CERTFR-2025-AVI-0882
Vulnerability from certfr_avis - Published: 2025-10-15 - Updated: 2025-10-15
De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | N/A | Microsoft Exchange Server 2016 Cumulative Update 23 versions antérieures à 15.01.2507.061 | ||
| Microsoft | N/A | Microsoft Configuration Manager 2503 versions antérieures à 5.00.9135.1008 | ||
| Microsoft | N/A | Microsoft JDBC Driver 12.2 pour SQL Server versions antérieures à 12.2.1 | ||
| Microsoft | N/A | Microsoft Exchange Server Subscription Edition RTM versions antérieures à 15.02.2562.029 | ||
| Microsoft | N/A | Microsoft Visual Studio 2022 version 17.12 antérieures à 17.12.13 | ||
| Microsoft | N/A | Microsoft SharePoint Enterprise Server 2016 versions antérieures à 16.0.5522.1000 | ||
| Microsoft | N/A | Microsoft Visual Studio 2022 version 17.14 antérieures à 17.14.17 | ||
| Microsoft | N/A | Microsoft Configuration Manager 2409 versions antérieures à 5.00.9132.1029 | ||
| Microsoft | N/A | microsoft/playwright versions antérieures à 1.55.1 | ||
| Microsoft | N/A | Microsoft Exchange Server 2019 Cumulative Update 14 versions antérieures à 15.02.1544.036 | ||
| Microsoft | N/A | Microsoft JDBC Driver 11.2 pour SQL Server versions antérieures à 11.2.4 | ||
| Microsoft | N/A | Microsoft JDBC Driver 12.4 pour SQL Server versions antérieures à 12.4.3 | ||
| Microsoft | N/A | Microsoft Exchange Server 2019 Cumulative Update 15 versions antérieures à 15.02.1748.039 | ||
| Microsoft | N/A | Microsoft JDBC Driver 12.8 pour SQL Server versions antérieures à 12.8.2 | ||
| Microsoft | N/A | PowerShell 7.4 versions antérieures à 7.4.13 | ||
| Microsoft | N/A | Microsoft Visual Studio 2019 version 16.11 (inclus 16.0 - 16.10) antérieures à 16.11.52 | ||
| Microsoft | N/A | PowerShell 7.5 versions antérieures à 7.5.4 | ||
| Microsoft | N/A | Microsoft JDBC Driver 13.2 pour SQL Server versions antérieures à 13.2.1 | ||
| Microsoft | N/A | Microsoft SharePoint Server 2019 versions antérieures à 16.0.10417.20059 | ||
| Microsoft | N/A | Microsoft JDBC Driver 12.10 pour SQL Server versions antérieures à 12.10.2 | ||
| Microsoft | N/A | Xbox Gaming Services versions antérieures à 31.105.17001.0 | ||
| Microsoft | N/A | Microsoft Defender pour Endpoint pour Linux versions antérieures à 101.25032.0010 | ||
| Microsoft | N/A | Microsoft Visual Studio 2022 version 17.10 antérieures à 17.10.20 | ||
| Microsoft | N/A | Microsoft JDBC Driver 12.6 pour SQL Server versions antérieures à 12.6.5 | ||
| Microsoft | N/A | Microsoft SharePoint Server Subscription Edition versions antérieures à 16.0.19127.20262 | ||
| Microsoft | N/A | Microsoft JDBC Driver 10.2 pour SQL Server versions antérieures à 10.2.4 | ||
| Microsoft | N/A | Microsoft Configuration Manager 2403 versions antérieures à 5.00.9128.1035 | ||
| Microsoft | N/A | Microsoft Visual Studio 2017 version 15.9 (inclus 15.0 - 15.8) antérieures à 15.9.77 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft Exchange Server 2016 Cumulative Update 23 versions ant\u00e9rieures \u00e0 15.01.2507.061",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Configuration Manager 2503 versions ant\u00e9rieures \u00e0 5.00.9135.1008",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft JDBC Driver 12.2 pour SQL Server versions ant\u00e9rieures \u00e0 12.2.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server Subscription Edition RTM versions ant\u00e9rieures \u00e0 15.02.2562.029",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2022 version 17.12 ant\u00e9rieures \u00e0 17.12.13",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Enterprise Server 2016 versions ant\u00e9rieures \u00e0 16.0.5522.1000",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2022 version 17.14 ant\u00e9rieures \u00e0 17.14.17",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Configuration Manager 2409 versions ant\u00e9rieures \u00e0 5.00.9132.1029",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "microsoft/playwright versions ant\u00e9rieures \u00e0 1.55.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server 2019 Cumulative Update 14 versions ant\u00e9rieures \u00e0 15.02.1544.036",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft JDBC Driver 11.2 pour SQL Server versions ant\u00e9rieures \u00e0 11.2.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft JDBC Driver 12.4 pour SQL Server versions ant\u00e9rieures \u00e0 12.4.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server 2019 Cumulative Update 15 versions ant\u00e9rieures \u00e0 15.02.1748.039",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft JDBC Driver 12.8 pour SQL Server versions ant\u00e9rieures \u00e0 12.8.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "PowerShell 7.4 versions ant\u00e9rieures \u00e0 7.4.13",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2019 version 16.11 (inclus 16.0 - 16.10) ant\u00e9rieures \u00e0 16.11.52",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "PowerShell 7.5 versions ant\u00e9rieures \u00e0 7.5.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft JDBC Driver 13.2 pour SQL Server versions ant\u00e9rieures \u00e0 13.2.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Server 2019 versions ant\u00e9rieures \u00e0 16.0.10417.20059",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft JDBC Driver 12.10 pour SQL Server versions ant\u00e9rieures \u00e0 12.10.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Xbox Gaming Services versions ant\u00e9rieures \u00e0 31.105.17001.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Defender pour Endpoint pour Linux versions ant\u00e9rieures \u00e0 101.25032.0010",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2022 version 17.10 ant\u00e9rieures \u00e0 17.10.20",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft JDBC Driver 12.6 pour SQL Server versions ant\u00e9rieures \u00e0 12.6.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Server Subscription Edition versions ant\u00e9rieures \u00e0 16.0.19127.20262",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft JDBC Driver 10.2 pour SQL Server versions ant\u00e9rieures \u00e0 10.2.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Configuration Manager 2403 versions ant\u00e9rieures \u00e0 5.00.9128.1035",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2017 version 15.9 (inclus 15.0 - 15.8) ant\u00e9rieures \u00e0 15.9.77",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-59288",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59288"
},
{
"name": "CVE-2025-55248",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55248"
},
{
"name": "CVE-2025-55320",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55320"
},
{
"name": "CVE-2025-59237",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59237"
},
{
"name": "CVE-2025-55240",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55240"
},
{
"name": "CVE-2025-59235",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59235"
},
{
"name": "CVE-2025-59232",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59232"
},
{
"name": "CVE-2025-59281",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59281"
},
{
"name": "CVE-2025-59250",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59250"
},
{
"name": "CVE-2025-59248",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59248"
},
{
"name": "CVE-2025-54132",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54132"
},
{
"name": "CVE-2025-53782",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53782"
},
{
"name": "CVE-2025-59249",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59249"
},
{
"name": "CVE-2025-59497",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59497"
},
{
"name": "CVE-2025-25004",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25004"
},
{
"name": "CVE-2025-55315",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55315"
},
{
"name": "CVE-2025-59221",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59221"
},
{
"name": "CVE-2025-59228",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59228"
},
{
"name": "CVE-2025-59213",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59213"
},
{
"name": "CVE-2025-59222",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59222"
}
],
"initial_release_date": "2025-10-15T00:00:00",
"last_revision_date": "2025-10-15T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0882",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-10-15T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Microsoft. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
"vendor_advisories": [
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-54132",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54132"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-59237",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59237"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-59232",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59232"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-59228",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59228"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-59221",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59221"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-25004",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-25004"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-53782",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53782"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-59213",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59213"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-59248",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59248"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-59235",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59235"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-55240",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55240"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-55320",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55320"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-55248",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55248"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-59497",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59497"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-59249",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59249"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-59281",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59281"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-59288",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59288"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-59222",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59222"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-55315",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55315"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-59250",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59250"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…