoft | N/A | Microsoft Visual Studio 2022 version 17.14 antérieures à 17.14.42 | ||
| Microsoft | N/A | Microsoft Configuration Manager 2509 versions antérieures à 5.00.9141.1039 | ||
| Microsoft | N/A | System.Security.Cryptography.Pkcs versions antérieures à 10.0.13 | ||
| Microsoft | N/A | Microsoft.AspNetCore.SignalR.Common versions antérieures à 9.0.21 | ||
| Microsoft | N/A | Microsoft.AspNetCore.Components.WebAssembly.Server versions antérieures à 11.0.0-rc.2 | ||
| Microsoft | N/A | Microsoft.AspNetCore.SignalR.Core versions antérieures à 1.2.14 | ||
| Microsoft | N/A | Microsoft.AspNetCore.Components.WebAssembly.Server versions antérieures à 10.0.13 | ||
| Microsoft | N/A | HEVC Video Extensions from Device Manufacturer versions antérieures à 2.4.86.0 | ||
| Microsoft | N/A | Microsoft SharePoint Server 2019 | ||
| Microsoft | N/A | Microsoft.AspNetCore.SignalR.Protocols.MessagePack versions antérieures à 11.0.0-rc.2 | ||
| Microsoft | N/A | System.Security.Cryptography.Pkcs versions antérieures à 8.0.2 | ||
| Microsoft | N/A | Microsoft Configuration Manager 2603 versions antérieures à 5.00.9146.1027 | ||
| Microsoft | N/A | Visual Studio Code versions antérieures à 1.141.1 | ||
| Microsoft | N/A | Microsoft SQL Server 2022 pour systèmes x64 (CU 26) | ||
| Microsoft | N/A | Microsoft SQL Server 2025 pour systèmes x64 (CU9) versions antérieures à 17.0.5015.4 |
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft Dynamics NAV 2018 versions ant\u00e9rieures \u00e0 11.0.50736.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.SignalR.Protocols.MessagePack versions ant\u00e9rieures \u00e0 8.0.32",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 14.0.2140.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.Components.WebAssembly.Server versions ant\u00e9rieures \u00e0 9.0.21",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Skype pour Business Server Subscription Edition RTM versions ant\u00e9rieures \u00e0 7.0.2046.889",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.SignalR.Protocols.MessagePack versions ant\u00e9rieures \u00e0 10.0.13",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2026 version 18.10 ant\u00e9rieures \u00e0 18.10.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server 2019 Cumulative Update 15 versions ant\u00e9rieures \u00e0 15.02.1748.055",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Enterprise Server 2016",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 15.0.2200.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Sysinternals Suite versions ant\u00e9rieures \u00e0 1.03",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.Native.Quic.MsQuic.Schannel versions ant\u00e9rieures \u00e0 2.6.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "System.Security.Cryptography.Xml versions ant\u00e9rieures \u00e0 11.0.0-rc.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2025 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 17.0.1145.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "System.Security.Cryptography.Xml versions ant\u00e9rieures \u00e0 8.0.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (CU32) versions ant\u00e9rieures \u00e0 15.0.4500.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.Authentication.Negotiate versions ant\u00e9rieures \u00e0 9.0.21",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Skype pour Business Server 2015 CU13 versions ant\u00e9rieures \u00e0 6.0.9319.886",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "MessagePack 2.5.303 versions ant\u00e9rieures \u00e0 2.5.303",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server 2016 Cumulative Update 23 versions ant\u00e9rieures \u00e0 15.01.2507.077",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.Components.WebAssembly.Server versions ant\u00e9rieures \u00e0 11.0.0-rc.2.26478.115",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "HEVC Video Extensions from Device Manufacturer versions ant\u00e9rieures \u00e0 2.5.25.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "System.Security.Cryptography.Pkcs versions ant\u00e9rieures \u00e0 11.0.0-rc.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Skype pour Business Server Subscription Edition CU1 versions ant\u00e9rieures \u00e0 7.0.2046.889",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Configuration Manager 2503 versions ant\u00e9rieures \u00e0 5.00.9135.1040",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.Components.WebAssembly.Server versions ant\u00e9rieures \u00e0 8.0.32",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "System.Security.Cryptography.Pkcs versions ant\u00e9rieures \u00e0 9.0.21",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Raw Image Extension versions ant\u00e9rieures \u00e0 2.4.36.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "PowerShell 7.4 versions ant\u00e9rieures \u00e0 7.4.21",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Configuration Manager 2509 versions ant\u00e9rieures \u00e0 5.00.9141.1041",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "PowerShell 7.6 versions ant\u00e9rieures \u00e0 7.6.7",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Power Apps versions ant\u00e9rieures \u00e0 2608.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.SignalR.Common versions ant\u00e9rieures \u00e0 11.0.0-rc.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2025 pour syst\u00e8mes x64 (CU8)",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "MPEG-2 Video Extension versions ant\u00e9rieures \u00e0 1.2.32.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 16.0.1210.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "System.Security.Cryptography.Xml versions ant\u00e9rieures \u00e0 10.0.13",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Server Subscription Edition versions ant\u00e9rieures \u00e0 16.0.20326.20190",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "HEVC Video Extensions pour Licensed Applications versions ant\u00e9rieures \u00e0 2.4.85.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Paint versions ant\u00e9rieures \u00e0 11.2605.91.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.SignalR.Common versions ant\u00e9rieures \u00e0 8.0.32",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft PowerToys versions ant\u00e9rieures \u00e0 0.101.2632.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (CU27) versions ant\u00e9rieures \u00e0 16.0.4305.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (CU31) versions ant\u00e9rieures \u00e0 14.0.3560.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Linux kernel - Microsoft MANA Network Driver",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Raw Image Extension versions ant\u00e9rieures \u00e0 2.5.35.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Server Subscription Edition",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.SignalR.Common versions ant\u00e9rieures \u00e0 10.0.13",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Skype pour Business Server 2019 CU8 versions ant\u00e9rieures \u00e0 7.0.2046.583",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Power Apps pour Android versions ant\u00e9rieures \u00e0 3.26085.7",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Linux 3P (Third Party) Distros versions ant\u00e9rieures \u00e0 7.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.SignalR.Protocols.MessagePack versions ant\u00e9rieures \u00e0 9.0.21",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.Authentication.Negotiate versions ant\u00e9rieures \u00e0 10.0.13",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Defender pour Endpoint pour Linux",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server 2019 Cumulative Update 14 versions ant\u00e9rieures \u00e0 15.02.1544.050",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Configuration Manager 2603 versions ant\u00e9rieures \u00e0 5.00.9146.1026",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Configuration Manager 2503 versions ant\u00e9rieures \u00e0 5.00.9135.1042",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.Authentication.Negotiate versions ant\u00e9rieures \u00e0 8.0.32",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "HEVC Video Extensions versions ant\u00e9rieures \u00e0 2.4.87.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server Subscription Edition RTM versions ant\u00e9rieures \u00e0 15.02.2562.056",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Dynamics NAV 2017 versions ant\u00e9rieures \u00e0 30713",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "PowerShell 7.5 versions ant\u00e9rieures \u00e0 7.5.12",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "System.Security.Cryptography.Xml versions ant\u00e9rieures \u00e0 9.0.21",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2022 version 17.14 ant\u00e9rieures \u00e0 17.14.42",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Configuration Manager 2509 versions ant\u00e9rieures \u00e0 5.00.9141.1039",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "System.Security.Cryptography.Pkcs versions ant\u00e9rieures \u00e0 10.0.13",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.SignalR.Common versions ant\u00e9rieures \u00e0 9.0.21",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.Components.WebAssembly.Server versions ant\u00e9rieures \u00e0 11.0.0-rc.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.SignalR.Core versions ant\u00e9rieures \u00e0 1.2.14",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.Components.WebAssembly.Server versions ant\u00e9rieures \u00e0 10.0.13",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "HEVC Video Extensions from Device Manufacturer versions ant\u00e9rieures \u00e0 2.4.86.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Server 2019",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.SignalR.Protocols.MessagePack versions ant\u00e9rieures \u00e0 11.0.0-rc.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "System.Security.Cryptography.Pkcs versions ant\u00e9rieures \u00e0 8.0.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Configuration Manager 2603 versions ant\u00e9rieures \u00e0 5.00.9146.1027",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Visual Studio Code versions ant\u00e9rieures \u00e0 1.141.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (CU 26)",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2025 pour syst\u00e8mes x64 (CU9) versions ant\u00e9rieures \u00e0 17.0.5015.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-88086",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88086"
},
{
"name": "CVE-2026-70007",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70007"
},
{
"name": "CVE-2026-70179",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70179"
},
{
"name": "CVE-2026-105016",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105016"
},
{
"name": "CVE-2026-70298",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70298"
},
{
"name": "CVE-2026-96234",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96234"
},
{
"name": "CVE-2026-85790",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85790"
},
{
"name": "CVE-2026-88081",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88081"
},
{
"name": "CVE-2026-102238",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102238"
},
{
"name": "CVE-2026-96960",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96960"
},
{
"name": "CVE-2026-92707",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92707"
},
{
"name": "CVE-2026-69370",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69370"
},
{
"name": "CVE-2026-88206",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88206"
},
{
"name": "CVE-2026-85932",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85932"
},
{
"name": "CVE-2026-85888",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85888"
},
{
"name": "CVE-2026-87696",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87696"
},
{
"name": "CVE-2026-70183",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70183"
},
{
"name": "CVE-2026-96044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96044"
},
{
"name": "CVE-2026-102231",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102231"
},
{
"name": "CVE-2026-77910",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77910"
},
{
"name": "CVE-2026-70190",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70190"
},
{
"name": "CVE-2026-66822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66822"
},
{
"name": "CVE-2026-96225",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96225"
},
{
"name": "CVE-2026-85873",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85873"
},
{
"name": "CVE-2026-96303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96303"
},
{
"name": "CVE-2026-85363",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85363"
},
{
"name": "CVE-2026-88204",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88204"
},
{
"name": "CVE-2026-70571",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70571"
},
{
"name": "CVE-2026-102870",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102870"
},
{
"name": "CVE-2026-102204",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102204"
},
{
"name": "CVE-2026-96959",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96959"
},
{
"name": "CVE-2026-96943",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96943"
},
{
"name": "CVE-2026-102860",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102860"
},
{
"name": "CVE-2026-62840",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-62840"
},
{
"name": "CVE-2026-88082",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88082"
},
{
"name": "CVE-2026-70159",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70159"
},
{
"name": "CVE-2026-88084",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88084"
},
{
"name": "CVE-2026-70181",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70181"
},
{
"name": "CVE-2026-105720",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105720"
},
{
"name": "CVE-2026-102862",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102862"
},
{
"name": "CVE-2026-94512",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-94512"
},
{
"name": "CVE-2026-96188",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96188"
},
{
"name": "CVE-2026-70267",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70267"
},
{
"name": "CVE-2026-102229",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102229"
},
{
"name": "CVE-2026-100214",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100214"
},
{
"name": "CVE-2026-96231",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96231"
},
{
"name": "CVE-2026-70202",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70202"
},
{
"name": "CVE-2026-102859",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102859"
},
{
"name": "CVE-2026-88088",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88088"
},
{
"name": "CVE-2026-102865",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102865"
},
{
"name": "CVE-2026-88085",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88085"
},
{
"name": "CVE-2026-102866",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102866"
},
{
"name": "CVE-2026-96238",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96238"
},
{
"name": "CVE-2026-105728",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105728"
},
{
"name": "CVE-2026-69651",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69651"
},
{
"name": "CVE-2026-88166",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88166"
},
{
"name": "CVE-2026-97755",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-97755"
},
{
"name": "CVE-2026-70251",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70251"
},
{
"name": "CVE-2026-96232",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96232"
},
{
"name": "CVE-2026-70194",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70194"
},
{
"name": "CVE-2026-70035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70035"
},
{
"name": "CVE-2026-96236",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96236"
},
{
"name": "CVE-2026-70279",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70279"
},
{
"name": "CVE-2026-88092",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88092"
},
{
"name": "CVE-2026-102863",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102863"
},
{
"name": "CVE-2026-70189",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70189"
},
{
"name": "CVE-2026-85876",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85876"
},
{
"name": "CVE-2026-96956",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96956"
},
{
"name": "CVE-2026-67628",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67628"
},
{
"name": "CVE-2026-105713",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105713"
},
{
"name": "CVE-2026-102235",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102235"
},
{
"name": "CVE-2026-96222",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96222"
},
{
"name": "CVE-2026-96235",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96235"
},
{
"name": "CVE-2026-70098",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70098"
},
{
"name": "CVE-2026-70049",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70049"
},
{
"name": "CVE-2026-83520",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83520"
},
{
"name": "CVE-2026-87692",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87692"
},
{
"name": "CVE-2026-102851",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102851"
},
{
"name": "CVE-2026-65674",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65674"
},
{
"name": "CVE-2026-70165",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70165"
},
{
"name": "CVE-2026-83681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83681"
},
{
"name": "CVE-2026-97783",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-97783"
},
{
"name": "CVE-2026-70297",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70297"
},
{
"name": "CVE-2026-70175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70175"
},
{
"name": "CVE-2026-96230",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96230"
},
{
"name": "CVE-2026-102233",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102233"
},
{
"name": "CVE-2026-97782",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-97782"
},
{
"name": "CVE-2026-69943",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69943"
},
{
"name": "CVE-2026-96237",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96237"
},
{
"name": "CVE-2026-96251",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96251"
},
{
"name": "CVE-2026-67625",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67625"
},
{
"name": "CVE-2026-88155",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88155"
},
{
"name": "CVE-2026-96958",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96958"
},
{
"name": "CVE-2026-88075",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88075"
},
{
"name": "CVE-2026-85900",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85900"
},
{
"name": "CVE-2026-102232",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102232"
},
{
"name": "CVE-2026-88209",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88209"
},
{
"name": "CVE-2026-70259",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70259"
},
{
"name": "CVE-2026-70266",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70266"
},
{
"name": "CVE-2026-70162",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70162"
},
{
"name": "CVE-2026-108400",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-108400"
},
{
"name": "CVE-2026-58280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58280"
},
{
"name": "CVE-2026-96957",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96957"
},
{
"name": "CVE-2026-84008",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84008"
},
{
"name": "CVE-2026-105732",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105732"
},
{
"name": "CVE-2026-94520",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-94520"
},
{
"name": "CVE-2026-68883",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68883"
},
{
"name": "CVE-2026-102226",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102226"
},
{
"name": "CVE-2026-87695",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87695"
},
{
"name": "CVE-2026-70174",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70174"
},
{
"name": "CVE-2026-85919",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85919"
},
{
"name": "CVE-2026-88163",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88163"
},
{
"name": "CVE-2026-70161",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70161"
},
{
"name": "CVE-2026-70186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70186"
},
{
"name": "CVE-2026-83746",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83746"
},
{
"name": "CVE-2026-67626",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67626"
},
{
"name": "CVE-2026-105727",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105727"
},
{
"name": "CVE-2026-105013",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105013"
},
{
"name": "CVE-2026-70217",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70217"
},
{
"name": "CVE-2026-102234",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102234"
},
{
"name": "CVE-2026-88208",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88208"
},
{
"name": "CVE-2026-105719",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105719"
},
{
"name": "CVE-2026-87697",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87697"
},
{
"name": "CVE-2026-88200",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88200"
},
{
"name": "CVE-2026-102869",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102869"
},
{
"name": "CVE-2026-83844",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83844"
},
{
"name": "CVE-2026-83945",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83945"
},
{
"name": "CVE-2026-70188",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70188"
},
{
"name": "CVE-2026-96229",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96229"
},
{
"name": "CVE-2026-103572",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-103572"
},
{
"name": "CVE-2026-70343",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70343"
},
{
"name": "CVE-2026-70213",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70213"
},
{
"name": "CVE-2026-96202",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96202"
},
{
"name": "CVE-2026-70197",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70197"
},
{
"name": "CVE-2026-85886",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85886"
},
{
"name": "CVE-2026-70196",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70196"
},
{
"name": "CVE-2026-96224",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96224"
},
{
"name": "CVE-2026-88089",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88089"
},
{
"name": "CVE-2026-88198",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88198"
},
{
"name": "CVE-2026-70246",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70246"
},
{
"name": "CVE-2026-88083",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88083"
},
{
"name": "CVE-2026-102861",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102861"
},
{
"name": "CVE-2026-102864",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102864"
},
{
"name": "CVE-2026-21413",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21413"
}
],
"initial_release_date": "2026-10-14T00:00:00",
"last_revision_date": "2026-10-14T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1316",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-10-14T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Microsoft. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
"vendor_advisories": [
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-87696",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87696"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69943",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69943"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-85790",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85790"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-105728",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105728"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70259",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70259"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96202",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96202"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77910",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77910"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70183",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70183"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70213",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70213"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70202",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70202"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102233",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102233"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96232",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96232"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88163",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88163"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-105719",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105719"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96943",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96943"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102870",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102870"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102861",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102861"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96238",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96238"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88085",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88085"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66822",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66822"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-105720",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105720"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70161",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70161"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70165",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70165"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-85919",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85919"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96251",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96251"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96957",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96957"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88089",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88089"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-85873",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85873"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-83746",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83746"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-83681",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83681"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-94520",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94520"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70194",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70194"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70251",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70251"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88092",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88092"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96237",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96237"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96960",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96960"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96225",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96225"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96231",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96231"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70175",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70175"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-97783",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97783"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96956",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96956"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70267",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70267"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102204",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102204"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70217",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70217"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88208",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88208"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88083",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88083"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88081",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88081"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88088",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88088"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102866",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102866"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-85876",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85876"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102234",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102234"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70297",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70297"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69651",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69651"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-105727",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105727"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70196",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70196"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96044",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96044"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88209",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88209"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70298",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70298"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-103572",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103572"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-105013",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105013"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-85888",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85888"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-85900",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85900"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88204",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88204"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70343",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70343"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96235",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96235"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96188",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96188"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96958",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96958"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70162",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70162"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88206",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88206"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-87695",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87695"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70186",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70186"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-87692",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87692"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88166",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88166"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-84008",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84008"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88155",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88155"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70159",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70159"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96230",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96230"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70174",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70174"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70266",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70266"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-100214",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100214"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67626",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67626"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-83520",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83520"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102226",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102226"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-105732",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105732"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96234",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96234"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-83844",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-94512",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94512"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-62840",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62840"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102851",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102851"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-97782",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97782"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-83945",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83945"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102232",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102232"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68883",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68883"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96222",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96222"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88200",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88200"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96959",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96959"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70246",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70246"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70007",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70007"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102864",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102864"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102862",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102862"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70035",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70035"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70098",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70098"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67625",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67625"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102859",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102859"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-65674",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65674"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70189",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70189"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70049",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70049"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96236",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96236"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-105713",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105713"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88086",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88086"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88075",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88075"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67628",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67628"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70179",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70179"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70181",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70181"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70279",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70279"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102229",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102229"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102869",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102869"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-21413",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21413"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58280",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58280"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96224",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96224"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102235",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102235"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102865",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102865"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-85886",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85886"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-108400",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108400"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-87697",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87697"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70188",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70188"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88084",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88084"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96229",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96229"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69370",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69370"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102860",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102860"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-97755",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97755"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70571",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70571"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-92707",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92707"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-96303",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96303"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70197",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70197"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102863",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102863"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-85932",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85932"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102238",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102238"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88082",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88082"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102231",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102231"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-85363",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85363"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88198",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88198"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70190",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70190"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-105016",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105016"
}
]
}
FKIE_CVE-2026-103572
Vulnerability from fkie_nvd - Published: 2026-10-13 19:17 - Updated: 2026-10-13 22:17| Vendor | Product | Version |
|---|
{
"affected": [
{
"affectedData": [
{
"product": "Microsoft Visual Studio 2022 version 17.14",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.14.42",
"status": "affected",
"version": "17.14.0",
"versionType": "custom"
}
]
},
{
"product": "Microsoft Visual Studio 2026 version 18.10",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "18.10.4",
"status": "affected",
"version": "18.10.0",
"versionType": "custom"
}
]
}
],
"source": "secure@microsoft.com"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper control of generation of code (\u0027code injection\u0027) in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network."
}
],
"id": "CVE-2026-103572",
"lastModified": "2026-10-13T22:17:25.633",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "secure@microsoft.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-103572",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:13:16.613335Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-10-13T19:17:53.293",
"references": [
{
"source": "secure@microsoft.com",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103572"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-94"
}
],
"source": "secure@microsoft.com",
"type": "Secondary"
}
]
}
GHSA-9HQ7-R47P-V8H6
Vulnerability from github – Published: 2026-10-13 21:33 – Updated: 2026-10-13 21:33Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.
{
"affected": [],
"aliases": [
"CVE-2026-103572"
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-10-13T19:17:53Z",
"severity": "HIGH"
},
"details": "Improper control of generation of code (\u0027code injection\u0027) in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.",
"id": "GHSA-9hq7-r47p-v8h6",
"modified": "2026-10-13T21:33:02Z",
"published": "2026-10-13T21:33:02Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-103572"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103572"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
NCSC-2026-0426
Vulnerability from csaf_ncscnl - Published: 2026-10-13 18:56 - Updated: 2026-10-13 18:56Improper control of code generation in Visual Studio Tools for Applications and SQL Server Management Studio allows unauthorized remote code execution by attackers.
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.