Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-58649 (GCVE-0-2026-58649)
Vulnerability from cvelistv5 – Published: 2026-09-08 17:17 – Updated: 2026-09-09 21:34- CWE-346 - Origin Validation Error
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Microsoft | .NET 10.0 |
Affected:
10.0.0 , < 10.0.111, 10.0.400
(custom)
|
guessed | |
| Microsoft | .NET 11.0 |
Affected:
11.0.0 , < 11.0 RC1
(custom)
|
guessed | |
| Microsoft | .NET 8.0 |
Affected:
8.0.0 , < 8.0.130, 8.0.424
(custom)
|
guessed | |
| Microsoft | .NET 9.0 |
Affected:
9.0.0 , < 9.0.120, 9.0.317
(custom)
|
guessed | |
| Microsoft | Microsoft Visual Studio 2022 version 17.14 |
Affected:
17.14.0 , < 17.14.40
(custom)
|
guessed | |
| Microsoft | Microsoft Visual Studio 2026 version 18.9 |
Affected:
18.9.0 , < 18.9.3
(custom)
|
guessed |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-58649",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-08T19:45:24.737506Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-08T20:06:52.403Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": ".NET 10.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.111, 10.0.400",
"status": "affected",
"version": "10.0.0",
"versionType": "custom"
}
]
},
{
"product": ".NET 11.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "11.0 RC1",
"status": "affected",
"version": "11.0.0",
"versionType": "custom"
}
]
},
{
"product": ".NET 8.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "8.0.130, 8.0.424",
"status": "affected",
"version": "8.0.0",
"versionType": "custom"
}
]
},
{
"product": ".NET 9.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "9.0.120, 9.0.317",
"status": "affected",
"version": "9.0.0",
"versionType": "custom"
}
]
},
{
"product": "Microsoft Visual Studio 2022 version 17.14",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.14.40",
"status": "affected",
"version": "17.14.0",
"versionType": "custom"
}
]
},
{
"product": "Microsoft Visual Studio 2026 version 18.9",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "18.9.3",
"status": "affected",
"version": "18.9.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.14.40",
"versionStartIncluding": "17.14.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "11.0 RC1",
"versionStartIncluding": "11.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "8.0.130, 8.0.424",
"versionStartIncluding": "8.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "9.0.120, 9.0.317",
"versionStartIncluding": "9.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*",
"versionEndExcluding": "18.9.3",
"versionStartIncluding": "18.9.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.111, 10.0.400",
"versionStartIncluding": "10.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-09-08T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Origin validation error in .NET allows an unauthorized attacker to disclose information over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-346",
"description": "CWE-346: Origin Validation Error",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T21:34:39.745Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": ".NET Information Disclosure Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58649"
}
],
"title": ".NET Information Disclosure Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-58649",
"datePublished": "2026-09-08T17:17:36.706Z",
"dateReserved": "2026-07-01T21:14:44.619Z",
"dateUpdated": "2026-09-09T21:34:39.745Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-58649",
"date": "2026-09-10",
"epss": "0.00272",
"percentile": "0.19436"
},
"microsoft_vex": {
"current_release_date": "2026-09-08T07:00:00.000Z",
"cve": "CVE-2026-58649",
"id": "msrc_CVE-2026-58649",
"initial_release_date": "2026-09-08T07:00:00.000Z",
"product_status:fixed": "14",
"product_status:known_affected": "14",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": ".NET Information Disclosure Vulnerability",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-58649.json",
"version": "1"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-58649\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2026-09-08T18:17:44.380\",\"lastModified\":\"2026-09-08T20:17:35.987\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.\"}],\"affected\":[{\"source\":\"secure@microsoft.com\",\"affectedData\":[{\"vendor\":\"Microsoft\",\"product\":\".NET 10.0\",\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.111, 10.0.400\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\".NET 11.0\",\"versions\":[{\"version\":\"11.0.0\",\"lessThan\":\"11.0 RC1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\".NET 8.0\",\"versions\":[{\"version\":\"8.0.0\",\"lessThan\":\"8.0.130, 8.0.424\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\".NET 9.0\",\"versions\":[{\"version\":\"9.0.0\",\"lessThan\":\"9.0.120, 9.0.317\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Visual Studio 2022 version 17.14\",\"versions\":[{\"version\":\"17.14.0\",\"lessThan\":\"17.14.40\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Visual Studio 2026 version 18.9\",\"versions\":[{\"version\":\"18.9.0\",\"lessThan\":\"18.9.3\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-09-08T19:45:24.737506Z\",\"id\":\"CVE-2026-58649\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-346\"}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58649\",\"source\":\"secure@microsoft.com\"}]}}",
"redhat_vex": {
"aggregate_severity": "Moderate",
"current_release_date": "2026-09-09T15:40:05+00:00",
"cve": "CVE-2026-58649",
"id": "CVE-2026-58649",
"initial_release_date": "2026-09-08T17:00:00+00:00",
"product_status:known_affected": "133",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58649.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-58649\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-09-08T19:45:24.737506Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-09-08T20:06:46.344Z\"}}], \"cna\": {\"title\": \".NET Information Disclosure Vulnerability\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Microsoft\", \"product\": \".NET 10.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.0\", \"lessThan\": \"10.0.111, 10.0.400\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \".NET 11.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"11.0.0\", \"lessThan\": \"11.0 RC1\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \".NET 8.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.0.0\", \"lessThan\": \"8.0.130, 8.0.424\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \".NET 9.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.0.0\", \"lessThan\": \"9.0.120, 9.0.317\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Visual Studio 2022 version 17.14\", \"versions\": [{\"status\": \"affected\", \"version\": \"17.14.0\", \"lessThan\": \"17.14.40\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Visual Studio 2026 version 18.9\", \"versions\": [{\"status\": \"affected\", \"version\": \"18.9.0\", \"lessThan\": \"18.9.3\", \"versionType\": \"custom\"}]}], \"datePublic\": \"2026-09-08T14:00:00.000Z\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58649\", \"name\": \".NET Information Disclosure Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"]}], \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-346\", \"description\": \"CWE-346: Origin Validation Error\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"17.14.40\", \"versionStartIncluding\": \"17.14.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"11.0 RC1\", \"versionStartIncluding\": \"11.0.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"8.0.130, 8.0.424\", \"versionStartIncluding\": \"8.0.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"9.0.120, 9.0.317\", \"versionStartIncluding\": \"9.0.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"18.9.3\", \"versionStartIncluding\": \"18.9.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.111, 10.0.400\", \"versionStartIncluding\": \"10.0.0\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\", \"dateUpdated\": \"2026-09-09T21:34:39.745Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-58649\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-09T21:34:39.745Z\", \"dateReserved\": \"2026-07-01T21:14:44.619Z\", \"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"datePublished\": \"2026-09-08T17:17:36.706Z\", \"assignerShortName\": \"microsoft\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
CERTFR-2026-AVI-1146
Vulnerability from certfr_avis - Published: 2026-09-09 - Updated: 2026-09-09
De multiples vulnérabilités ont été découvertes dans Microsoft .Net. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | N/A | .NET 9.0 installé sur Linux versions antérieures à 9.0.120, 9.0.317 | ||
| Microsoft | N/A | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 versions antérieures à 4.7.4145.0 | ||
| Microsoft | N/A | Microsoft .NET Framework 4.8.1 versions antérieures à 4.8.9347.0 | ||
| Microsoft | N/A | ASP.NET Core 8.0 versions antérieures à 8.0.31 | ||
| Microsoft | N/A | .NET 8.0 installé sur Windows versions antérieures à 8.0.130, 8.0.424 | ||
| Microsoft | N/A | .NET 8.0 installé sur Windows versions antérieures à 8.0.31 | ||
| Microsoft | N/A | .NET 9.0 installé sur Windows versions antérieures à 9.0.20 | ||
| Microsoft | N/A | .NET 10.0 installé sur Mac OS versions antérieures à 10.0.111, 10.0.400 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5 et 4.6.2/4.7/4.7.1/4.7.2 versions antérieures à 2.0.50727.9070 & 3.0.30729.9068 & 4.7.4145.0 | ||
| Microsoft | N/A | .NET 10.0 installé sur Linux versions antérieures à 10.0.111, 10.0.400 | ||
| Microsoft | N/A | .NET 9.0 installé sur Mac OS versions antérieures à 9.0.120, 9.0.317 | ||
| Microsoft | N/A | ASP.NET Core 9.0 versions antérieures à 9.0.20 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5 et 4.6.2/4.7/4.7.1/4.7.2 versions antérieures à 2.0.50727.8984 & 3.0.30729.8980 & 4.7.4145.0 | ||
| Microsoft | N/A | .NET 10.0 installé sur Windows versions antérieures à 10.0.111, 10.0.400 | ||
| Microsoft | N/A | .NET 11.0 installé sur Linux versions antérieures à 11.0 RC1 | ||
| Microsoft | N/A | .NET 11.0 installé sur Mac OS versions antérieures à 11.0 RC1 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5 et 4.8 versions antérieures à 2.0.50727.9070 & 3.0.30729.9068 & 4.8.4806.0 | ||
| Microsoft | N/A | ASP.NET Core 11.0 versions antérieures à 11.0 RC1 | ||
| Microsoft | N/A | .NET 9.0 installé sur Linux versions antérieures à 9.0.317 | ||
| Microsoft | N/A | ASP.NET Core 10.0 versions antérieures à 10.0.12 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5 et 4.8.1 versions antérieures à 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9347.0 | ||
| Microsoft | N/A | .NET 10.0 installé sur Windows versions antérieures à 10.0.12 | ||
| Microsoft | N/A | .NET 9.0 installé sur Windows versions antérieures à 9.0.120, 9.0.317 | ||
| Microsoft | N/A | .NET 11.0 installé sur Windows versions antérieures à 11.0 RC1 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5 et 4.8.1 versions antérieures à 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9346.0 | ||
| Microsoft | N/A | Microsoft .NET Framework 4.8 versions antérieures à 4.8.4806.0 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5 et 4.8 versions antérieures à 2.0.50727.9183 & 3.0.30729.9169 & 4.8.4806.0 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5 et 4.7.2 versions antérieures à 2.0.50727.9070 & 3.0.30729.9068 & 4.7.4145.0 | ||
| Microsoft | N/A | .NET 8.0 installé sur Linux versions antérieures à 8.0.130, 8.0.424 | ||
| Microsoft | N/A | .NET 8.0 installé sur Mac OS versions antérieures à 8.0.130, 8.0.424 |
| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": ".NET 9.0 install\u00e9 sur Linux versions ant\u00e9rieures \u00e0 9.0.120, 9.0.317",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 versions ant\u00e9rieures \u00e0 4.7.4145.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 4.8.1 versions ant\u00e9rieures \u00e0 4.8.9347.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "ASP.NET Core 8.0 versions ant\u00e9rieures \u00e0 8.0.31",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 8.0 install\u00e9 sur Windows versions ant\u00e9rieures \u00e0 8.0.130, 8.0.424",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 8.0 install\u00e9 sur Windows versions ant\u00e9rieures \u00e0 8.0.31",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 9.0 install\u00e9 sur Windows versions ant\u00e9rieures \u00e0 9.0.20",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 10.0 install\u00e9 sur Mac OS versions ant\u00e9rieures \u00e0 10.0.111, 10.0.400",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 et 4.6.2/4.7/4.7.1/4.7.2 versions ant\u00e9rieures \u00e0 2.0.50727.9070 \u0026 3.0.30729.9068 \u0026 4.7.4145.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 10.0 install\u00e9 sur Linux versions ant\u00e9rieures \u00e0 10.0.111, 10.0.400",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 9.0 install\u00e9 sur Mac OS versions ant\u00e9rieures \u00e0 9.0.120, 9.0.317",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "ASP.NET Core 9.0 versions ant\u00e9rieures \u00e0 9.0.20",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 et 4.6.2/4.7/4.7.1/4.7.2 versions ant\u00e9rieures \u00e0 2.0.50727.8984 \u0026 3.0.30729.8980 \u0026 4.7.4145.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 10.0 install\u00e9 sur Windows versions ant\u00e9rieures \u00e0 10.0.111, 10.0.400",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 11.0 install\u00e9 sur Linux versions ant\u00e9rieures \u00e0 11.0 RC1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 11.0 install\u00e9 sur Mac OS versions ant\u00e9rieures \u00e0 11.0 RC1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 et 4.8 versions ant\u00e9rieures \u00e0 2.0.50727.9070 \u0026 3.0.30729.9068 \u0026 4.8.4806.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "ASP.NET Core 11.0 versions ant\u00e9rieures \u00e0 11.0 RC1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 9.0 install\u00e9 sur Linux versions ant\u00e9rieures \u00e0 9.0.317",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "ASP.NET Core 10.0 versions ant\u00e9rieures \u00e0 10.0.12",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 et 4.8.1 versions ant\u00e9rieures \u00e0 2.0.50727.9183 \u0026 3.0.30729.9169 \u0026 4.8.9347.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 10.0 install\u00e9 sur Windows versions ant\u00e9rieures \u00e0 10.0.12",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 9.0 install\u00e9 sur Windows versions ant\u00e9rieures \u00e0 9.0.120, 9.0.317",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 11.0 install\u00e9 sur Windows versions ant\u00e9rieures \u00e0 11.0 RC1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 et 4.8.1 versions ant\u00e9rieures \u00e0 2.0.50727.9183 \u0026 3.0.30729.9169 \u0026 4.8.9346.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 4.8 versions ant\u00e9rieures \u00e0 4.8.4806.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 et 4.8 versions ant\u00e9rieures \u00e0 2.0.50727.9183 \u0026 3.0.30729.9169 \u0026 4.8.4806.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 et 4.7.2 versions ant\u00e9rieures \u00e0 2.0.50727.9070 \u0026 3.0.30729.9068 \u0026 4.7.4145.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 8.0 install\u00e9 sur Linux versions ant\u00e9rieures \u00e0 8.0.130, 8.0.424",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 8.0 install\u00e9 sur Mac OS versions ant\u00e9rieures \u00e0 8.0.130, 8.0.424",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-71328",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71328"
},
{
"name": "CVE-2026-69806",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69806"
},
{
"name": "CVE-2026-69522",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69522"
},
{
"name": "CVE-2026-69439",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69439"
},
{
"name": "CVE-2026-58649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58649"
},
{
"name": "CVE-2026-69304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69304"
}
],
"initial_release_date": "2026-09-09T00:00:00",
"last_revision_date": "2026-09-09T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1146",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-09-09T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft .Net. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft .Net",
"vendor_advisories": [
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-71328",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71328"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-69439",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69439"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-58649",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58649"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-69806",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69806"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-69304",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69304"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2026-69522",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69522"
}
]
}
CERTFR-2026-AVI-1149
Vulnerability from certfr_avis - Published: 2026-09-09 - Updated: 2026-09-09
De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | N/A | Microsoft SQL Server 2025 pour systèmes x64 (CU8) versions antérieures à 17.0.4085.5 | ||
| Microsoft | N/A | Microsoft Exchange Server 2019 Cumulative Update 14 versions antérieures à 15.02.1544.046 | ||
| Microsoft | N/A | SQL Server Management Studio 22 versions antérieures à 22.8.2 | ||
| Microsoft | N/A | Microsoft Exchange Server 2019 Cumulative Update 15 versions antérieures à 15.02.1748.051 | ||
| Microsoft | N/A | Microsoft.AspNetCore.OData versions antérieures à 7.8.1 | ||
| Microsoft | N/A | Microsoft Visual Studio 2022 version 17.14 antérieures à 17.14.40 | ||
| Microsoft | N/A | Web Media Extensions versions antérieures à 1.2.42.0 | ||
| Microsoft | N/A | Raw Image Extension versions antérieures à 2.4.24.0 | ||
| Microsoft | N/A | Microsoft SQL Server 2022 pour systèmes x64 (GDR) versions antérieures à 16.0.1200.5 | ||
| Microsoft | N/A | Power Automate agent pour virtual desktops versions antérieures à 2.71.115.26224 | ||
| Microsoft | N/A | HEVC Video Extensions from Device Manufacturer versions antérieures à 2.5.25.0 | ||
| Microsoft | N/A | Microsoft SQL Server 2025 pour systèmes x64 (GDR) versions antérieures à 17.0.1135.8 | ||
| Microsoft | N/A | Microsoft SQL Server 2017 pour systèmes x64 (GDR) versions antérieures à 14.0.2130.4 | ||
| Microsoft | N/A | Microsoft.Diagnostics.Runtime versions antérieures à 4.1.740301 | ||
| Microsoft | N/A | Microsoft Visual Studio 2026 version 18.9 antérieures à 18.9.3 | ||
| Microsoft | N/A | Power Automate pour Desktop versions antérieures à 2.71.115.26224 | ||
| Microsoft | N/A | Microsoft Exchange Server Subscription Edition RTM versions antérieures à 15.02.2562.049 | ||
| Microsoft | N/A | Microsoft SQL Server 2017 pour systèmes x64 (CU 31) versions antérieures à 14.0.3550.4 | ||
| Microsoft | N/A | Microsoft Authentication Library (MSAL) pour Node.js versions antérieures à 5.6.0 | ||
| Microsoft | N/A | Microsoft SQL Server 2019 pour systèmes x64 (CU 32) versions antérieures à 15.0.4490.9 | ||
| Microsoft | N/A | Skype pour Business Server Subscription Edition CU1 versions antérieures à 7.0.2046.879 | ||
| Microsoft | N/A | HEVC Video Extensions pour Licensed Applications versions antérieures à 2.4.85.0 | ||
| Microsoft | N/A | HEIF Image Extension versions antérieures à 1.2.48.0 | ||
| Microsoft | N/A | Xbox Gaming Services versions antérieures à 37.114.10001.0 | ||
| Microsoft | N/A | Raw Image Extension versions antérieures à 2.5.24.0 | ||
| Microsoft | N/A | Microsoft SQL Server 2019 pour systèmes x64 (GDR) versions antérieures à 15.0.2190.7 | ||
| Microsoft | N/A | Microsoft Teams pour Android versions antérieures à 1416/1.0.0.2026133602 | ||
| Microsoft | N/A | Visual Studio Code versions antérieures à 1.136.2 | ||
| Microsoft | N/A | Microsoft Dynamics 365 Customer Engagement V9.1 versions antérieures à 9.1.0048.0004 | ||
| Microsoft | N/A | Microsoft Exchange Server 2016 Cumulative Update 23 versions antérieures à 15.01.2507.073 | ||
| Microsoft | N/A | Microsoft Authenticator pour Android versions antérieures à 16.3.0 | ||
| Microsoft | N/A | Microsoft SQL Server 2022 pour systèmes x64 (CU 26) versions antérieures à 16.0.4275.2 | ||
| Microsoft | N/A | HEVC Video Extensions versions antérieures à 2.4.87.0 | ||
| Microsoft | N/A | Skype pour Business Server 2019 CU8 versions antérieures à 7.0.2046.569 | ||
| Microsoft | N/A | Microsoft Dynamics 365 (on-premises) version 9.1 antérieures à 9.1.0046.0006 | ||
| Microsoft | N/A | WebP Image Extension versions antérieures à 1.2.31.0 | ||
| Microsoft | N/A | Skype pour Business Server 2015 CU13 versions antérieures à 6.0.9319.885 | ||
| Microsoft | N/A | Microsoft SharePoint Server Subscription Edition versions antérieures à 16.0.20326.20094 | ||
| Microsoft | N/A | HEVC Video Extensions from Device Manufacturer versions antérieures à 2.4.86.0 | ||
| Microsoft | N/A | Web Media Extensions versions antérieures à 2.1.51.0 | ||
| Microsoft | N/A | Microsoft Teams pour Android versions antérieures à 1416/1.0.0.2026142702 |
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft SQL Server 2025 pour syst\u00e8mes x64 (CU8) versions ant\u00e9rieures \u00e0 17.0.4085.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server 2019 Cumulative Update 14 versions ant\u00e9rieures \u00e0 15.02.1544.046",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "SQL Server Management Studio 22 versions ant\u00e9rieures \u00e0 22.8.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server 2019 Cumulative Update 15 versions ant\u00e9rieures \u00e0 15.02.1748.051",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.OData versions ant\u00e9rieures \u00e0 7.8.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2022 version 17.14 ant\u00e9rieures \u00e0 17.14.40",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Web Media Extensions versions ant\u00e9rieures \u00e0 1.2.42.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Raw Image Extension versions ant\u00e9rieures \u00e0 2.4.24.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 16.0.1200.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Power Automate agent pour virtual desktops versions ant\u00e9rieures \u00e0 2.71.115.26224",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "HEVC Video Extensions from Device Manufacturer versions ant\u00e9rieures \u00e0 2.5.25.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2025 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 17.0.1135.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 14.0.2130.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.Diagnostics.Runtime versions ant\u00e9rieures \u00e0 4.1.740301",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2026 version 18.9 ant\u00e9rieures \u00e0 18.9.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Power Automate pour Desktop versions ant\u00e9rieures \u00e0 2.71.115.26224",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server Subscription Edition RTM versions ant\u00e9rieures \u00e0 15.02.2562.049",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (CU 31) versions ant\u00e9rieures \u00e0 14.0.3550.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Authentication Library (MSAL) pour Node.js versions ant\u00e9rieures \u00e0 5.6.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (CU 32) versions ant\u00e9rieures \u00e0 15.0.4490.9",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Skype pour Business Server Subscription Edition CU1 versions ant\u00e9rieures \u00e0 7.0.2046.879",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "HEVC Video Extensions pour Licensed Applications versions ant\u00e9rieures \u00e0 2.4.85.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "HEIF Image Extension versions ant\u00e9rieures \u00e0 1.2.48.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Xbox Gaming Services versions ant\u00e9rieures \u00e0 37.114.10001.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Raw Image Extension versions ant\u00e9rieures \u00e0 2.5.24.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 15.0.2190.7",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Teams pour Android versions ant\u00e9rieures \u00e0 1416/1.0.0.2026133602",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Visual Studio Code versions ant\u00e9rieures \u00e0 1.136.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Dynamics 365 Customer Engagement V9.1 versions ant\u00e9rieures \u00e0 9.1.0048.0004",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server 2016 Cumulative Update 23 versions ant\u00e9rieures \u00e0 15.01.2507.073",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Authenticator pour Android versions ant\u00e9rieures \u00e0 16.3.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (CU 26) versions ant\u00e9rieures \u00e0 16.0.4275.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "HEVC Video Extensions versions ant\u00e9rieures \u00e0 2.4.87.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Skype pour Business Server 2019 CU8 versions ant\u00e9rieures \u00e0 7.0.2046.569",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Dynamics 365 (on-premises) version 9.1 ant\u00e9rieures \u00e0 9.1.0046.0006",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "WebP Image Extension versions ant\u00e9rieures \u00e0 1.2.31.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Skype pour Business Server 2015 CU13 versions ant\u00e9rieures \u00e0 6.0.9319.885",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Server Subscription Edition versions ant\u00e9rieures \u00e0 16.0.20326.20094",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "HEVC Video Extensions from Device Manufacturer versions ant\u00e9rieures \u00e0 2.4.86.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Web Media Extensions versions ant\u00e9rieures \u00e0 2.1.51.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Teams pour Android versions ant\u00e9rieures \u00e0 1416/1.0.0.2026142702",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-69268",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69268"
},
{
"name": "CVE-2026-69356",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69356"
},
{
"name": "CVE-2026-77487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77487"
},
{
"name": "CVE-2026-68775",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68775"
},
{
"name": "CVE-2026-63523",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63523"
},
{
"name": "CVE-2026-67379",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67379"
},
{
"name": "CVE-2026-78456",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78456"
},
{
"name": "CVE-2026-77485",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77485"
},
{
"name": "CVE-2026-69375",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69375"
},
{
"name": "CVE-2026-69636",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69636"
},
{
"name": "CVE-2026-58599",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58599"
},
{
"name": "CVE-2026-69904",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69904"
},
{
"name": "CVE-2026-84003",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84003"
},
{
"name": "CVE-2026-67373",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67373"
},
{
"name": "CVE-2026-78442",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78442"
},
{
"name": "CVE-2026-81357",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81357"
},
{
"name": "CVE-2026-81353",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81353"
},
{
"name": "CVE-2026-67376",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67376"
},
{
"name": "CVE-2026-77486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77486"
},
{
"name": "CVE-2026-69642",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69642"
},
{
"name": "CVE-2026-81356",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81356"
},
{
"name": "CVE-2026-58600",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58600"
},
{
"name": "CVE-2026-67643",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67643"
},
{
"name": "CVE-2026-77481",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77481"
},
{
"name": "CVE-2026-71328",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71328"
},
{
"name": "CVE-2026-66814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66814"
},
{
"name": "CVE-2026-77908",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77908"
},
{
"name": "CVE-2026-67629",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67629"
},
{
"name": "CVE-2026-67390",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67390"
},
{
"name": "CVE-2026-67641",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67641"
},
{
"name": "CVE-2026-55007",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55007"
},
{
"name": "CVE-2026-69464",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69464"
},
{
"name": "CVE-2026-67380",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67380"
},
{
"name": "CVE-2026-68780",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68780"
},
{
"name": "CVE-2026-69559",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69559"
},
{
"name": "CVE-2026-67648",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67648"
},
{
"name": "CVE-2026-66306",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66306"
},
{
"name": "CVE-2026-81381",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81381"
},
{
"name": "CVE-2026-77488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77488"
},
{
"name": "CVE-2026-81377",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81377"
},
{
"name": "CVE-2026-81352",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81352"
},
{
"name": "CVE-2026-67383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67383"
},
{
"name": "CVE-2026-67388",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67388"
},
{
"name": "CVE-2026-81380",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81380"
},
{
"name": "CVE-2026-66302",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66302"
},
{
"name": "CVE-2026-73029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73029"
},
{
"name": "CVE-2026-65812",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65812"
},
{
"name": "CVE-2026-70334",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70334"
},
{
"name": "CVE-2026-69282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69282"
},
{
"name": "CVE-2026-67384",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67384"
},
{
"name": "CVE-2026-80097",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-80097"
},
{
"name": "CVE-2026-66820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66820"
},
{
"name": "CVE-2026-67389",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67389"
},
{
"name": "CVE-2026-68787",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68787"
},
{
"name": "CVE-2026-67633",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67633"
},
{
"name": "CVE-2026-65772",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65772"
},
{
"name": "CVE-2026-68777",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68777"
},
{
"name": "CVE-2026-77480",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77480"
},
{
"name": "CVE-2026-70351",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70351"
},
{
"name": "CVE-2026-68778",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68778"
},
{
"name": "CVE-2026-78462",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78462"
},
{
"name": "CVE-2026-69806",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69806"
},
{
"name": "CVE-2026-68776",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68776"
},
{
"name": "CVE-2026-69522",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69522"
},
{
"name": "CVE-2026-57099",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57099"
},
{
"name": "CVE-2026-69465",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69465"
},
{
"name": "CVE-2026-68785",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68785"
},
{
"name": "CVE-2026-77484",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77484"
},
{
"name": "CVE-2026-66305",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66305"
},
{
"name": "CVE-2026-67631",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67631"
},
{
"name": "CVE-2026-67381",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67381"
},
{
"name": "CVE-2026-81383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81383"
},
{
"name": "CVE-2026-69378",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69378"
},
{
"name": "CVE-2026-66303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66303"
},
{
"name": "CVE-2026-67639",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67639"
},
{
"name": "CVE-2026-77906",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77906"
},
{
"name": "CVE-2026-67369",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67369"
},
{
"name": "CVE-2026-67636",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67636"
},
{
"name": "CVE-2026-66304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66304"
},
{
"name": "CVE-2026-66818",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66818"
},
{
"name": "CVE-2026-69439",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69439"
},
{
"name": "CVE-2026-69683",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69683"
},
{
"name": "CVE-2026-69804",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69804"
},
{
"name": "CVE-2026-67385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67385"
},
{
"name": "CVE-2026-69380",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69380"
},
{
"name": "CVE-2026-81376",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81376"
},
{
"name": "CVE-2026-81378",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81378"
},
{
"name": "CVE-2026-77907",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77907"
},
{
"name": "CVE-2026-69724",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69724"
},
{
"name": "CVE-2026-67624",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67624"
},
{
"name": "CVE-2026-58611",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58611"
},
{
"name": "CVE-2026-66816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66816"
},
{
"name": "CVE-2026-77482",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77482"
},
{
"name": "CVE-2026-67378",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67378"
},
{
"name": "CVE-2026-68779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68779"
},
{
"name": "CVE-2026-69690",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69690"
},
{
"name": "CVE-2026-69805",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69805"
},
{
"name": "CVE-2026-69402",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69402"
},
{
"name": "CVE-2026-66819",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66819"
},
{
"name": "CVE-2026-69716",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69716"
},
{
"name": "CVE-2026-66307",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66307"
},
{
"name": "CVE-2026-67386",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67386"
},
{
"name": "CVE-2026-69361",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69361"
},
{
"name": "CVE-2026-47297",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47297"
},
{
"name": "CVE-2026-67645",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67645"
},
{
"name": "CVE-2026-81379",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81379"
},
{
"name": "CVE-2026-65669",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65669"
},
{
"name": "CVE-2026-78461",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78461"
},
{
"name": "CVE-2026-67370",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67370"
},
{
"name": "CVE-2026-69649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69649"
},
{
"name": "CVE-2026-68786",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68786"
},
{
"name": "CVE-2026-77897",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77897"
},
{
"name": "CVE-2026-66308",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66308"
},
{
"name": "CVE-2026-68781",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68781"
},
{
"name": "CVE-2026-69382",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69382"
},
{
"name": "CVE-2026-69562",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69562"
},
{
"name": "CVE-2026-69641",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69641"
},
{
"name": "CVE-2026-67630",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67630"
},
{
"name": "CVE-2026-58649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58649"
},
{
"name": "CVE-2026-67393",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67393"
},
{
"name": "CVE-2026-69646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69646"
},
{
"name": "CVE-2026-69417",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69417"
},
{
"name": "CVE-2026-69409",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69409"
},
{
"name": "CVE-2026-68784",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68784"
},
{
"name": "CVE-2026-69615",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69615"
},
{
"name": "CVE-2026-69304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69304"
},
{
"name": "CVE-2026-78441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78441"
},
{
"name": "CVE-2026-69355",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69355"
},
{
"name": "CVE-2026-73028",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73028"
},
{
"name": "CVE-2026-69273",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69273"
},
{
"name": "CVE-2026-67638",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67638"
},
{
"name": "CVE-2026-67368",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67368"
},
{
"name": "CVE-2026-67642",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67642"
},
{
"name": "CVE-2026-77483",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77483"
}
],
"initial_release_date": "2026-09-09T00:00:00",
"last_revision_date": "2026-09-09T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1149",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-09-09T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Microsoft. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
"vendor_advisories": [
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77482",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77482"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67388",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67388"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69562",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69562"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69642",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69642"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-78442",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78442"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67379",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67379"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69439",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69439"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-63523",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63523"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69522",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69522"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67370",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67370"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67648",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67648"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47297",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47297"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66818",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66818"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67642",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67642"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67624",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67624"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77488",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77488"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81357",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81357"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66308",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66308"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69361",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69361"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69409",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69409"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-73028",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73028"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-78441",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78441"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70351",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70351"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77484",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77484"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81380",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81380"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-78456",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78456"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81383",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81383"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69355",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69355"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69636",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69636"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69615",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69615"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69806",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69806"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81378",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81378"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69380",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69380"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68776",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68776"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-65812",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65812"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67629",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67629"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66305",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66305"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66819",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66819"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67376",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67376"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69282",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69282"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58611",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58611"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68775",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68775"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70334",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70334"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67373",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67373"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66303",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66303"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77897",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77897"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67641",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67641"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69465",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69465"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68786",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68786"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67390",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67390"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67368",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67368"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67386",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67386"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68778",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68778"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69641",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69641"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67638",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67638"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-78461",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78461"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81377",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81377"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66814",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66814"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67380",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67380"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81352",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81352"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77483",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77483"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68780",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68780"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77906",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77906"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69382",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69382"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66816",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66816"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69716",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69716"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67393",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67393"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69649",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69649"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67383",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67383"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69904",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69904"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69559",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69559"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66820",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66820"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77481",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77481"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69804",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69804"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69268",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69268"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-65669",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65669"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69805",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69805"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55007",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55007"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67645",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67645"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81376",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81376"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81353",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81353"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-80097",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80097"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77907",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77907"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69375",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69375"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58599",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58599"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67384",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67384"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66306",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66306"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68781",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68781"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77480",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77480"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67643",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67643"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-84003",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84003"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-78462",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78462"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68787",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68787"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67381",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67381"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77486",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77486"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67631",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67631"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66302",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66302"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68784",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68784"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69646",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69646"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67369",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67369"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67636",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67636"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58600",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58600"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69464",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69464"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69683",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69683"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67639",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67639"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77487",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77487"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67385",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67385"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69273",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69273"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58649",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58649"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-57099",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57099"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81356",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81356"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-65772",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65772"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-71328",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71328"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67633",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67633"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-73029",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73029"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69378",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69378"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66304",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66304"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81381",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81381"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69402",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69402"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68785",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68785"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69356",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69356"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66307",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66307"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81379",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81379"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77485",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77485"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67630",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67630"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69724",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69724"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68777",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68777"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69690",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69690"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77908",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77908"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69304",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69304"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68779",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68779"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67378",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67378"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69417",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69417"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67389",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67389"
}
]
}
FKIE_CVE-2026-58649
Vulnerability from fkie_nvd - Published: 2026-09-08 18:17 - Updated: 2026-09-08 20:17| Vendor | Product | Version |
|---|
{
"affected": [
{
"affectedData": [
{
"product": ".NET 10.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.111, 10.0.400",
"status": "affected",
"version": "10.0.0",
"versionType": "custom"
}
]
},
{
"product": ".NET 11.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "11.0 RC1",
"status": "affected",
"version": "11.0.0",
"versionType": "custom"
}
]
},
{
"product": ".NET 8.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "8.0.130, 8.0.424",
"status": "affected",
"version": "8.0.0",
"versionType": "custom"
}
]
},
{
"product": ".NET 9.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "9.0.120, 9.0.317",
"status": "affected",
"version": "9.0.0",
"versionType": "custom"
}
]
},
{
"product": "Microsoft Visual Studio 2022 version 17.14",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.14.40",
"status": "affected",
"version": "17.14.0",
"versionType": "custom"
}
]
},
{
"product": "Microsoft Visual Studio 2026 version 18.9",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "18.9.3",
"status": "affected",
"version": "18.9.0",
"versionType": "custom"
}
]
}
],
"source": "secure@microsoft.com"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Origin validation error in .NET allows an unauthorized attacker to disclose information over a network."
}
],
"id": "CVE-2026-58649",
"lastModified": "2026-09-08T20:17:35.987",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6,
"source": "secure@microsoft.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-58649",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-08T19:45:24.737506Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-09-08T18:17:44.380",
"references": [
{
"source": "secure@microsoft.com",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58649"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-346"
}
],
"source": "secure@microsoft.com",
"type": "Secondary"
}
]
}
GHSA-44G5-M8VM-448V
Vulnerability from github – Published: 2026-09-08 18:32 – Updated: 2026-09-08 18:32Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
{
"affected": [],
"aliases": [
"CVE-2026-58649"
],
"database_specific": {
"cwe_ids": [
"CWE-346"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-09-08T18:17:44Z",
"severity": "MODERATE"
},
"details": "Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.",
"id": "GHSA-44g5-m8vm-448v",
"modified": "2026-09-08T18:32:04Z",
"published": "2026-09-08T18:32:04Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58649"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58649"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
NCSC-2026-0351
Vulnerability from csaf_ncscnl - Published: 2026-09-08 18:47 - Updated: 2026-09-08 18:47| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 10.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 8.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 10.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 8.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 10.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 8.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 10.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 8.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 10.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 8.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 10.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 8.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 10.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 8.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 10.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 8.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 10.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 8.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 10.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 8.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 10.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 8.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 10.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 8.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 10.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 8.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 10.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 8.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 10.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 8.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Linux
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Mac OS
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / .NET 9.0 installed on Windows
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 10.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / ASP.NET Core 8.0
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Microsoft.AspNetCore.OData
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Visual Studio Code
|
vers:unknown/* |
| URL | Category |
|---|---|
| https://portal.msrc.microsoft.com/en-us/security-… | external |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Microsoft heeft 15 kwetsbaarheden verholpen in diverse Developer Tools.",
"title": "Feiten"
},
{
"category": "description",
"text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheid met kenmerk CVE-2026-81376 heeft een CVSS-score van 9,6. Een kwaadwillende misbruiken door een gebruiker ertoe te verleiden een speciaal geprepareerde Visual Studio Code-workspace te openen. Hiermee kunnen de Workspace Trust-beperkingen worden omzeild, waardoor inhoud uit een niet-vertrouwde workspace opdrachten of code kan uitvoeren zonder dat de gebruiker hiervoor eerst toestemming geeft. Hierdoor kan de kwaadwillende toegang krijgen tot lokale gegevens of code uitvoeren met de rechten van de gebruiker.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide broncodebestand te importeren en verwerken.\n\n```\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-58649 | 6,50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-81380 | 5,30 | Toegang tot gevoelige gegevens | \n| CVE-2026-81381 | 6,50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-70334 | 7,80 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-78461 | 7,40 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-78462 | 8,80 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-81356 | 8,20 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-81357 | 8,20 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-81376 | 9,60 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-81377 | 6,50 | \u003cVertaal: Tampering\u003e | \n| CVE-2026-81378 | 8,20 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-81379 | 8,20 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-81383 | 7,40 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-57099 | 7,50 | Denial-of-Service | \n| CVE-2026-69304 | 5,90 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\n\n------------------- Productgroep Apps ---------------------------------\n\n\nAll CVE\u0027s for this product group:\nCVE-2026-58611, CVE-2026-80097\n\nMicrosoft Authenticator: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-80097 | 8,60 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nXBox Gaming Services: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-58611 | 7,80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\n```",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:\n\nhttps://portal.msrc.microsoft.com/en-us/security-guidance",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"title": "CWE-77"
},
{
"category": "general",
"text": "Incomplete List of Disallowed Inputs",
"title": "CWE-184"
},
{
"category": "general",
"text": "Origin Validation Error",
"title": "CWE-346"
},
{
"category": "general",
"text": "Improper Handling of Highly Compressed Data (Data Amplification)",
"title": "CWE-409"
},
{
"category": "general",
"text": "Interpretation Conflict",
"title": "CWE-436"
},
{
"category": "general",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
},
{
"category": "general",
"text": "Insufficiently Protected Credentials",
"title": "CWE-522"
},
{
"category": "general",
"text": "Not Failing Securely (\u0027Failing Open\u0027)",
"title": "CWE-636"
},
{
"category": "general",
"text": "Authorization Bypass Through User-Controlled Key",
"title": "CWE-639"
},
{
"category": "general",
"text": "Use of Incorrectly-Resolved Name or Reference",
"title": "CWE-706"
},
{
"category": "general",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "general",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
},
{
"category": "general",
"text": "Incomplete Comparison with Missing Factors",
"title": "CWE-1023"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://portal.msrc.microsoft.com/en-us/security-guidance"
}
],
"title": "Kwetsbaarheden verholpen in Microsoft Developer Tools",
"tracking": {
"current_release_date": "2026-09-08T18:47:43.241459Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.3"
}
},
"id": "NCSC-2026-0351",
"initial_release_date": "2026-09-08T18:47:43.241459Z",
"revision_history": [
{
"date": "2026-09-08T18:47:43.241459Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1"
}
}
],
"category": "product_name",
"name": ".NET 10.0 installed on Linux"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-2"
}
}
],
"category": "product_name",
"name": ".NET 10.0 installed on Mac OS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-3"
}
}
],
"category": "product_name",
"name": ".NET 10.0 installed on Windows"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-4"
}
}
],
"category": "product_name",
"name": ".NET 8.0 installed on Linux"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-5"
}
}
],
"category": "product_name",
"name": ".NET 8.0 installed on Mac OS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-6"
}
}
],
"category": "product_name",
"name": ".NET 8.0 installed on Windows"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-7"
}
}
],
"category": "product_name",
"name": ".NET 9.0 installed on Linux"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-8"
}
}
],
"category": "product_name",
"name": ".NET 9.0 installed on Mac OS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-9"
}
}
],
"category": "product_name",
"name": ".NET 9.0 installed on Windows"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-10"
}
}
],
"category": "product_name",
"name": "ASP.NET Core 10.0"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-11"
}
}
],
"category": "product_name",
"name": "ASP.NET Core 8.0"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-12"
}
}
],
"category": "product_name",
"name": "Microsoft.AspNetCore.OData"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-13"
}
}
],
"category": "product_name",
"name": "Visual Studio Code"
}
],
"category": "vendor",
"name": "Microsoft"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-57099",
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-57099 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-57099.json"
}
],
"title": "CVE-2026-57099"
},
{
"cve": "CVE-2026-58649",
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-58649 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-58649.json"
}
],
"title": "CVE-2026-58649"
},
{
"cve": "CVE-2026-69304",
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-69304 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-69304.json"
}
],
"title": "CVE-2026-69304"
},
{
"cve": "CVE-2026-70334",
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-70334 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-70334.json"
}
],
"title": "CVE-2026-70334"
},
{
"cve": "CVE-2026-78461",
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-78461 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-78461.json"
}
],
"title": "CVE-2026-78461"
},
{
"cve": "CVE-2026-78462",
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-78462 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-78462.json"
}
],
"title": "CVE-2026-78462"
},
{
"cve": "CVE-2026-81356",
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-81356 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-81356.json"
}
],
"title": "CVE-2026-81356"
},
{
"cve": "CVE-2026-81357",
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-81357 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-81357.json"
}
],
"title": "CVE-2026-81357"
},
{
"cve": "CVE-2026-81376",
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-81376 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-81376.json"
}
],
"title": "CVE-2026-81376"
},
{
"cve": "CVE-2026-81377",
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-81377 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-81377.json"
}
],
"title": "CVE-2026-81377"
},
{
"cve": "CVE-2026-81378",
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-81378 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-81378.json"
}
],
"title": "CVE-2026-81378"
},
{
"cve": "CVE-2026-81379",
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-81379 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-81379.json"
}
],
"title": "CVE-2026-81379"
},
{
"cve": "CVE-2026-81380",
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-81380 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-81380.json"
}
],
"title": "CVE-2026-81380"
},
{
"cve": "CVE-2026-81381",
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-81381 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-81381.json"
}
],
"title": "CVE-2026-81381"
},
{
"cve": "CVE-2026-81383",
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-81383 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-81383.json"
}
],
"title": "CVE-2026-81383"
}
]
}
ubuntu-cve-2026-58649
Vulnerability from osv_ubuntu
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "aspnetcore-runtime-6.0",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "aspnetcore-targeting-pack-6.0",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-apphost-pack-6.0",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-host",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-hostfxr-6.0",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-runtime-6.0",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-sdk-6.0",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-sdk-6.0-source-built-artifacts",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-targeting-pack-6.0",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-templates-6.0",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet6",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "netstandard-targeting-pack-2.1",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "dotnet6",
"purl": "pkg:deb/ubuntu/dotnet6@6.0.136-0ubuntu1~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.0.108-0ubuntu1~22.04.1",
"6.0.109-0ubuntu1~22.04.1",
"6.0.110-0ubuntu1~22.04.1",
"6.0.111-0ubuntu1~22.04.1",
"6.0.113-0ubuntu1~22.04.1",
"6.0.116-0ubuntu1~22.04.1",
"6.0.118-0ubuntu1~22.04.1",
"6.0.119-0ubuntu1~22.04.1",
"6.0.120-0ubuntu1~22.04.1",
"6.0.121-0ubuntu1~22.04.1",
"6.0.122-0ubuntu1~22.04.1",
"6.0.123-0ubuntu1~22.04.1",
"6.0.124-0ubuntu1~22.04.1",
"6.0.125-0ubuntu1~22.04.1",
"6.0.126-0ubuntu1~22.04.1",
"6.0.127-0ubuntu1~22.04.1",
"6.0.128-0ubuntu1~22.04.2",
"6.0.132-0ubuntu1~22.04.1",
"6.0.133-0ubuntu1~22.04.1",
"6.0.135-0ubuntu1~22.04.1",
"6.0.136-0ubuntu1~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "aspnetcore-runtime-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "aspnetcore-targeting-pack-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-apphost-pack-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-host-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-hostfxr-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-runtime-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-sdk-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-sdk-7.0-source-built-artifacts",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-targeting-pack-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-templates-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet7",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "netstandard-targeting-pack-2.1-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "dotnet7",
"purl": "pkg:deb/ubuntu/dotnet7@7.0.119-0ubuntu1~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"7.0.105-0ubuntu1~22.04.1",
"7.0.107-0ubuntu1~22.04.1",
"7.0.108-0ubuntu1~22.04.1",
"7.0.109-0ubuntu1~22.04.1",
"7.0.110-0ubuntu1~22.04.1",
"7.0.111-0ubuntu1~22.04.1",
"7.0.112-0ubuntu1~22.04.1",
"7.0.113-0ubuntu1~22.04.1",
"7.0.114-0ubuntu1~22.04.1",
"7.0.115-0ubuntu1~22.04.1",
"7.0.116-0ubuntu1~22.04.1",
"7.0.117-0ubuntu1~22.04.1",
"7.0.117-0ubuntu1~22.04.2",
"7.0.119-0ubuntu1~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "aspnetcore-runtime-8.0",
"binary_version": "8.0.31-0ubuntu1~22.04.1"
},
{
"binary_name": "aspnetcore-runtime-dbg-8.0",
"binary_version": "8.0.31-0ubuntu1~22.04.1"
},
{
"binary_name": "aspnetcore-targeting-pack-8.0",
"binary_version": "8.0.31-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-apphost-pack-8.0",
"binary_version": "8.0.31-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-host-8.0",
"binary_version": "8.0.31-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-hostfxr-8.0",
"binary_version": "8.0.31-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-runtime-8.0",
"binary_version": "8.0.31-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-runtime-dbg-8.0",
"binary_version": "8.0.31-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-sdk-8.0",
"binary_version": "8.0.131-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-sdk-8.0-source-built-artifacts",
"binary_version": "8.0.131-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-sdk-dbg-8.0",
"binary_version": "8.0.131-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-targeting-pack-8.0",
"binary_version": "8.0.31-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-templates-8.0",
"binary_version": "8.0.131-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet8",
"binary_version": "8.0.131-8.0.31-0ubuntu1~22.04.1"
},
{
"binary_name": "netstandard-targeting-pack-2.1-8.0",
"binary_version": "8.0.131-0ubuntu1~22.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "dotnet8",
"purl": "pkg:deb/ubuntu/dotnet8@8.0.131-8.0.31-0ubuntu1~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8.0.102-8.0.2-0ubuntu1~22.04.1",
"8.0.103-8.0.3-0ubuntu1~22.04.1",
"8.0.103-8.0.3-0ubuntu1~22.04.2",
"8.0.105-8.0.5-0ubuntu1~22.04.1",
"8.0.107-8.0.7-0ubuntu1~22.04.1",
"8.0.108-8.0.8-0ubuntu1~22.04.1",
"8.0.110-8.0.10-0ubuntu1~22.04.1",
"8.0.111-8.0.11-0ubuntu1~22.04.1",
"8.0.112-8.0.12-0ubuntu1~22.04.1",
"8.0.114-8.0.14-0ubuntu1~22.04.1",
"8.0.115-8.0.15-0ubuntu1~22.04.1",
"8.0.116-8.0.16-0ubuntu1~22.04.1",
"8.0.117-8.0.17-0ubuntu1~22.04.1",
"8.0.118-8.0.18-0ubuntu1~22.04.1",
"8.0.119-8.0.19-0ubuntu1~22.04.1",
"8.0.120-8.0.20-0ubuntu1~22.04.1",
"8.0.121-8.0.21-0ubuntu1~22.04.1",
"8.0.122-8.0.22-0ubuntu1~22.04.1",
"8.0.123-8.0.23-0ubuntu1~22.04.1",
"8.0.124-8.0.24-0ubuntu1~22.04.1",
"8.0.125-8.0.25-0ubuntu1~22.04.1",
"8.0.126-8.0.26-0ubuntu1~22.04.1",
"8.0.127-8.0.27-0ubuntu1~22.04.1",
"8.0.128-8.0.28-0ubuntu1~22.04.1",
"8.0.129-8.0.29-0ubuntu1~22.04.1",
"8.0.130-8.0.30-0ubuntu1~22.04.1",
"8.0.131-8.0.31-0ubuntu1~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "aspnetcore-runtime-10.0",
"binary_version": "10.0.12-0ubuntu1~24.04.1"
},
{
"binary_name": "aspnetcore-runtime-dbg-10.0",
"binary_version": "10.0.12-0ubuntu1~24.04.1"
},
{
"binary_name": "aspnetcore-targeting-pack-10.0",
"binary_version": "10.0.12-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-apphost-pack-10.0",
"binary_version": "10.0.12-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-host-10.0",
"binary_version": "10.0.12-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-hostfxr-10.0",
"binary_version": "10.0.12-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-runtime-10.0",
"binary_version": "10.0.12-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-runtime-dbg-10.0",
"binary_version": "10.0.12-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-sdk-10.0",
"binary_version": "10.0.112-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-sdk-10.0-source-built-artifacts",
"binary_version": "10.0.112-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-sdk-aot-10.0",
"binary_version": "10.0.112-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-sdk-dbg-10.0",
"binary_version": "10.0.112-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-targeting-pack-10.0",
"binary_version": "10.0.12-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-templates-10.0",
"binary_version": "10.0.112-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet10",
"binary_version": "10.0.112-10.0.12-0ubuntu1~24.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "dotnet10",
"purl": "pkg:deb/ubuntu/dotnet10@10.0.112-10.0.12-0ubuntu1~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.100-10.0.0-0ubuntu1~24.04.1",
"10.0.101-10.0.1-0ubuntu1~24.04.2",
"10.0.103-10.0.3-0ubuntu1~24.04.1",
"10.0.104-10.0.4-0ubuntu1~24.04.1",
"10.0.105-10.0.5-0ubuntu1~24.04.1",
"10.0.106-10.0.6-0ubuntu1~24.04.1",
"10.0.107-10.0.7-0ubuntu1~24.04.1",
"10.0.108-10.0.8-0ubuntu1~24.04.1",
"10.0.109-10.0.9-0ubuntu1~24.04.1",
"10.0.110-10.0.10-0ubuntu1~24.04.1",
"10.0.111-10.0.11-0ubuntu1~24.04.1",
"10.0.112-10.0.12-0ubuntu1~24.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "aspnetcore-runtime-8.0",
"binary_version": "8.0.31-0ubuntu1~24.04.1"
},
{
"binary_name": "aspnetcore-runtime-dbg-8.0",
"binary_version": "8.0.31-0ubuntu1~24.04.1"
},
{
"binary_name": "aspnetcore-targeting-pack-8.0",
"binary_version": "8.0.31-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-apphost-pack-8.0",
"binary_version": "8.0.31-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-host-8.0",
"binary_version": "8.0.31-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-hostfxr-8.0",
"binary_version": "8.0.31-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-runtime-8.0",
"binary_version": "8.0.31-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-runtime-dbg-8.0",
"binary_version": "8.0.31-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-sdk-8.0",
"binary_version": "8.0.131-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-sdk-8.0-source-built-artifacts",
"binary_version": "8.0.131-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-sdk-dbg-8.0",
"binary_version": "8.0.131-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-targeting-pack-8.0",
"binary_version": "8.0.31-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-templates-8.0",
"binary_version": "8.0.131-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet8",
"binary_version": "8.0.131-8.0.31-0ubuntu1~24.04.1"
},
{
"binary_name": "netstandard-targeting-pack-2.1-8.0",
"binary_version": "8.0.131-0ubuntu1~24.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "dotnet8",
"purl": "pkg:deb/ubuntu/dotnet8@8.0.131-8.0.31-0ubuntu1~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8.0.100-8.0.0~rc1-0ubuntu1",
"8.0.100-8.0.0~rc2-0ubuntu1",
"8.0.100-8.0.0~rc2-0ubuntu2",
"8.0.100-8.0.0-0ubuntu1",
"8.0.100-8.0.0-0ubuntu2",
"8.0.101-8.0.1-0ubuntu1",
"8.0.101-8.0.1-0ubuntu2",
"8.0.102-8.0.2-0ubuntu1",
"8.0.103-8.0.3-0ubuntu2",
"8.0.103-8.0.3-0ubuntu3",
"8.0.104-8.0.4-0ubuntu1",
"8.0.105-8.0.5-0ubuntu1~24.04.1",
"8.0.107-8.0.7-0ubuntu1~24.04.1",
"8.0.108-8.0.8-0ubuntu1~24.04.1",
"8.0.108-8.0.8-0ubuntu1~24.04.2",
"8.0.110-8.0.10-0ubuntu1~24.04.1",
"8.0.111-8.0.11-0ubuntu1~24.04.1",
"8.0.112-8.0.12-0ubuntu1~24.04.1",
"8.0.114-8.0.14-0ubuntu1~24.04.1",
"8.0.115-8.0.15-0ubuntu1~24.04.1",
"8.0.116-8.0.16-0ubuntu1~24.04.1",
"8.0.117-8.0.17-0ubuntu1~24.04.1",
"8.0.118-8.0.18-0ubuntu1~24.04.1",
"8.0.119-8.0.19-0ubuntu1~24.04.1",
"8.0.120-8.0.20-0ubuntu1~24.04.1",
"8.0.121-8.0.21-0ubuntu1~24.04.1",
"8.0.122-8.0.22-0ubuntu1~24.04.1",
"8.0.123-8.0.23-0ubuntu1~24.04.1",
"8.0.124-8.0.24-0ubuntu1~24.04.1",
"8.0.125-8.0.25-0ubuntu1~24.04.1",
"8.0.126-8.0.26-0ubuntu1~24.04.1",
"8.0.127-8.0.27-0ubuntu1~24.04.1",
"8.0.128-8.0.28-0ubuntu1~24.04.1",
"8.0.129-8.0.29-0ubuntu1~24.04.1",
"8.0.130-8.0.30-0ubuntu1~24.04.1",
"8.0.131-8.0.31-0ubuntu1~24.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "aspnetcore-runtime-10.0",
"binary_version": "10.0.12-0ubuntu1~26.04.1"
},
{
"binary_name": "aspnetcore-runtime-dbg-10.0",
"binary_version": "10.0.12-0ubuntu1~26.04.1"
},
{
"binary_name": "aspnetcore-targeting-pack-10.0",
"binary_version": "10.0.12-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-apphost-pack-10.0",
"binary_version": "10.0.12-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-host-10.0",
"binary_version": "10.0.12-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-hostfxr-10.0",
"binary_version": "10.0.12-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-runtime-10.0",
"binary_version": "10.0.12-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-runtime-dbg-10.0",
"binary_version": "10.0.12-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-sdk-10.0",
"binary_version": "10.0.112-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-sdk-10.0-source-built-artifacts",
"binary_version": "10.0.112-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-sdk-aot-10.0",
"binary_version": "10.0.112-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-sdk-dbg-10.0",
"binary_version": "10.0.112-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-targeting-pack-10.0",
"binary_version": "10.0.12-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-templates-10.0",
"binary_version": "10.0.112-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet10",
"binary_version": "10.0.112-10.0.12-0ubuntu1~26.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "dotnet10",
"purl": "pkg:deb/ubuntu/dotnet10@10.0.112-10.0.12-0ubuntu1~26.04.1?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.100-10.0.0~rc1-0ubuntu1",
"10.0.100-10.0.0~rc2-0ubuntu1",
"10.0.100-10.0.0-0ubuntu1",
"10.0.100-10.0.0-0ubuntu2",
"10.0.101-10.0.1-0ubuntu1",
"10.0.101-10.0.1-0ubuntu2",
"10.0.101-10.0.1-0ubuntu3",
"10.0.102-10.0.2-0ubuntu1",
"10.0.103-10.0.3-0ubuntu1",
"10.0.104-10.0.4-0ubuntu1",
"10.0.105-10.0.5-0ubuntu1",
"10.0.107-10.0.7-0ubuntu1~26.04.1",
"10.0.108-10.0.8-0ubuntu1~26.04.1",
"10.0.109-10.0.9-0ubuntu1~26.04.1",
"10.0.110-10.0.10-0ubuntu1~26.04.1",
"10.0.111-10.0.11-0ubuntu1~26.04.1",
"10.0.112-10.0.12-0ubuntu1~26.04.1"
]
}
],
"aliases": [],
"details": "Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.",
"id": "UBUNTU-CVE-2026-58649",
"modified": "2026-09-10T09:00:55Z",
"published": "2026-09-08T00:00:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-58649"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58649"
},
{
"type": "REPORT",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58649"
},
{
"type": "REPORT",
"url": "https://github.com/dotnet/announcements/issues/441"
}
],
"related": [],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-58649"
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.