Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-120792 (GCVE-0-2026-120792)
Vulnerability from cvelistv5 – Published: 2026-11-10 18:21 – Updated: 2026-11-12 21:49- CWE-532 - Insertion of Sensitive Information into Log File
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Microsoft | Aspire.Cli |
Affected:
13.5.4 , < 13.6.5
(custom)
cpe:2.3:a:microsoft:aspire.cli:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-120792",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-11T01:16:15.528590Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-11T01:23:51.131Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"Linux",
"Mac OS"
],
"product": "Aspire.Cli",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "13.6.5",
"status": "affected",
"version": "13.5.4",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:aspire.cli:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.5",
"versionStartIncluding": "13.5.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-11-10T16:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Insertion of sensitive information into log file in Aspire allows an authorized attacker to disclose information locally."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-532",
"description": "CWE-532: Insertion of Sensitive Information into Log File",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-12T21:49:08.988Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Aspire Information Disclosure Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120792"
}
],
"title": "Aspire Information Disclosure Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-120792",
"datePublished": "2026-11-10T18:21:57.285Z",
"dateReserved": "2026-11-02T22:42:10.893Z",
"dateUpdated": "2026-11-12T21:49:08.988Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-120792",
"date": "2026-11-12",
"epss": "0.00419",
"percentile": "0.36737"
},
"microsoft_vex": {
"current_release_date": "2026-11-11T08:00:00.000Z",
"cve": "CVE-2026-120792",
"id": "msrc_CVE-2026-120792",
"initial_release_date": "2026-11-10T08:00:00.000Z",
"product_status:fixed": "2",
"product_status:known_affected": "2",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "Aspire Information Disclosure Vulnerability",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-120792.json",
"version": "2"
},
"nvd": {
"cve": {
"affected": [
{
"affectedData": [
{
"platforms": [
"Linux",
"Mac OS"
],
"product": "Aspire.Cli",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "13.6.5",
"status": "affected",
"version": "13.5.4",
"versionType": "custom"
}
]
}
],
"source": "secure@microsoft.com"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Insertion of sensitive information into log file in Aspire allows an authorized attacker to disclose information locally."
}
],
"id": "CVE-2026-120792",
"lastModified": "2026-11-11T12:19:32.733",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"exploitabilityScore": 1.5,
"impactScore": 5.3,
"source": "secure@microsoft.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-120792",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-11T01:16:15.528590Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-11-10T19:20:28.720",
"references": [
{
"source": "secure@microsoft.com",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120792"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-532"
}
],
"source": "secure@microsoft.com",
"type": "Secondary"
}
]
}
},
"vulnrichment": {
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-120792",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-11T01:16:15.528590Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-11T01:23:43.741Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"Linux",
"Mac OS"
],
"product": "Aspire.Cli",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "13.6.5",
"status": "affected",
"version": "13.5.4",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:aspire.cli:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.5",
"versionStartIncluding": "13.5.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-11-10T16:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Insertion of sensitive information into log file in Aspire allows an authorized attacker to disclose information locally."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-532",
"description": "CWE-532: Insertion of Sensitive Information into Log File",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-11T17:17:25.383Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Aspire Information Disclosure Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120792"
}
],
"title": "Aspire Information Disclosure Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-120792",
"datePublished": "2026-11-10T18:21:57.285Z",
"dateReserved": "2026-11-02T22:42:10.893Z",
"dateUpdated": "2026-11-11T17:17:25.383Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
CERTFR-2026-AVI-1515
Vulnerability from certfr_avis - Published: 2026-11-12 - Updated: 2026-11-12
De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | N/A | Aspire.Hosting.AppHost versions antérieures à 13.6.5 | ||
| Microsoft | N/A | aznfs versions antérieures à 3.0.20 | ||
| Microsoft | N/A | Microsoft SQL Server 2025 pour systèmes x64 CU10 versions antérieures à 17.0.5045.3 | ||
| Microsoft | N/A | Microsoft Power Apps | ||
| Microsoft | N/A | Visual Studio Code versions antérieures à 1.145.3 | ||
| Microsoft | N/A | Microsoft.VisualStudio.Web.CodeGenerators.Mvc versions antérieures à 10.0.3 | ||
| Microsoft | N/A | Microsoft Teams pour Android versions antérieures à 1416/1.0.0.2026173602 | ||
| Microsoft | N/A | Microsoft SQL Server 2022 pour systèmes x64 (GDR) versions antérieures à 16.0.1220.3 | ||
| Microsoft | N/A | Aspire.Cli versions antérieures à 13.6.5 | ||
| Microsoft | N/A | Microsoft.Data.SqlClient 7.1 versions antérieures à 7.1.0-preview3 | ||
| Microsoft | N/A | Microsoft Exchange Server Subscription Edition RTM versions antérieures à 15.02.2562.057 | ||
| Microsoft | N/A | Microsoft Configuration Manager 2603 versions antérieures à 5.0.9146.1045 | ||
| Microsoft | N/A | Microsoft SQL Server 2017 pour systèmes x64 (GDR) versions antérieures à 14.0.2150.2 | ||
| Microsoft | N/A | kernel-mshv-6.6.137.mshv2-2.azl3.x86_64 versions antérieures à kernel-mshv-6.6.18.34.mshv3-2.azl3.x86_64 | ||
| Microsoft | N/A | Microsoft HPC Pack 2019 versions antérieures à 6.3.8364 | ||
| Microsoft | N/A | Microsoft Visual Studio 2026 version 18.11 antérieures à 18.11.4 | ||
| Microsoft | N/A | Microsoft.Data.SqlClient 7.0 versions antérieures à 7.0.3 | ||
| Microsoft | N/A | Microsoft.AspNetCore.SignalR.StackExchangeRedis versions antérieures à 10.0.15 | ||
| Microsoft | N/A | Microsoft.AspNetCore.WebUtilities versions antérieures à 2.3.14 | ||
| Microsoft | N/A | Microsoft GDK versions antérieures à 2610 | ||
| Microsoft | N/A | Microsoft.AspNetCore.WebUtilities versions antérieures à 9.0.23 | ||
| Microsoft | N/A | Microsoft.AspNetCore.Http.Connections versions antérieures à 1.2.14 | ||
| Microsoft | N/A | System.Formats.Cbor versions antérieures à 10.0.15 | ||
| Microsoft | N/A | Microsoft Entra Private Network Connector versions antérieures à 1.5.5130.0 | ||
| Microsoft | N/A | Microsoft Visual Studio 2022 version 17.14 antérieures à 17.14.45 | ||
| Microsoft | N/A | Raw Image Extension | ||
| Microsoft | N/A | Aspire.Dashboard.Sdk.linux-x64 versions antérieures à 13.6.5 | ||
| Microsoft | N/A | Microsoft.Data.SqlClient 6.1 versions antérieures à 6.1.7 | ||
| Microsoft | N/A | Microsoft.DotNet.HotReload.Watch.Aspire versions antérieures à 10.0.404 | ||
| Microsoft | N/A | Microsoft Malware Protection Engine versions antérieures à 1.1.26100.4 | ||
| Microsoft | N/A | System.Formats.Cbor versions antérieures à 11.0.0 | ||
| Microsoft | N/A | Aspire.Hosting versions antérieures à 13.6.5 | ||
| Microsoft | N/A | Microsoft SharePoint Server Subscription Edition versions antérieures à 16.0.20326.20190 | ||
| Microsoft | N/A | PowerShell 7.6 versions antérieures à 7.6.10 | ||
| Microsoft | N/A | System.Formats.Cbor versions antérieures à 8.0.2 | ||
| Microsoft | N/A | Raw Image Extension versions antérieures à 2.5.42.0 | ||
| Microsoft | N/A | HEIF Image Extension versions antérieures à 1.2.62.0 | ||
| Microsoft | N/A | HEVC Video Extensions from Device Manufacturer versions antérieures à 2.4.149.0 | ||
| Microsoft | N/A | HEVC Video Extensions pour Licensed Applications versions antérieures à 2.4.150.0 | ||
| Microsoft | N/A | Microsoft.AspNetCore.SignalR.StackExchangeRedis versions antérieures à 11.0.0 | ||
| Microsoft | N/A | Microsoft.VisualStudio.Web.CodeGenerators.Mvc versions antérieures à 9.0.13 | ||
| Microsoft | N/A | Microsoft.VisualStudio.Web.CodeGenerators.Mvc versions antérieures à 8.0.24 | ||
| Microsoft | N/A | Microsoft Teams pour Android versions antérieures à 1416/1.0.0.2026202302 | ||
| Microsoft | N/A | Microsoft.AspNetCore.Server.HttpSys versions antérieures à 2.3.14 | ||
| Microsoft | N/A | Microsoft.VisualStudio.Web.CodeGeneration.Design versions antérieures à 10.0.3 | ||
| Microsoft | N/A | Microsoft.VisualStudio.Web.CodeGeneration.Design versions antérieures à 8.0.24 | ||
| Microsoft | N/A | Microsoft.dotnet-scaffold versions antérieures à 20.3.0 | ||
| Microsoft | N/A | Microsoft.AspNetCore.SignalR.StackExchangeRedis versions antérieures à 9.0.23 | ||
| Microsoft | N/A | Microsoft SQL Server 2022 pour systèmes x64 (CU27) versions antérieures à 16.0.4315.2 | ||
| Microsoft | N/A | Microsoft Agent Framework SDK - dotnet versions antérieures à 1.8.77 | ||
| Microsoft | N/A | Microsoft Visual Studio 2026 version 18.12 antérieures à 18.12.0 | ||
| Microsoft | N/A | Microsoft SQL Server 2017 pour systèmes x64 (CU31) versions antérieures à 14.0.3570.2 | ||
| Microsoft | N/A | Microsoft.Extensions.Validation versions antérieures à 11.0.0 | ||
| Microsoft | N/A | HEVC Video Extensions versions antérieures à 2.4.151.0 | ||
| Microsoft | N/A | Microsoft JDBC Driver 13.4 pour SQL Server versions antérieures à 13.6.0 | ||
| Microsoft | N/A | HEVC Video Extensions from Device Manufacturer versions antérieures à 2.5.48.0 | ||
| Microsoft | N/A | Microsoft.dotnet-scaffold-aspnet versions antérieures à 20.3.0 | ||
| Microsoft | N/A | mcp-gateway versions antérieures à 1.0.0 | ||
| Microsoft | N/A | Raw Image Extension versions antérieures à 2.4.43.0 | ||
| Microsoft | N/A | Microsoft SQL Server 2019 pour systèmes x64 (GDR) versions antérieures à 15.0.2210.4 | ||
| Microsoft | N/A | Microsoft HPC Pack 2016 | ||
| Microsoft | N/A | Microsoft SQL Server 2025 pour systèmes x64 (GDR) versions antérieures à 17.0.1155.3 | ||
| Microsoft | N/A | Microsoft Authentication Library pour JavaScript versions antérieures à 5.21.0 | ||
| Microsoft | N/A | Microsoft.AspNetCore.SignalR.StackExchangeRedis versions antérieures à 8.0.34 | ||
| Microsoft | N/A | Aspire Dashboard versions antérieures à 13.6.5 | ||
| Microsoft | N/A | Microsoft SQL Server 2019 pour systèmes x64 (CU32) versions antérieures à 15.0.4510.2 | ||
| Microsoft | N/A | GitHub Copilot Plugin pour JetBrains IDEs versions antérieures à 1.17.0-251 | ||
| Microsoft | N/A | PowerShell 7.7 versions antérieures à 7.7.0 | ||
| Microsoft | N/A | Microsoft.TestPlatform.CLI versions antérieures à 18.11.1 | ||
| Microsoft | N/A | System.Text.Json versions antérieures à 11.0.0 | ||
| Microsoft | N/A | Microsoft.VisualStudio.Web.CodeGeneration.Design versions antérieures à 9.0.13 | ||
| Microsoft | N/A | Microsoft SQL Server 2025 pour systèmes x64 (CU9) versions antérieures à 17.0.5015.4 |
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Aspire.Hosting.AppHost versions ant\u00e9rieures \u00e0 13.6.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "aznfs versions ant\u00e9rieures \u00e0 3.0.20",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2025 pour syst\u00e8mes x64 CU10 versions ant\u00e9rieures \u00e0 17.0.5045.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Power Apps",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Visual Studio Code versions ant\u00e9rieures \u00e0 1.145.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.VisualStudio.Web.CodeGenerators.Mvc versions ant\u00e9rieures \u00e0 10.0.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Teams pour Android versions ant\u00e9rieures \u00e0 1416/1.0.0.2026173602",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 16.0.1220.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Aspire.Cli versions ant\u00e9rieures \u00e0 13.6.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.Data.SqlClient 7.1 versions ant\u00e9rieures \u00e0 7.1.0-preview3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server Subscription Edition RTM versions ant\u00e9rieures \u00e0 15.02.2562.057",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Configuration Manager 2603 versions ant\u00e9rieures \u00e0 5.0.9146.1045",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 14.0.2150.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "kernel-mshv-6.6.137.mshv2-2.azl3.x86_64 versions ant\u00e9rieures \u00e0 kernel-mshv-6.6.18.34.mshv3-2.azl3.x86_64",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft HPC Pack 2019 versions ant\u00e9rieures \u00e0 6.3.8364",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2026 version 18.11 ant\u00e9rieures \u00e0 18.11.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.Data.SqlClient 7.0 versions ant\u00e9rieures \u00e0 7.0.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.SignalR.StackExchangeRedis versions ant\u00e9rieures \u00e0 10.0.15",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.WebUtilities versions ant\u00e9rieures \u00e0 2.3.14",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft GDK versions ant\u00e9rieures \u00e0 2610",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.WebUtilities versions ant\u00e9rieures \u00e0 9.0.23",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.Http.Connections versions ant\u00e9rieures \u00e0 1.2.14",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "System.Formats.Cbor versions ant\u00e9rieures \u00e0 10.0.15",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Entra Private Network Connector versions ant\u00e9rieures \u00e0 1.5.5130.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2022 version 17.14 ant\u00e9rieures \u00e0 17.14.45",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Raw Image Extension",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Aspire.Dashboard.Sdk.linux-x64 versions ant\u00e9rieures \u00e0 13.6.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.Data.SqlClient 6.1 versions ant\u00e9rieures \u00e0 6.1.7",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.DotNet.HotReload.Watch.Aspire versions ant\u00e9rieures \u00e0 10.0.404",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Malware Protection Engine versions ant\u00e9rieures \u00e0 1.1.26100.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "System.Formats.Cbor versions ant\u00e9rieures \u00e0 11.0.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Aspire.Hosting versions ant\u00e9rieures \u00e0 13.6.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Server Subscription Edition versions ant\u00e9rieures \u00e0 16.0.20326.20190",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "PowerShell 7.6 versions ant\u00e9rieures \u00e0 7.6.10",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "System.Formats.Cbor versions ant\u00e9rieures \u00e0 8.0.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Raw Image Extension versions ant\u00e9rieures \u00e0 2.5.42.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "HEIF Image Extension versions ant\u00e9rieures \u00e0 1.2.62.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "HEVC Video Extensions from Device Manufacturer versions ant\u00e9rieures \u00e0 2.4.149.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "HEVC Video Extensions pour Licensed Applications versions ant\u00e9rieures \u00e0 2.4.150.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.SignalR.StackExchangeRedis versions ant\u00e9rieures \u00e0 11.0.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.VisualStudio.Web.CodeGenerators.Mvc versions ant\u00e9rieures \u00e0 9.0.13",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.VisualStudio.Web.CodeGenerators.Mvc versions ant\u00e9rieures \u00e0 8.0.24",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Teams pour Android versions ant\u00e9rieures \u00e0 1416/1.0.0.2026202302",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.Server.HttpSys versions ant\u00e9rieures \u00e0 2.3.14",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.VisualStudio.Web.CodeGeneration.Design versions ant\u00e9rieures \u00e0 10.0.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.VisualStudio.Web.CodeGeneration.Design versions ant\u00e9rieures \u00e0 8.0.24",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.dotnet-scaffold versions ant\u00e9rieures \u00e0 20.3.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.SignalR.StackExchangeRedis versions ant\u00e9rieures \u00e0 9.0.23",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (CU27) versions ant\u00e9rieures \u00e0 16.0.4315.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Agent Framework SDK - dotnet versions ant\u00e9rieures \u00e0 1.8.77",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2026 version 18.12 ant\u00e9rieures \u00e0 18.12.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (CU31) versions ant\u00e9rieures \u00e0 14.0.3570.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.Extensions.Validation versions ant\u00e9rieures \u00e0 11.0.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "HEVC Video Extensions versions ant\u00e9rieures \u00e0 2.4.151.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft JDBC Driver 13.4 pour SQL Server versions ant\u00e9rieures \u00e0 13.6.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "HEVC Video Extensions from Device Manufacturer versions ant\u00e9rieures \u00e0 2.5.48.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.dotnet-scaffold-aspnet versions ant\u00e9rieures \u00e0 20.3.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "mcp-gateway versions ant\u00e9rieures \u00e0 1.0.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Raw Image Extension versions ant\u00e9rieures \u00e0 2.4.43.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 15.0.2210.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft HPC Pack 2016",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2025 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 17.0.1155.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Authentication Library pour JavaScript versions ant\u00e9rieures \u00e0 5.21.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.SignalR.StackExchangeRedis versions ant\u00e9rieures \u00e0 8.0.34",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Aspire Dashboard versions ant\u00e9rieures \u00e0 13.6.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (CU32) versions ant\u00e9rieures \u00e0 15.0.4510.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "GitHub Copilot Plugin pour JetBrains IDEs versions ant\u00e9rieures \u00e0 1.17.0-251",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "PowerShell 7.7 versions ant\u00e9rieures \u00e0 7.7.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.TestPlatform.CLI versions ant\u00e9rieures \u00e0 18.11.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "System.Text.Json versions ant\u00e9rieures \u00e0 11.0.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.VisualStudio.Web.CodeGeneration.Design versions ant\u00e9rieures \u00e0 9.0.13",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2025 pour syst\u00e8mes x64 (CU9) versions ant\u00e9rieures \u00e0 17.0.5015.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-109499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109499"
},
{
"name": "CVE-2026-119981",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-119981"
},
{
"name": "CVE-2026-116931",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116931"
},
{
"name": "CVE-2026-118105",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118105"
},
{
"name": "CVE-2026-111300",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-111300"
},
{
"name": "CVE-2026-62903",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-62903"
},
{
"name": "CVE-2026-118151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118151"
},
{
"name": "CVE-2026-109497",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109497"
},
{
"name": "CVE-2026-110045",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-110045"
},
{
"name": "CVE-2026-66801",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66801"
},
{
"name": "CVE-2026-109466",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109466"
},
{
"name": "CVE-2026-118747",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118747"
},
{
"name": "CVE-2026-70003",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70003"
},
{
"name": "CVE-2026-102236",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102236"
},
{
"name": "CVE-2026-118115",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118115"
},
{
"name": "CVE-2026-69901",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69901"
},
{
"name": "CVE-2026-120006",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-120006"
},
{
"name": "CVE-2026-118745",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118745"
},
{
"name": "CVE-2026-123390",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-123390"
},
{
"name": "CVE-2026-119975",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-119975"
},
{
"name": "CVE-2026-88111",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88111"
},
{
"name": "CVE-2026-118110",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118110"
},
{
"name": "CVE-2026-118152",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118152"
},
{
"name": "CVE-2026-109454",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109454"
},
{
"name": "CVE-2026-121675",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-121675"
},
{
"name": "CVE-2026-105494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105494"
},
{
"name": "CVE-2026-114171",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114171"
},
{
"name": "CVE-2026-116934",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116934"
},
{
"name": "CVE-2026-114155",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114155"
},
{
"name": "CVE-2026-110057",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-110057"
},
{
"name": "CVE-2026-114146",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114146"
},
{
"name": "CVE-2026-109460",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109460"
},
{
"name": "CVE-2026-84010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84010"
},
{
"name": "CVE-2026-118109",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118109"
},
{
"name": "CVE-2026-110044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-110044"
},
{
"name": "CVE-2026-88176",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88176"
},
{
"name": "CVE-2026-118150",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118150"
},
{
"name": "CVE-2026-100204",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100204"
},
{
"name": "CVE-2026-111297",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-111297"
},
{
"name": "CVE-2026-122196",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-122196"
},
{
"name": "CVE-2026-119985",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-119985"
},
{
"name": "CVE-2026-118741",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118741"
},
{
"name": "CVE-2026-114167",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114167"
},
{
"name": "CVE-2026-67637",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67637"
},
{
"name": "CVE-2026-116946",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116946"
},
{
"name": "CVE-2026-118149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118149"
},
{
"name": "CVE-2026-108469",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-108469"
},
{
"name": "CVE-2026-105544",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105544"
},
{
"name": "CVE-2026-116945",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116945"
},
{
"name": "CVE-2026-120792",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-120792"
},
{
"name": "CVE-2026-109478",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109478"
},
{
"name": "CVE-2026-122979",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-122979"
},
{
"name": "CVE-2026-120000",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-120000"
},
{
"name": "CVE-2026-121660",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-121660"
},
{
"name": "CVE-2026-114169",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114169"
},
{
"name": "CVE-2026-116933",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116933"
},
{
"name": "CVE-2026-114166",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114166"
},
{
"name": "CVE-2026-116947",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116947"
},
{
"name": "CVE-2026-118108",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118108"
},
{
"name": "CVE-2026-121663",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-121663"
},
{
"name": "CVE-2026-121665",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-121665"
},
{
"name": "CVE-2026-116932",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116932"
},
{
"name": "CVE-2026-118750",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118750"
},
{
"name": "CVE-2026-121664",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-121664"
},
{
"name": "CVE-2026-118106",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118106"
},
{
"name": "CVE-2026-116936",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116936"
},
{
"name": "CVE-2026-116939",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116939"
},
{
"name": "CVE-2026-116940",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116940"
},
{
"name": "CVE-2026-118207",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118207"
},
{
"name": "CVE-2026-118208",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118208"
},
{
"name": "CVE-2026-116944",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116944"
},
{
"name": "CVE-2026-67632",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67632"
},
{
"name": "CVE-2026-120782",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-120782"
},
{
"name": "CVE-2026-119991",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-119991"
},
{
"name": "CVE-2026-67372",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67372"
},
{
"name": "CVE-2026-118154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118154"
},
{
"name": "CVE-2026-109476",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109476"
},
{
"name": "CVE-2026-121661",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-121661"
},
{
"name": "CVE-2026-80095",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-80095"
},
{
"name": "CVE-2026-122194",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-122194"
},
{
"name": "CVE-2026-118119",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118119"
},
{
"name": "CVE-2026-121662",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-121662"
},
{
"name": "CVE-2026-116930",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116930"
},
{
"name": "CVE-2026-112736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112736"
},
{
"name": "CVE-2026-67375",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67375"
},
{
"name": "CVE-2026-67374",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67374"
},
{
"name": "CVE-2026-114149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114149"
},
{
"name": "CVE-2026-114156",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114156"
},
{
"name": "CVE-2026-120002",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-120002"
},
{
"name": "CVE-2026-118740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118740"
},
{
"name": "CVE-2026-118117",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118117"
},
{
"name": "CVE-2026-66813",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66813"
},
{
"name": "CVE-2026-122987",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-122987"
},
{
"name": "CVE-2026-109472",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109472"
},
{
"name": "CVE-2026-114158",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114158"
},
{
"name": "CVE-2026-114165",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114165"
},
{
"name": "CVE-2026-70094",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70094"
},
{
"name": "CVE-2026-111296",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-111296"
},
{
"name": "CVE-2026-122986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-122986"
},
{
"name": "CVE-2026-114164",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114164"
},
{
"name": "CVE-2026-109504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109504"
},
{
"name": "CVE-2026-116938",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116938"
},
{
"name": "CVE-2026-118116",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118116"
},
{
"name": "CVE-2026-118112",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118112"
},
{
"name": "CVE-2026-83953",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83953"
},
{
"name": "CVE-2026-124210",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124210"
},
{
"name": "CVE-2026-123391",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-123391"
},
{
"name": "CVE-2026-109495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109495"
},
{
"name": "CVE-2026-116937",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116937"
},
{
"name": "CVE-2026-67391",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67391"
},
{
"name": "CVE-2026-118153",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118153"
},
{
"name": "CVE-2026-109492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109492"
},
{
"name": "CVE-2026-68783",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68783"
},
{
"name": "CVE-2026-116935",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116935"
},
{
"name": "CVE-2026-118113",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118113"
},
{
"name": "CVE-2026-67646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67646"
},
{
"name": "CVE-2026-116929",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116929"
},
{
"name": "CVE-2026-118111",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118111"
},
{
"name": "CVE-2026-114154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114154"
},
{
"name": "CVE-2026-94511",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-94511"
},
{
"name": "CVE-2026-109485",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109485"
},
{
"name": "CVE-2026-118749",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118749"
},
{
"name": "CVE-2026-102230",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102230"
},
{
"name": "CVE-2026-118103",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118103"
},
{
"name": "CVE-2026-118748",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118748"
},
{
"name": "CVE-2026-114147",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114147"
},
{
"name": "CVE-2026-109456",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109456"
},
{
"name": "CVE-2026-67382",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67382"
},
{
"name": "CVE-2026-118157",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118157"
},
{
"name": "CVE-2026-109502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109502"
},
{
"name": "CVE-2026-116926",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116926"
},
{
"name": "CVE-2026-114151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114151"
},
{
"name": "CVE-2026-109481",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109481"
},
{
"name": "CVE-2026-121674",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-121674"
},
{
"name": "CVE-2026-122985",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-122985"
},
{
"name": "CVE-2026-110065",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-110065"
},
{
"name": "CVE-2026-118118",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118118"
},
{
"name": "CVE-2026-118114",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118114"
},
{
"name": "CVE-2026-67387",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67387"
},
{
"name": "CVE-2026-118120",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118120"
},
{
"name": "CVE-2026-120796",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-120796"
},
{
"name": "CVE-2026-114150",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114150"
},
{
"name": "CVE-2026-94513",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-94513"
},
{
"name": "CVE-2026-118104",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118104"
},
{
"name": "CVE-2026-119982",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-119982"
},
{
"name": "CVE-2026-114159",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114159"
},
{
"name": "CVE-2026-120779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-120779"
},
{
"name": "CVE-2026-114157",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114157"
},
{
"name": "CVE-2026-120780",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-120780"
},
{
"name": "CVE-2026-119983",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-119983"
},
{
"name": "CVE-2026-120778",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-120778"
},
{
"name": "CVE-2026-119976",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-119976"
},
{
"name": "CVE-2026-116941",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116941"
},
{
"name": "CVE-2026-116942",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116942"
},
{
"name": "CVE-2026-114152",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114152"
},
{
"name": "CVE-2026-109455",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109455"
},
{
"name": "CVE-2026-111303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-111303"
},
{
"name": "CVE-2026-121669",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-121669"
},
{
"name": "CVE-2026-116943",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116943"
},
{
"name": "CVE-2026-109464",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109464"
},
{
"name": "CVE-2026-118102",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118102"
}
],
"initial_release_date": "2026-11-12T00:00:00",
"last_revision_date": "2026-11-12T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1515",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-11-12T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Microsoft. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
"vendor_advisories": [
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118102",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118102"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-116941",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116941"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67382",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67382"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-114147",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114147"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-114171",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114171"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-109456",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109456"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118111",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118111"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-121669",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121669"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118152",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118152"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-114158",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114158"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-119976",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119976"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118154",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118154"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-120780",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120780"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66801",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66801"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-105544",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105544"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-120796",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120796"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118748",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118748"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-122987",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122987"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118157",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118157"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-121660",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121660"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-109492",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109492"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-100204",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100204"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118109",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118109"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-114152",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114152"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-120002",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120002"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-121663",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121663"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-124210",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124210"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-120778",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120778"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-114169",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114169"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-116942",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116942"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-116943",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116943"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-122986",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122986"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-111297",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111297"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-80095",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80095"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-121665",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121665"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-116938",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116938"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-109478",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109478"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-114167",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114167"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118745",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118745"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-109502",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109502"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70003",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70003"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-109472",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109472"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68783",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68783"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-108469",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108469"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-114157",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114157"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118750",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118750"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-109497",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109497"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70094",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70094"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-114150",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114150"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118153",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118153"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118150",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118150"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-109454",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109454"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67372",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67372"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67391",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67391"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102236",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102236"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66813",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66813"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88111",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88111"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118208",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118208"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118115",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118115"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118207",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118207"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-116933",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116933"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-110065",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110065"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-119981",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119981"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-116934",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116934"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118114",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118114"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-119985",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119985"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118740",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118740"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-121664",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121664"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-110045",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110045"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-116944",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116944"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-114164",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114164"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-109504",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109504"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67387",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67387"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118120",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118120"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-119983",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119983"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118112",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118112"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118113",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118113"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118741",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118741"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-114151",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114151"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-109466",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109466"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-110044",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110044"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-119991",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119991"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-116926",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116926"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118151",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118151"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-88176",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88176"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-116929",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116929"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67646",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67646"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67375",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67375"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-116939",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116939"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-94511",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94511"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-109476",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109476"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118118",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118118"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-122979",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122979"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-110057",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110057"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-121674",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121674"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-122194",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122194"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-114154",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114154"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118104",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118104"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-109455",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109455"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-119975",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119975"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118110",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118110"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118116",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118116"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-114166",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114166"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118103",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118103"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-116935",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116935"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-114146",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114146"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-116947",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116947"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-116940",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116940"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-114159",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114159"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67637",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67637"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118119",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118119"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118117",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118117"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-116932",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116932"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-116937",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116937"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-114156",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114156"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-121675",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121675"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-109495",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109495"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-114165",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114165"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-116936",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116936"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118149",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118149"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-83953",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83953"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-84010",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84010"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118749",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118749"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67632",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67632"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-114149",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114149"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-105494",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105494"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67374",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67374"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-116946",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116946"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-102230",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102230"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-111300",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111300"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-111303",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111303"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-123391",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123391"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-111296",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111296"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-109499",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109499"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-120000",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120000"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-109485",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109485"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118108",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118108"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-116945",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116945"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118747",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118747"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69901",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69901"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-123390",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123390"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-116931",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116931"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118105",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118105"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-109481",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109481"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-121661",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121661"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-121662",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121662"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-120792",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120792"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-109464",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109464"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-122196",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122196"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-122985",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122985"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-112736",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112736"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-109460",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109460"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-120006",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120006"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-116930",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116930"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-120782",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120782"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-118106",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118106"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-62903",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62903"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-120779",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120779"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-114155",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114155"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-94513",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94513"
},
{
"published_at": "2026-11-10",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-119982",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119982"
}
]
}
FKIE_CVE-2026-120792
Vulnerability from fkie_nvd - Published: 2026-11-10 19:20 - Updated: 2026-11-11 12:19| Vendor | Product | Version |
|---|
{
"affected": [
{
"affectedData": [
{
"platforms": [
"Linux",
"Mac OS"
],
"product": "Aspire.Cli",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "13.6.5",
"status": "affected",
"version": "13.5.4",
"versionType": "custom"
}
]
}
],
"source": "secure@microsoft.com"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Insertion of sensitive information into log file in Aspire allows an authorized attacker to disclose information locally."
}
],
"id": "CVE-2026-120792",
"lastModified": "2026-11-11T12:19:32.733",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"exploitabilityScore": 1.5,
"impactScore": 5.3,
"source": "secure@microsoft.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-120792",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-11T01:16:15.528590Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-11-10T19:20:28.720",
"references": [
{
"source": "secure@microsoft.com",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120792"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-532"
}
],
"source": "secure@microsoft.com",
"type": "Secondary"
}
]
}
GHSA-FGFW-85W4-GX99
Vulnerability from github – Published: 2026-11-10 21:33 – Updated: 2026-11-10 22:30Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-q6jf-24jf-m3cg. This link is maintained to preserve external references.
Original Description
Insertion of sensitive information into log file in .NET Aspire allows an authorized attacker to disclose information locally.
{
"affected": [
{
"database_specific": {
"last_known_affected_version_range": "\u003c 13.6.5"
},
"package": {
"ecosystem": "NuGet",
"name": "Aspire.Cli"
},
"ranges": [
{
"events": [
{
"introduced": "13.2.0"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [],
"database_specific": {
"cwe_ids": [
"CWE-532"
],
"github_reviewed": true,
"github_reviewed_at": "2026-11-10T22:30:50Z",
"nvd_published_at": "2026-11-10T19:20:28Z",
"severity": "HIGH"
},
"details": "## Duplicate Advisory\n\nThis advisory has been withdrawn because it is a duplicate of\u00a0GHSA-q6jf-24jf-m3cg. This link is maintained to preserve external references.\n\n## Original Description\nInsertion of sensitive information into log file in .NET Aspire allows an authorized attacker to disclose information locally.",
"id": "GHSA-fgfw-85w4-gx99",
"modified": "2026-11-10T22:30:50Z",
"published": "2026-11-10T21:33:44Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-120792"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120792"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L",
"type": "CVSS_V3"
}
],
"summary": "Duplicate Advisory: Microsoft Security Advisory CVE-2026-120792 - Aspire Information Disclosure Vulnerability",
"withdrawn": "2026-11-10T22:30:50Z"
}
GHSA-Q6JF-24JF-M3CG
Vulnerability from github – Published: 2026-11-11 00:31 – Updated: 2026-11-11 00:31Executive summary
Microsoft is releasing this security advisory to provide information about a vulnerability in the Aspire CLI. This advisory provides guidance on updating affected applications and components.
Insecure temporary files used by Aspire CLI can allow a local attacker to obtain sensitive configuration information.
Announcement
Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/518
CVSS Details
- Version: 3.1
- Severity: High
- Score: 7.3
- Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L - Weakness: CWE-532 (Insertion of Sensitive Information into Log File)
- MSRC severity: Important
- Impact: Information Disclosure
Affected Platforms
- Platforms: Linux, macOS
- Architectures: x64, Arm64
Affected Packages
Standalone Aspire CLI
| Package | Affected version | Patched version |
|---|---|---|
| Aspire CLI (Aspire.Cli) | >= 13.2.0, < 13.6.5 | 13.6.5 |
| Aspire.Cli.linux-x64 | >= 13.3.0, < 13.6.5 | 13.6.5 |
| Aspire.Cli.linux-arm64 | >= 13.3.0, < 13.6.5 | 13.6.5 |
| Aspire.Cli.linux-musl-x64 | >= 13.3.0, < 13.6.5 | 13.6.5 |
| Aspire.Cli.osx-x64 | >= 13.3.0, < 13.6.5 | 13.6.5 |
| Aspire.Cli.osx-arm64 | >= 13.3.0, < 13.6.5 | 13.6.5 |
Aspire CLI npm packages
| Package | Affected version | Patched version |
|---|---|---|
| @microsoft/aspire-cli | >= 13.4.2, < 13.6.5 | 13.6.5 |
| @microsoft/aspire-cli-linux-x64 | >= 13.4.2, < 13.6.5 | 13.6.5 |
| @microsoft/aspire-cli-linux-arm64 | >= 13.4.2, < 13.6.5 | 13.6.5 |
| @microsoft/aspire-cli-linux-musl-x64 | >= 13.4.2, < 13.6.5 | 13.6.5 |
| @microsoft/aspire-cli-osx-x64 | >= 13.4.2, < 13.6.5 | 13.6.5 |
| @microsoft/aspire-cli-osx-arm64 | >= 13.4.2, < 13.6.5 | 13.6.5 |
The affected component is the Aspire CLI's deprecated MCP configuration scanner, which ships in the CLI packages listed above. Its temporary-file diagnostics can include configuration content and use a fixed path in a shared temporary directory.
Advisory FAQ
How do I know if I am affected?
The reported scenario involves running Aspire CLI agent or MCP initialization commands on a non-Windows system with a temporary directory shared by multiple users. Versions 13.2.0 through 13.6.4 are affected.
Aspire ships independently of .NET. Installing a .NET runtime or SDK update does not establish that the affected Aspire CLI has been updated.
How do I fix the issue?
Update the Aspire CLI to version 13.6.5 or later. If installed as a .NET tool, update the Aspire.Cli package. If installed using npm, update @microsoft/aspire-cli to version 13.6.5 or later; its platform-specific dependency must also resolve to version 13.6.5 or later. Otherwise update the CLI through its installation method.
Other Information
Reporting Security Issues
If you have found a potential security issue in a supported version of .NET, please report it to the Microsoft Security Response Center (MSRC) via the MSRC Researcher Portal. Further information can be found in the MSRC Report an Issue FAQ.
Security reports made through MSRC may qualify for the Microsoft .NET Bounty. Details of the Microsoft .NET Bounty Program including terms and conditions are at https://aka.ms/corebounty.
Support
You can ask questions about this issue in the Aspire repository.
Disclaimer
The information provided in this advisory is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
External Links
Acknowledgements
- l8BL with ENKI WhiteHat
- 71C4
Revisions
V1.0 (November 10, 2026): Advisory published.
{
"affected": [
{
"package": {
"ecosystem": "NuGet",
"name": "Aspire.Cli"
},
"ranges": [
{
"events": [
{
"introduced": "13.2.0"
},
{
"fixed": "13.6.5"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "NuGet",
"name": "Aspire.Cli.linux-x64"
},
"ranges": [
{
"events": [
{
"introduced": "13.3.0"
},
{
"fixed": "13.6.5"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "NuGet",
"name": "Aspire.Cli.linux-arm64"
},
"ranges": [
{
"events": [
{
"introduced": "13.3.0"
},
{
"fixed": "13.6.5"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "NuGet",
"name": "Aspire.Cli.linux-musl-x64"
},
"ranges": [
{
"events": [
{
"introduced": "13.3.0"
},
{
"fixed": "13.6.5"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "NuGet",
"name": "Aspire.Cli.osx-x64"
},
"ranges": [
{
"events": [
{
"introduced": "13.3.0"
},
{
"fixed": "13.6.5"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "NuGet",
"name": "Aspire.Cli.osx-arm64"
},
"ranges": [
{
"events": [
{
"introduced": "13.3.0"
},
{
"fixed": "13.6.5"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@microsoft/aspire-cli"
},
"ranges": [
{
"events": [
{
"introduced": "13.4.2"
},
{
"fixed": "13.6.5"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@microsoft/aspire-cli-linux-x64"
},
"ranges": [
{
"events": [
{
"introduced": "13.4.2"
},
{
"fixed": "13.6.5"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@microsoft/aspire-cli-linux-arm64"
},
"ranges": [
{
"events": [
{
"introduced": "13.4.2"
},
{
"fixed": "13.6.5"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@microsoft/aspire-cli-linux-musl-x64"
},
"ranges": [
{
"events": [
{
"introduced": "13.4.2"
},
{
"fixed": "13.6.5"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@microsoft/aspire-cli-osx-x64"
},
"ranges": [
{
"events": [
{
"introduced": "13.4.2"
},
{
"fixed": "13.6.5"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@microsoft/aspire-cli-osx-arm64"
},
"ranges": [
{
"events": [
{
"introduced": "13.4.2"
},
{
"fixed": "13.6.5"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2026-120792"
],
"database_specific": {
"cwe_ids": [
"CWE-532"
],
"github_reviewed": true,
"github_reviewed_at": "2026-11-11T00:31:23Z",
"nvd_published_at": null,
"severity": "HIGH"
},
"details": "## Executive summary\n\nMicrosoft is releasing this security advisory to provide information about a vulnerability in the Aspire CLI. This advisory provides guidance on updating affected applications and components.\n\nInsecure temporary files used by Aspire CLI can allow a local attacker to obtain sensitive configuration information.\n\n## Announcement\n\nAnnouncement for this issue can be found at https://github.com/dotnet/announcements/issues/518\n\n## CVSS Details\n\n- **Version:** 3.1\n- **Severity:** High\n- **Score:** 7.3\n- **Vector:** `CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L`\n- **Weakness:** CWE-532 (Insertion of Sensitive Information into Log File)\n- **MSRC severity:** Important\n- **Impact:** Information Disclosure\n\n## Affected Platforms\n\n- **Platforms:** Linux, macOS\n- **Architectures:** x64, Arm64\n\n## \u003ca name=\"affected-packages\"\u003e\u003c/a\u003eAffected Packages\n\n### Standalone Aspire CLI\n\nPackage | Affected version | Patched version\n--- | --- | ---\nAspire CLI ([Aspire.Cli](https://www.nuget.org/packages/Aspire.Cli)) | \u003e= 13.2.0, \u003c 13.6.5 | 13.6.5\n[Aspire.Cli.linux-x64](https://www.nuget.org/packages/Aspire.Cli.linux-x64) | \u003e= 13.3.0, \u003c 13.6.5 | 13.6.5\n[Aspire.Cli.linux-arm64](https://www.nuget.org/packages/Aspire.Cli.linux-arm64) | \u003e= 13.3.0, \u003c 13.6.5 | 13.6.5\n[Aspire.Cli.linux-musl-x64](https://www.nuget.org/packages/Aspire.Cli.linux-musl-x64) | \u003e= 13.3.0, \u003c 13.6.5 | 13.6.5\n[Aspire.Cli.osx-x64](https://www.nuget.org/packages/Aspire.Cli.osx-x64) | \u003e= 13.3.0, \u003c 13.6.5 | 13.6.5\n[Aspire.Cli.osx-arm64](https://www.nuget.org/packages/Aspire.Cli.osx-arm64) | \u003e= 13.3.0, \u003c 13.6.5 | 13.6.5\n\n### Aspire CLI npm packages\n\nPackage | Affected version | Patched version\n--- | --- | ---\n[@microsoft/aspire-cli](https://www.npmjs.com/package/@microsoft/aspire-cli) | \u003e= 13.4.2, \u003c 13.6.5 | 13.6.5\n[@microsoft/aspire-cli-linux-x64](https://www.npmjs.com/package/@microsoft/aspire-cli-linux-x64) | \u003e= 13.4.2, \u003c 13.6.5 | 13.6.5\n[@microsoft/aspire-cli-linux-arm64](https://www.npmjs.com/package/@microsoft/aspire-cli-linux-arm64) | \u003e= 13.4.2, \u003c 13.6.5 | 13.6.5\n[@microsoft/aspire-cli-linux-musl-x64](https://www.npmjs.com/package/@microsoft/aspire-cli-linux-musl-x64) | \u003e= 13.4.2, \u003c 13.6.5 | 13.6.5\n[@microsoft/aspire-cli-osx-x64](https://www.npmjs.com/package/@microsoft/aspire-cli-osx-x64) | \u003e= 13.4.2, \u003c 13.6.5 | 13.6.5\n[@microsoft/aspire-cli-osx-arm64](https://www.npmjs.com/package/@microsoft/aspire-cli-osx-arm64) | \u003e= 13.4.2, \u003c 13.6.5 | 13.6.5\n\nThe affected component is the Aspire CLI\u0027s deprecated MCP configuration scanner, which ships in the CLI packages listed above. Its temporary-file diagnostics can include configuration content and use a fixed path in a shared temporary directory.\n\n## Advisory FAQ\n\n### \u003ca name=\"how-affected\"\u003e\u003c/a\u003eHow do I know if I am affected?\n\nThe reported scenario involves running Aspire CLI agent or MCP initialization commands on a non-Windows system with a temporary directory shared by multiple users. Versions 13.2.0 through 13.6.4 are affected.\n\nAspire ships independently of .NET. Installing a .NET runtime or SDK update does not establish that the affected Aspire CLI has been updated.\n\n### \u003ca name=\"how-fix\"\u003e\u003c/a\u003eHow do I fix the issue?\n\nUpdate the Aspire CLI to version 13.6.5 or later. If installed as a .NET tool, update the Aspire.Cli package. If installed using npm, update @microsoft/aspire-cli to version 13.6.5 or later; its platform-specific dependency must also resolve to version 13.6.5 or later. Otherwise update the CLI through its installation method.\n\n## Other Information\n\n### Reporting Security Issues\n\nIf you have found a potential security issue in a supported version of .NET, please report it to the Microsoft Security Response Center (MSRC) via the [MSRC Researcher Portal](https://msrc.microsoft.com/report/vulnerability/new). Further information can be found in the MSRC [Report an Issue FAQ](https://www.microsoft.com/msrc/faqs-report-an-issue).\n\nSecurity reports made through MSRC may qualify for the Microsoft .NET Bounty. Details of the Microsoft .NET Bounty Program including terms and conditions are at https://aka.ms/corebounty.\n\n### Support\n\nYou can ask questions about this issue in the [Aspire repository](https://github.com/microsoft/aspire).\n\n### Disclaimer\n\nThe information provided in this advisory is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.\n\n### External Links\n\n[CVE-2026-120792](https://www.cve.org/CVERecord?id=CVE-2026-120792)\n\n### Acknowledgements\n\n- l8BL with [ENKI WhiteHat](https://enki.co.kr/)\n- 71C4\n\n### Revisions\n\nV1.0 (November 10, 2026): Advisory published.",
"id": "GHSA-q6jf-24jf-m3cg",
"modified": "2026-11-11T00:31:23Z",
"published": "2026-11-11T00:31:23Z",
"references": [
{
"type": "WEB",
"url": "https://github.com/microsoft/aspire/security/advisories/GHSA-q6jf-24jf-m3cg"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-120792"
},
{
"type": "WEB",
"url": "https://github.com/dotnet/announcements/issues/518"
},
{
"type": "WEB",
"url": "https://github.com/microsoft/aspire/issues/22100"
},
{
"type": "WEB",
"url": "https://github.com/microsoft/aspire/pull/22071"
},
{
"type": "WEB",
"url": "https://github.com/microsoft/aspire/commit/c408ec5bf44e43203c278990a43aea93145248f3"
},
{
"type": "PACKAGE",
"url": "https://github.com/microsoft/aspire"
},
{
"type": "WEB",
"url": "https://github.com/microsoft/aspire/releases/tag/v13.6.5"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120792"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L",
"type": "CVSS_V3"
}
],
"summary": "Microsoft Security Advisory CVE-2026-120792 - Aspire Information Disclosure Vulnerability"
}
UBUNTU-CVE-2026-120792 (CVE-2026-120792)
Vulnerability from osv_ubuntu – Published: 2026-11-10 00:00 – Updated: 2026-11-10 00:00 – Source websiteInsecure temporary files used by Aspire CLI can allow a local attacker to obtain sensitive configuration information.
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "aspnetcore-runtime-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "aspnetcore-targeting-pack-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-apphost-pack-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-host-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-hostfxr-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-runtime-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-sdk-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-sdk-7.0-source-built-artifacts",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-targeting-pack-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-templates-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet7",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "netstandard-targeting-pack-2.1-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "dotnet7",
"purl": "pkg:deb/ubuntu/dotnet7@7.0.119-0ubuntu1~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"7.0.105-0ubuntu1~22.04.1",
"7.0.107-0ubuntu1~22.04.1",
"7.0.108-0ubuntu1~22.04.1",
"7.0.109-0ubuntu1~22.04.1",
"7.0.110-0ubuntu1~22.04.1",
"7.0.111-0ubuntu1~22.04.1",
"7.0.112-0ubuntu1~22.04.1",
"7.0.113-0ubuntu1~22.04.1",
"7.0.114-0ubuntu1~22.04.1",
"7.0.115-0ubuntu1~22.04.1",
"7.0.116-0ubuntu1~22.04.1",
"7.0.117-0ubuntu1~22.04.1",
"7.0.117-0ubuntu1~22.04.2",
"7.0.119-0ubuntu1~22.04.1"
]
}
],
"aliases": [],
"details": "Insecure temporary files used by Aspire CLI can allow a local attacker to obtain sensitive configuration information.",
"id": "UBUNTU-CVE-2026-120792",
"modified": "2026-11-10T00:00:00Z",
"published": "2026-11-10T00:00:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-120792"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-120792"
},
{
"type": "REPORT",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120792"
},
{
"type": "REPORT",
"url": "https://github.com/dotnet/announcements/issues/518"
},
{
"type": "REPORT",
"url": "https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-november-2026-servicing-updates"
}
],
"related": [],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-120792"
]
}
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.