Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-58595 (GCVE-0-2026-58595)
Vulnerability from cvelistv5 – Published: 2026-07-14 17:05 – Updated: 2026-07-14 19:37
VLAI
EPSS
VEX
Title
Microsoft Bing App for IOS Spoofing Vulnerability
Summary
Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network.
Severity
CWE
- CWE-1021 - Improper Restriction of Rendered UI Layers or Frames
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft Bing Search for iOS |
Affected:
1.0 , < 33.4.440529002
(custom)
|
Date Public
2026-07-14 14:00
{
"containers": {
"cna": {
"affected": [
{
"product": "Microsoft Bing Search for iOS",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "33.4.440529002",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:bing_search:*:*:*:*:*:ios:*:*",
"versionEndExcluding": "33.4.440529002",
"versionStartIncluding": "1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-07-14T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1021",
"description": "CWE-1021: Improper Restriction of Rendered UI Layers or Frames",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-14T19:37:35.731Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft Bing App for IOS Spoofing Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58595"
}
],
"title": "Microsoft Bing App for IOS Spoofing Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-58595",
"datePublished": "2026-07-14T17:05:27.106Z",
"dateReserved": "2026-07-01T18:03:43.124Z",
"dateUpdated": "2026-07-14T19:37:35.731Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-58595",
"date": "2026-07-15",
"epss": "0.00469",
"percentile": "0.37503"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-58595\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2026-07-14T17:17:12.530\",\"lastModified\":\"2026-07-14T20:34:49.033\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network.\"}],\"affected\":[{\"source\":\"secure@microsoft.com\",\"affectedData\":[{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Bing Search for iOS\",\"versions\":[{\"version\":\"1.0\",\"lessThan\":\"33.4.440529002\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H\",\"baseScore\":8.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.2}]},\"weaknesses\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1021\"}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58595\",\"source\":\"secure@microsoft.com\"}]}}"
}
}
CERTFR-2026-AVI-0872
Vulnerability from certfr_avis - Published: 2026-07-15 - Updated: 2026-07-15
De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Microsoft indique que la vulnérabilité CVE-2026-56164 est activement exploitée.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | N/A | Microsoft.AspNet.OData versions antérieures à 7.8.0 | ||
| Microsoft | N/A | Microsoft Copilot | ||
| Microsoft | N/A | Surface Laptop 4 with Intel Processor | ||
| Microsoft | N/A | Microsoft SQL Server 2017 pour systèmes x64 (CU 31) versions antérieures à 14.0.3540.1 | ||
| Microsoft | N/A | Visual Studio Code versions antérieures à 1.128.1 | ||
| Microsoft | N/A | Microsoft SQL Server 2017 pour systèmes x64 (GDR) versions antérieures à 14.0.2120.1 | ||
| Microsoft | N/A | Microsoft Dynamics NAV 2018 versions antérieures à 11.0.50704.0 | ||
| Microsoft | N/A | Microsoft Surface Laptop Go 3 | ||
| Microsoft | N/A | Microsoft SharePoint Server 2019 versions antérieures à 16.0.10417.20153 | ||
| Microsoft | N/A | Microsoft Configuration Manager 2509 versions antérieures à 2509 | ||
| Microsoft | N/A | Microsoft SharePoint Server 2019 versions antérieures à 16.0.10417.20175 | ||
| Microsoft | N/A | Microsoft SharePoint Server Subscription Edition versions antérieures à 16.0.19725.20434 | ||
| Microsoft | N/A | Microsoft Surface Pro 7+ | ||
| Microsoft | N/A | Microsoft Exchange Server 2019 Cumulative Update 15 versions antérieures à 15.02.1748.048 | ||
| Microsoft | N/A | Microsoft SharePoint Enterprise Server 2016 versions antérieures à 16.0.5561.1001 | ||
| Microsoft | N/A | Surface Laptop 4 with AMD Processor | ||
| Microsoft | N/A | Power BI Report Server versions antérieures à 15.0.1121.120 | ||
| Microsoft | N/A | Microsoft Visual Studio 2026 version 18.7 antérieures à 18.7.4 | ||
| Microsoft | N/A | Microsoft Visual Studio 2022 version 17.14 antérieures à 17.14.36 | ||
| Microsoft | N/A | Microsoft SharePoint Enterprise Server 2016 versions antérieures à 16.0.5556.1005 | ||
| Microsoft | N/A | Fabric Data Warehouse versions antérieures à 8.0.206.113 | ||
| Microsoft | N/A | Microsoft Configuration Manager 2503 versions antérieures à 2503 | ||
| Microsoft | N/A | Microsoft SQL Server 2019 pour systèmes x64 (CU 32) versions antérieures à 15.0.4480.2 | ||
| Microsoft | N/A | Microsoft Malware Protection Engine versions antérieures à 1.1.26060.3008 | ||
| Microsoft | N/A | Microsoft Bing Search pour iOS versions antérieures à 33.4.440529002 | ||
| Microsoft | N/A | Microsoft SQL Server 2022 pour systèmes x64 (GDR) versions antérieures à 16.0.1190.2 | ||
| Microsoft | N/A | Microsoft Surface Hub 3 | ||
| Microsoft | N/A | Microsoft SQL Server 2016 pour systèmes x64 Service Pack 3 Azure Connect Feature Pack versions antérieures à 13.0.7095.1 | ||
| Microsoft | N/A | Microsoft Surface Go 2 | ||
| Microsoft | N/A | Microsoft Surface Hub | ||
| Microsoft | N/A | Microsoft PC Manager versions antérieures à 3.21.6.0 | ||
| Microsoft | N/A | Microsoft Surface Go 3 | ||
| Microsoft | N/A | Microsoft Configuration Manager 2603 versions antérieures à 2603 | ||
| Microsoft | N/A | Microsoft.AspNetCore.OData versions antérieures à 9.5.0[SX1] | ||
| Microsoft | N/A | Microsoft SharePoint Server Subscription Edition versions antérieures à 16.0.19725.20384 | ||
| Microsoft | N/A | Microsoft Surface Hub 2S | ||
| Microsoft | N/A | GitHub Copilot Plugin pour JetBrains IDEs versions antérieures à 1.13.0-251 | ||
| Microsoft | N/A | Microsoft SQL Server 2016 pour systèmes x64 Service Pack 3 (GDR) versions antérieures à 13.0.6500.1 | ||
| Microsoft | N/A | Microsoft Exchange Server 2019 Cumulative Update 14 versions antérieures à 15.02.1544.043 | ||
| Microsoft | N/A | Microsoft Surface Pro 8 | ||
| Microsoft | N/A | Microsoft SQL Server 2022 pour systèmes x64 (CU 25) versions antérieures à 16.0.4262.2 | ||
| Microsoft | N/A | Microsoft PC Manager versions antérieures à 3.22.1.0 | ||
| Microsoft | N/A | Microsoft Surface Laptop Go | ||
| Microsoft | N/A | Microsoft Defender pour Endpoint pour Mac versions antérieures à 101.26042.0020 | ||
| Microsoft | N/A | Microsoft Visual Studio 2022 version 17.12 antérieures à 17.12.22 | ||
| Microsoft | N/A | Microsoft SQL Server 2019 pour systèmes x64 (GDR) versions antérieures à 15.0.2180.2 | ||
| Microsoft | N/A | Microsoft Exchange Server 2016 Cumulative Update 23 versions antérieures à 15.01.2507.071 | ||
| Microsoft | N/A | Microsoft SQL Server 2025 pour systèmes x64 (CU6) versions antérieures à 17.0.4060.2 | ||
| Microsoft | N/A | Microsoft Surface Laptop Go 2 | ||
| Microsoft | N/A | Microsoft SQL Server 2025 pour systèmes x64 (GDR) versions antérieures à 17.0.1125.2 | ||
| Microsoft | N/A | Age of Empires II: Definitive Edition Game versions antérieures à 101.103.46651.0 | ||
| Microsoft | N/A | Microsoft Exchange Server Subscription Edition RTM versions antérieures à 15.02.2562.045 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft.AspNet.OData versions ant\u00e9rieures \u00e0 7.8.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Copilot",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Surface Laptop 4 with Intel Processor",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (CU 31) versions ant\u00e9rieures \u00e0 14.0.3540.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Visual Studio Code versions ant\u00e9rieures \u00e0 1.128.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 14.0.2120.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Dynamics NAV 2018 versions ant\u00e9rieures \u00e0 11.0.50704.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Laptop Go 3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Server 2019 versions ant\u00e9rieures \u00e0 16.0.10417.20153",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Configuration Manager 2509 versions ant\u00e9rieures \u00e0 2509",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Server 2019 versions ant\u00e9rieures \u00e0 16.0.10417.20175",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Server Subscription Edition versions ant\u00e9rieures \u00e0 16.0.19725.20434",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Pro 7+",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server 2019 Cumulative Update 15 versions ant\u00e9rieures \u00e0 15.02.1748.048",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Enterprise Server 2016 versions ant\u00e9rieures \u00e0 16.0.5561.1001",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Surface Laptop 4 with AMD Processor",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Power BI Report Server versions ant\u00e9rieures \u00e0 15.0.1121.120",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2026 version 18.7 ant\u00e9rieures \u00e0 18.7.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2022 version 17.14 ant\u00e9rieures \u00e0 17.14.36",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Enterprise Server 2016 versions ant\u00e9rieures \u00e0 16.0.5556.1005",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Fabric Data Warehouse versions ant\u00e9rieures \u00e0 8.0.206.113",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Configuration Manager 2503 versions ant\u00e9rieures \u00e0 2503",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (CU 32) versions ant\u00e9rieures \u00e0 15.0.4480.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Malware Protection Engine versions ant\u00e9rieures \u00e0 1.1.26060.3008",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Bing Search pour iOS versions ant\u00e9rieures \u00e0 33.4.440529002",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 16.0.1190.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Hub 3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2016 pour syst\u00e8mes x64 Service Pack 3 Azure Connect Feature Pack versions ant\u00e9rieures \u00e0 13.0.7095.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Go 2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Hub",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft PC Manager versions ant\u00e9rieures \u00e0 3.21.6.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Go 3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Configuration Manager 2603 versions ant\u00e9rieures \u00e0 2603",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.OData versions ant\u00e9rieures \u00e0 9.5.0[SX1]",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Server Subscription Edition versions ant\u00e9rieures \u00e0 16.0.19725.20384",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Hub 2S",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "GitHub Copilot Plugin pour JetBrains IDEs versions ant\u00e9rieures \u00e0 1.13.0-251",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2016 pour syst\u00e8mes x64 Service Pack 3 (GDR) versions ant\u00e9rieures \u00e0 13.0.6500.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server 2019 Cumulative Update 14 versions ant\u00e9rieures \u00e0 15.02.1544.043",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Pro 8",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (CU 25) versions ant\u00e9rieures \u00e0 16.0.4262.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft PC Manager versions ant\u00e9rieures \u00e0 3.22.1.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Laptop Go",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Defender pour Endpoint pour Mac versions ant\u00e9rieures \u00e0 101.26042.0020",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2022 version 17.12 ant\u00e9rieures \u00e0 17.12.22",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 15.0.2180.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server 2016 Cumulative Update 23 versions ant\u00e9rieures \u00e0 15.01.2507.071",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2025 pour syst\u00e8mes x64 (CU6) versions ant\u00e9rieures \u00e0 17.0.4060.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Laptop Go 2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2025 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 17.0.1125.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Age of Empires II: Definitive Edition Game versions ant\u00e9rieures \u00e0 101.103.46651.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server Subscription Edition RTM versions ant\u00e9rieures \u00e0 15.02.2562.045",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-55030",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55030"
},
{
"name": "CVE-2026-55134",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55134"
},
{
"name": "CVE-2026-55020",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55020"
},
{
"name": "CVE-2026-45646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45646"
},
{
"name": "CVE-2026-50657",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50657"
},
{
"name": "CVE-2026-50524",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50524"
},
{
"name": "CVE-2026-55130",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55130"
},
{
"name": "CVE-2026-55142",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55142"
},
{
"name": "CVE-2026-55944",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55944"
},
{
"name": "CVE-2026-55002",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55002"
},
{
"name": "CVE-2026-50522",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50522"
},
{
"name": "CVE-2026-55009",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55009"
},
{
"name": "CVE-2026-57101",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57101"
},
{
"name": "CVE-2026-56642",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56642"
},
{
"name": "CVE-2026-56178",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56178"
},
{
"name": "CVE-2026-55033",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55033"
},
{
"name": "CVE-2026-56157",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56157"
},
{
"name": "CVE-2026-55026",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55026"
},
{
"name": "CVE-2026-50510",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50510"
},
{
"name": "CVE-2026-55038",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55038"
},
{
"name": "CVE-2026-47282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47282"
},
{
"name": "CVE-2026-50526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50526"
},
{
"name": "CVE-2026-55021",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55021"
},
{
"name": "CVE-2026-45496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45496"
},
{
"name": "CVE-2026-55055",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55055"
},
{
"name": "CVE-2026-55028",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55028"
},
{
"name": "CVE-2026-55045",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55045"
},
{
"name": "CVE-2026-55051",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55051"
},
{
"name": "CVE-2026-55135",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55135"
},
{
"name": "CVE-2026-55035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55035"
},
{
"name": "CVE-2026-55008",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55008"
},
{
"name": "CVE-2026-55019",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55019"
},
{
"name": "CVE-2026-47305",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47305"
},
{
"name": "CVE-2026-55016",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55016"
},
{
"name": "CVE-2026-58595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58595"
},
{
"name": "CVE-2026-47303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47303"
},
{
"name": "CVE-2026-47295",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47295"
},
{
"name": "CVE-2026-50468",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50468"
},
{
"name": "CVE-2026-50663",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50663"
},
{
"name": "CVE-2026-55047",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55047"
},
{
"name": "CVE-2026-55011",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55011"
},
{
"name": "CVE-2026-55052",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55052"
},
{
"name": "CVE-2026-50650",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50650"
},
{
"name": "CVE-2026-55128",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55128"
},
{
"name": "CVE-2026-55145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55145"
},
{
"name": "CVE-2026-55006",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55006"
},
{
"name": "CVE-2026-55012",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55012"
},
{
"name": "CVE-2026-47296",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47296"
},
{
"name": "CVE-2026-57102",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57102"
},
{
"name": "CVE-2026-47304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47304"
},
{
"name": "CVE-2026-50527",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50527"
},
{
"name": "CVE-2026-55027",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55027"
},
{
"name": "CVE-2026-55032",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55032"
},
{
"name": "CVE-2026-55126",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55126"
},
{
"name": "CVE-2026-58647",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58647"
},
{
"name": "CVE-2026-55050",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55050"
},
{
"name": "CVE-2026-56164",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56164"
},
{
"name": "CVE-2026-50506",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50506"
},
{
"name": "CVE-2026-50525",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50525"
},
{
"name": "CVE-2026-48581",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48581"
},
{
"name": "CVE-2026-55034",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55034"
},
{
"name": "CVE-2026-55124",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55124"
},
{
"name": "CVE-2026-54108",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54108"
},
{
"name": "CVE-2026-50520",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50520"
},
{
"name": "CVE-2026-50528",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50528"
},
{
"name": "CVE-2026-58636",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58636"
},
{
"name": "CVE-2026-55127",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55127"
},
{
"name": "CVE-2026-55121",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55121"
},
{
"name": "CVE-2026-47302",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47302"
},
{
"name": "CVE-2026-56192",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56192"
},
{
"name": "CVE-2026-47301",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47301"
},
{
"name": "CVE-2026-50646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50646"
},
{
"name": "CVE-2026-50648",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50648"
},
{
"name": "CVE-2026-50438",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50438"
},
{
"name": "CVE-2026-55132",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55132"
},
{
"name": "CVE-2026-55125",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55125"
},
{
"name": "CVE-2026-55040",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55040"
},
{
"name": "CVE-2026-55023",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55023"
},
{
"name": "CVE-2026-54116",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54116"
},
{
"name": "CVE-2026-55005",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55005"
},
{
"name": "CVE-2026-50659",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50659"
},
{
"name": "CVE-2026-54118",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54118"
},
{
"name": "CVE-2026-47300",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47300"
},
{
"name": "CVE-2026-50651",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50651"
},
{
"name": "CVE-2026-50658",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50658"
},
{
"name": "CVE-2026-58644",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58644"
},
{
"name": "CVE-2026-50649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50649"
},
{
"name": "CVE-2026-54117",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54117"
},
{
"name": "CVE-2026-58277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58277"
}
],
"initial_release_date": "2026-07-15T00:00:00",
"last_revision_date": "2026-07-15T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0872",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-15T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Microsoft. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.\n\nMicrosoft indique que la vuln\u00e9rabilit\u00e9 CVE-2026-56164 est activement exploit\u00e9e.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
"vendor_advisories": [
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50649",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55130",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55130"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50658",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50658"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54108",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54108"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47296",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47296"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54118",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54118"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55124",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55124"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55132",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55132"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-57102",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57102"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54116",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54116"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55142",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55142"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47282",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47282"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55126",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55126"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58647",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58647"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50650",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-57101",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57101"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54118",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54118"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-45496",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45496"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55127",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55127"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50527",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55032",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55032"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50526",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55002",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55002"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47302",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50506",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50506"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50520",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50520"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55038",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55038"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55021"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55121",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55121"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55006",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55006"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58277",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58277"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55134",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55134"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55027",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55027"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55035",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55035"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55128",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55128"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55055",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55055"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47305",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47305"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50438",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50438"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55135",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55135"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58636",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58636"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58595",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58595"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55019",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55019"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55023",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55023"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50648",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55009",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55009"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55026",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55026"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55045",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55045"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56157",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56157"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50528",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50646",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50651",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50651"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55033",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55033"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55016",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55016"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55944",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55944"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47300",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55030",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55030"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55012",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55012"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47295",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47295"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50510",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50510"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55125",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55125"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58644",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58644"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50659",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47303",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54117",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54117"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56164",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56164"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55011",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55011"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55052",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55052"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56192",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56192"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55008",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55008"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56642",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56642"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50525",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55028",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55028"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-45646",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45646"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50522",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50522"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55051",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55051"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56178",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56178"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-48581",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48581"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50657",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50657"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55047",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55047"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50468",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50468"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47304",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55145",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55145"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55040",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55040"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50663",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50663"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47301",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47301"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55034",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55034"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55005",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55005"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50524",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55050",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55050"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55020",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55020"
}
]
}
FKIE_CVE-2026-58595
Vulnerability from fkie_nvd - Published: 2026-07-14 17:17 - Updated: 2026-07-14 20:34
Severity
Summary
Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network.
References
Impacted products
| Vendor | Product | Version |
|---|
{
"affected": [
{
"affectedData": [
{
"product": "Microsoft Bing Search for iOS",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "33.4.440529002",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
}
],
"source": "secure@microsoft.com"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network."
}
],
"id": "CVE-2026-58595",
"lastModified": "2026-07-14T20:34:49.033",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.2,
"source": "secure@microsoft.com",
"type": "Primary"
}
]
},
"published": "2026-07-14T17:17:12.530",
"references": [
{
"source": "secure@microsoft.com",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58595"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-1021"
}
],
"source": "secure@microsoft.com",
"type": "Primary"
}
]
}
GHSA-G43G-5F3Q-RWXV
Vulnerability from github – Published: 2026-07-14 18:32 – Updated: 2026-07-14 18:32
VLAI
Details
Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network.
Severity
8.1 (High)
{
"affected": [],
"aliases": [
"CVE-2026-58595"
],
"database_specific": {
"cwe_ids": [
"CWE-1021"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-07-14T17:17:12Z",
"severity": "HIGH"
},
"details": "Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network.",
"id": "GHSA-g43g-5f3q-rwxv",
"modified": "2026-07-14T18:32:11Z",
"published": "2026-07-14T18:32:11Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58595"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58595"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"type": "CVSS_V3"
}
]
}
MSRC_CVE-2026-58595
Vulnerability from csaf_microsoft - Published: 2026-07-14 07:00 - Updated: 2026-07-14 07:00Summary
Microsoft Bing App for IOS Spoofing Vulnerability
Severity
Important
Notes
Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Customer Action: Required. The vulnerability documented by this CVE requires customer action to resolve.
CWE-1021
- Improper Restriction of Rendered UI Layers or Frames
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft Bing Search for iOS 33.4.440529002
Microsoft Bing Search for iOS
|
33.4.440529002 |
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft Bing Search for iOS <33.4.440529002
Microsoft Bing Search for iOS
|
<33.4.440529002 |
Vendor Fix
fix
|
Threats
Impact
Spoofing
Exploit Status
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely
References
7 references
| URL | Category |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | self |
| https://msrc.microsoft.com/csaf/advisories/2026/m… | self |
| https://www.microsoft.com/en-us/msrc/exploitabili… | external |
| https://support.microsoft.com/lifecycle | external |
| https://www.first.org/cvss | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | self |
| https://msrc.microsoft.com/csaf/advisories/2026/m… | self |
Acknowledgments
<a href="https://www.linkedin.com/in/azza-tegar-naufal-ataullah-4b0488317/">Azza Tegar Naufal Ataullah</a>
{
"document": {
"acknowledgments": [
{
"names": [
"\u003ca href=\"https://www.linkedin.com/in/azza-tegar-naufal-ataullah-4b0488317/\"\u003eAzza Tegar Naufal Ataullah\u003c/a\u003e"
]
}
],
"aggregate_severity": {
"namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
"title": "Disclaimer"
},
{
"category": "general",
"text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
"title": "Customer Action"
}
],
"publisher": {
"category": "vendor",
"contact_details": "secure@microsoft.com",
"name": "Microsoft Security Response Center",
"namespace": "https://msrc.microsoft.com"
},
"references": [
{
"category": "self",
"summary": "CVE-2026-58595 Microsoft Bing App for IOS Spoofing Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58595"
},
{
"category": "self",
"summary": "CVE-2026-58595 Microsoft Bing App for IOS Spoofing Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/csaf/advisories/2026/msrc_cve-2026-58595.json"
},
{
"category": "external",
"summary": "Microsoft Exploitability Index",
"url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
},
{
"category": "external",
"summary": "Microsoft Support Lifecycle",
"url": "https://support.microsoft.com/lifecycle"
},
{
"category": "external",
"summary": "Common Vulnerability Scoring System",
"url": "https://www.first.org/cvss"
}
],
"title": "Microsoft Bing App for IOS Spoofing Vulnerability",
"tracking": {
"current_release_date": "2026-07-14T07:00:00.000Z",
"generator": {
"date": "2026-07-14T20:05:38.139Z",
"engine": {
"name": "MSRC Generator",
"version": "1.0"
}
},
"id": "msrc_CVE-2026-58595",
"initial_release_date": "2026-07-14T07:00:00.000Z",
"revision_history": [
{
"date": "2026-07-14T07:00:00.000Z",
"legacy_version": "1",
"number": "1",
"summary": "Information published."
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c33.4.440529002",
"product": {
"name": "Microsoft Bing Search for iOS \u003c33.4.440529002",
"product_id": "1"
}
},
{
"category": "product_version",
"name": "33.4.440529002",
"product": {
"name": "Microsoft Bing Search for iOS 33.4.440529002",
"product_id": "12336"
}
}
],
"category": "product_name",
"name": "Microsoft Bing Search for iOS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-58595",
"cwe": {
"id": "CWE-1021",
"name": "Improper Restriction of Rendered UI Layers or Frames"
},
"notes": [
{
"category": "general",
"text": "Microsoft",
"title": "Assigning CNA"
}
],
"product_status": {
"fixed": [
"12336"
],
"known_affected": [
"1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-58595 Microsoft Bing App for IOS Spoofing Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58595"
},
{
"category": "self",
"summary": "CVE-2026-58595 Microsoft Bing App for IOS Spoofing Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/csaf/advisories/2026/msrc_cve-2026-58595.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "33.4.440529002:Security Update:https://apps.apple.com/us/app/microsoft-bing-search/id345323231",
"product_ids": [
"1"
],
"url": "https://apps.apple.com/us/app/microsoft-bing-search/id345323231"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"environmentalScore": 0.0,
"exploitCodeMaturity": "UNPROVEN",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"remediationLevel": "OFFICIAL_FIX",
"reportConfidence": "CONFIRMED",
"scope": "UNCHANGED",
"temporalScore": 7.1,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Spoofing"
},
{
"category": "exploit_status",
"details": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"
}
],
"title": "Microsoft Bing App for IOS Spoofing Vulnerability"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…