{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft.AspNet.OData versions ant\u00e9rieures \u00e0 7.8.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Copilot",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Surface Laptop 4 with Intel Processor",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (CU 31) versions ant\u00e9rieures \u00e0 14.0.3540.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Visual Studio Code versions ant\u00e9rieures \u00e0 1.128.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 14.0.2120.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Dynamics NAV 2018 versions ant\u00e9rieures \u00e0 11.0.50704.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Surface Laptop Go 3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SharePoint Server 2019 versions ant\u00e9rieures \u00e0 16.0.10417.20153",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Configuration Manager 2509 versions ant\u00e9rieures \u00e0 2509",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SharePoint Server 2019 versions ant\u00e9rieures \u00e0 16.0.10417.20175",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SharePoint Server Subscription Edition versions ant\u00e9rieures \u00e0 16.0.19725.20434",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Surface Pro 7+",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Exchange Server 2019 Cumulative Update 15 versions ant\u00e9rieures \u00e0 15.02.1748.048",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SharePoint Enterprise Server 2016 versions ant\u00e9rieures \u00e0 16.0.5561.1001",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Surface Laptop 4 with AMD Processor",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Power BI Report Server versions ant\u00e9rieures \u00e0 15.0.1121.120",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2026 version 18.7 ant\u00e9rieures \u00e0 18.7.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2022 version 17.14 ant\u00e9rieures \u00e0 17.14.36",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SharePoint Enterprise Server 2016 versions ant\u00e9rieures \u00e0 16.0.5556.1005",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Fabric Data Warehouse versions ant\u00e9rieures \u00e0 8.0.206.113",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Configuration Manager 2503 versions ant\u00e9rieures \u00e0 2503",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (CU 32) versions ant\u00e9rieures \u00e0 15.0.4480.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Malware Protection Engine versions ant\u00e9rieures \u00e0 1.1.26060.3008",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Bing Search pour iOS versions ant\u00e9rieures \u00e0 33.4.440529002",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 16.0.1190.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Surface Hub 3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2016 pour syst\u00e8mes x64 Service Pack 3 Azure Connect Feature Pack versions ant\u00e9rieures \u00e0 13.0.7095.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Surface Go 2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Surface Hub",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft PC Manager versions ant\u00e9rieures \u00e0 3.21.6.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Surface Go 3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Configuration Manager 2603 versions ant\u00e9rieures \u00e0 2603",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft.AspNetCore.OData versions ant\u00e9rieures \u00e0 9.5.0[SX1]",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SharePoint Server Subscription Edition versions ant\u00e9rieures \u00e0 16.0.19725.20384",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Surface Hub 2S",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "GitHub Copilot Plugin pour JetBrains IDEs versions ant\u00e9rieures \u00e0 1.13.0-251",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2016 pour syst\u00e8mes x64 Service Pack 3 (GDR) versions ant\u00e9rieures \u00e0 13.0.6500.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Exchange Server 2019 Cumulative Update 14 versions ant\u00e9rieures \u00e0 15.02.1544.043",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Surface Pro 8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (CU 25) versions ant\u00e9rieures \u00e0 16.0.4262.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft PC Manager versions ant\u00e9rieures \u00e0 3.22.1.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Surface Laptop Go",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Defender pour Endpoint pour Mac versions ant\u00e9rieures \u00e0 101.26042.0020",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2022 version 17.12 ant\u00e9rieures \u00e0 17.12.22",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 15.0.2180.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Exchange Server 2016 Cumulative Update 23 versions ant\u00e9rieures \u00e0 15.01.2507.071",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2025 pour syst\u00e8mes x64 (CU6) versions ant\u00e9rieures \u00e0 17.0.4060.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Surface Laptop Go 2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2025 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 17.0.1125.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Age of Empires II: Definitive Edition Game versions ant\u00e9rieures \u00e0 101.103.46651.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Exchange Server Subscription Edition RTM versions ant\u00e9rieures \u00e0 15.02.2562.045",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-55030",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55030"
    },
    {
      "name": "CVE-2026-55134",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55134"
    },
    {
      "name": "CVE-2026-55020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55020"
    },
    {
      "name": "CVE-2026-45646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45646"
    },
    {
      "name": "CVE-2026-50657",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50657"
    },
    {
      "name": "CVE-2026-50524",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50524"
    },
    {
      "name": "CVE-2026-55130",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55130"
    },
    {
      "name": "CVE-2026-55142",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55142"
    },
    {
      "name": "CVE-2026-55944",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55944"
    },
    {
      "name": "CVE-2026-55002",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55002"
    },
    {
      "name": "CVE-2026-50522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50522"
    },
    {
      "name": "CVE-2026-55009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55009"
    },
    {
      "name": "CVE-2026-57101",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57101"
    },
    {
      "name": "CVE-2026-56642",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56642"
    },
    {
      "name": "CVE-2026-56178",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56178"
    },
    {
      "name": "CVE-2026-55033",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55033"
    },
    {
      "name": "CVE-2026-56157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56157"
    },
    {
      "name": "CVE-2026-55026",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55026"
    },
    {
      "name": "CVE-2026-50510",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50510"
    },
    {
      "name": "CVE-2026-55038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55038"
    },
    {
      "name": "CVE-2026-47282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47282"
    },
    {
      "name": "CVE-2026-50526",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50526"
    },
    {
      "name": "CVE-2026-55021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55021"
    },
    {
      "name": "CVE-2026-45496",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45496"
    },
    {
      "name": "CVE-2026-55055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55055"
    },
    {
      "name": "CVE-2026-55028",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55028"
    },
    {
      "name": "CVE-2026-55045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55045"
    },
    {
      "name": "CVE-2026-55051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55051"
    },
    {
      "name": "CVE-2026-55135",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55135"
    },
    {
      "name": "CVE-2026-55035",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55035"
    },
    {
      "name": "CVE-2026-55008",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55008"
    },
    {
      "name": "CVE-2026-55019",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55019"
    },
    {
      "name": "CVE-2026-47305",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47305"
    },
    {
      "name": "CVE-2026-55016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55016"
    },
    {
      "name": "CVE-2026-58595",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58595"
    },
    {
      "name": "CVE-2026-47303",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47303"
    },
    {
      "name": "CVE-2026-47295",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47295"
    },
    {
      "name": "CVE-2026-50468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50468"
    },
    {
      "name": "CVE-2026-50663",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50663"
    },
    {
      "name": "CVE-2026-55047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55047"
    },
    {
      "name": "CVE-2026-55011",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55011"
    },
    {
      "name": "CVE-2026-55052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55052"
    },
    {
      "name": "CVE-2026-50650",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50650"
    },
    {
      "name": "CVE-2026-55128",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55128"
    },
    {
      "name": "CVE-2026-55145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55145"
    },
    {
      "name": "CVE-2026-55006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55006"
    },
    {
      "name": "CVE-2026-55012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55012"
    },
    {
      "name": "CVE-2026-47296",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47296"
    },
    {
      "name": "CVE-2026-57102",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57102"
    },
    {
      "name": "CVE-2026-47304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47304"
    },
    {
      "name": "CVE-2026-50527",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50527"
    },
    {
      "name": "CVE-2026-55027",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55027"
    },
    {
      "name": "CVE-2026-55032",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55032"
    },
    {
      "name": "CVE-2026-55126",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55126"
    },
    {
      "name": "CVE-2026-58647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58647"
    },
    {
      "name": "CVE-2026-55050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55050"
    },
    {
      "name": "CVE-2026-56164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56164"
    },
    {
      "name": "CVE-2026-50506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50506"
    },
    {
      "name": "CVE-2026-50525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50525"
    },
    {
      "name": "CVE-2026-48581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48581"
    },
    {
      "name": "CVE-2026-55034",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55034"
    },
    {
      "name": "CVE-2026-55124",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55124"
    },
    {
      "name": "CVE-2026-54108",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54108"
    },
    {
      "name": "CVE-2026-50520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50520"
    },
    {
      "name": "CVE-2026-50528",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50528"
    },
    {
      "name": "CVE-2026-58636",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58636"
    },
    {
      "name": "CVE-2026-55127",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55127"
    },
    {
      "name": "CVE-2026-55121",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55121"
    },
    {
      "name": "CVE-2026-47302",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47302"
    },
    {
      "name": "CVE-2026-56192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56192"
    },
    {
      "name": "CVE-2026-47301",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47301"
    },
    {
      "name": "CVE-2026-50646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50646"
    },
    {
      "name": "CVE-2026-50648",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50648"
    },
    {
      "name": "CVE-2026-50438",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50438"
    },
    {
      "name": "CVE-2026-55132",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55132"
    },
    {
      "name": "CVE-2026-55125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55125"
    },
    {
      "name": "CVE-2026-55040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55040"
    },
    {
      "name": "CVE-2026-55023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55023"
    },
    {
      "name": "CVE-2026-54116",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54116"
    },
    {
      "name": "CVE-2026-55005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55005"
    },
    {
      "name": "CVE-2026-50659",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50659"
    },
    {
      "name": "CVE-2026-54118",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54118"
    },
    {
      "name": "CVE-2026-47300",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47300"
    },
    {
      "name": "CVE-2026-50651",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50651"
    },
    {
      "name": "CVE-2026-50658",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50658"
    },
    {
      "name": "CVE-2026-58644",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58644"
    },
    {
      "name": "CVE-2026-50649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50649"
    },
    {
      "name": "CVE-2026-54117",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54117"
    },
    {
      "name": "CVE-2026-58277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58277"
    }
  ],
  "initial_release_date": "2026-07-15T00:00:00",
  "last_revision_date": "2026-07-15T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0872",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-07-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Microsoft. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.\n\nMicrosoft indique que la vuln\u00e9rabilit\u00e9 CVE-2026-56164 est activement exploit\u00e9e.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
  "vendor_advisories": [
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50649",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55130",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55130"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50658",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50658"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54108",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54108"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47296",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47296"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54118",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54118"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55124",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55124"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55132",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55132"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-57102",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57102"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54116",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54116"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55142",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55142"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47282",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47282"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55126",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55126"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58647",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58647"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50650",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-57101",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57101"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54118",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54118"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-45496",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45496"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55127",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55127"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50527",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55032",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55032"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50526",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55002",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55002"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47302",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50506",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50506"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50520",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50520"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55038",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55038"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55021",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55021"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55121",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55121"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55006",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55006"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58277",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58277"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55134",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55134"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55027",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55027"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55035",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55035"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55128",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55128"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55055",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55055"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47305",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47305"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50438",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50438"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55135",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55135"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58636",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58636"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58595",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58595"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55019",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55019"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55023",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55023"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50648",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55009",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55009"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55026",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55026"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55045",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55045"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56157",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56157"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50528",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50646",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50651",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50651"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55033",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55033"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55016",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55016"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55944",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55944"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47300",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55030",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55030"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55012",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55012"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47295",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47295"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50510",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50510"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55125",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55125"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58644",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58644"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50659",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47303",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54117",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54117"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56164",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56164"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55011",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55011"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55052",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55052"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56192",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56192"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55008",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55008"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56642",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56642"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50525",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55028",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55028"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-45646",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45646"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50522",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50522"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55051",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55051"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56178",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56178"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-48581",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48581"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50657",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50657"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55047",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55047"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50468",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50468"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47304",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55145",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55145"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55040",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55040"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50663",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50663"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47301",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47301"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55034",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55034"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55005",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55005"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50524",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55050",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55050"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55020",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55020"
    }
  ]
}

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Microsoft Defender for Endpoint for Mac",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "101.26042.0020",
              "status": "affected",
              "version": "101.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "secure@microsoft.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally."
    }
  ],
  "id": "CVE-2026-50657",
  "lastModified": "2026-07-15T14:18:22.067",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 4.7,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.0,
        "impactScore": 3.6,
        "source": "secure@microsoft.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-50657",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-07-15T13:59:35.041024Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-07-14T18:17:59.303",
  "references": [
    {
      "source": "secure@microsoft.com",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50657"
    }
  ],
  "sourceIdentifier": "secure@microsoft.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-359"
        }
      ],
      "source": "secure@microsoft.com",
      "type": "Secondary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2026-50657"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-359"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-07-14T18:17:59Z",
    "severity": "MODERATE"
  },
  "details": "Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally.",
  "id": "GHSA-f9xj-xpm5-pgx4",
  "modified": "2026-07-14T18:32:28Z",
  "published": "2026-07-14T18:32:28Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50657"
    },
    {
      "type": "WEB",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50657"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "\u003ca href=\"https://spaceraccoon.dev/\"\u003eEugene Lim\u003c/a\u003e"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      },
      {
        "category": "general",
        "text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
        "title": "Customer Action"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2026-50657 Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability - HTML",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50657"
      },
      {
        "category": "self",
        "summary": "CVE-2026-50657 Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability - CSAF",
        "url": "https://msrc.microsoft.com/csaf/advisories/2026/msrc_cve-2026-50657.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Exploitability Index",
        "url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability",
    "tracking": {
      "current_release_date": "2026-07-14T07:00:00.000Z",
      "generator": {
        "date": "2026-07-14T20:05:38.212Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2026-50657",
      "initial_release_date": "2026-07-14T07:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-07-14T07:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c101.26042.0020",
            "product": {
              "name": "Microsoft Defender for Endpoint for Mac \u003c101.26042.0020",
              "product_id": "1"
            }
          },
          {
            "category": "product_version",
            "name": "101.26042.0020",
            "product": {
              "name": "Microsoft Defender for Endpoint for Mac 101.26042.0020",
              "product_id": "12014"
            }
          }
        ],
        "category": "product_name",
        "name": "Microsoft Defender for Endpoint for Mac"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-50657",
      "cwe": {
        "id": "CWE-359",
        "name": "Exposure of Private Personal Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "general",
          "text": "Microsoft",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "12014"
        ],
        "known_affected": [
          "1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-50657 Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability - HTML",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50657"
        },
        {
          "category": "self",
          "summary": "CVE-2026-50657 Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability - CSAF",
          "url": "https://msrc.microsoft.com/csaf/advisories/2026/msrc_cve-2026-50657.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-14T07:00:00.000Z",
          "details": "101.26042.0020:Security Update:https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-updates?view=o365-worldwide",
          "product_ids": [
            "1"
          ],
          "url": "https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-updates?view=o365-worldwide"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 0.0,
            "exploitCodeMaturity": "UNPROVEN",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "remediationLevel": "OFFICIAL_FIX",
            "reportConfidence": "CONFIRMED",
            "scope": "UNCHANGED",
            "temporalScore": 4.1,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Information Disclosure"
        },
        {
          "category": "exploit_status",
          "details": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"
        }
      ],
      "title": "Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability"
    }
  ]
}

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Microsoft heeft kwetsbaarheden verholpen in Defender.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om zich verhoogde rechten toe te kennen, willekeurige code uit te voeren met rechten van het systeem en/of toegang te krijgen tot gevoelige gegevens.\n\nDe kwaadwillende moet het slachtoffer misleiden een malafide bestand te downloaden en openen.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:\n\nhttps://portal.msrc.microsoft.com/en-us/security-guidance",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Heap-based Buffer Overflow",
        "title": "CWE-122"
      },
      {
        "category": "general",
        "text": "Integer Overflow or Wraparound",
        "title": "CWE-190"
      },
      {
        "category": "general",
        "text": "Integer Underflow (Wrap or Wraparound)",
        "title": "CWE-191"
      },
      {
        "category": "general",
        "text": "Exposure of Private Personal Information to an Unauthorized Actor",
        "title": "CWE-359"
      },
      {
        "category": "general",
        "text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
        "title": "CWE-367"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "title": "Kwetsbaarheden verholpen in Microsoft Defender",
    "tracking": {
      "current_release_date": "2026-07-14T18:38:59.098043Z",
      "generator": {
        "date": "2025-08-04T16:30:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.3"
        }
      },
      "id": "NCSC-2026-0236",
      "initial_release_date": "2026-07-14T18:38:59.098043Z",
      "revision_history": [
        {
          "date": "2026-07-14T18:38:59.098043Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft Defender for Endpoint for Mac"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-2"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft Malware Protection Engine"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-55011",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Underflow (Wrap or Wraparound)",
          "title": "CWE-191"
        },
        {
          "category": "description",
          "text": "An integer underflow vulnerability in Microsoft Defender enables unauthorized local code execution due to wraparound behavior.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-55011 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-55011.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-55011"
    },
    {
      "cve": "CVE-2026-55012",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "An integer overflow or wraparound vulnerability in Microsoft Defender enables an unauthorized attacker to execute code locally, posing a significant security risk.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-55012 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-55012.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-55012"
    },
    {
      "cve": "CVE-2026-50657",
      "cwe": {
        "id": "CWE-359",
        "name": "Exposure of Private Personal Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Private Personal Information to an Unauthorized Actor",
          "title": "CWE-359"
        },
        {
          "category": "description",
          "text": "An exposure of private personal information vulnerability in Microsoft Defender allows an authorized local attacker to disclose sensitive data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-50657 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-50657.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-50657"
    },
    {
      "cve": "CVE-2026-50658",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "notes": [
        {
          "category": "other",
          "text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
          "title": "CWE-367"
        },
        {
          "category": "description",
          "text": "A time-of-check time-of-use (TOCTOU) race condition vulnerability in Microsoft Defender allows an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-50658 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-50658.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-50658"
    },
    {
      "cve": "CVE-2026-56178",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "notes": [
        {
          "category": "other",
          "text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
          "title": "CWE-367"
        },
        {
          "category": "description",
          "text": "A time-of-check time-of-use (TOCTOU) race condition vulnerability in Microsoft Defender for Endpoint allows an authorized local attacker to elevate privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-56178 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-56178.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-56178"
    }
  ]
}