Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-77897 (GCVE-0-2026-77897)
Vulnerability from cvelistv5 – Published: 2026-09-08 17:19 – Updated: 2026-09-09 21:36
VLAI
EPSS
VEX
Title
Microsoft Power Automate Desktop Elevation of Privilege Vulnerability
Summary
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 16:15 UTC
CWE
- CWE-23 - Relative Path Traversal
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
2 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Microsoft | Power Automate agent for virtual desktops |
Affected:
1.0.0.0 , < 2.71.115.26224
(custom)
|
guessed | |
| Microsoft | Power Automate for Desktop |
Affected:
1.0.0.0 , < 2.71.115.26224
(custom)
|
guessed |
Date Public
2026-09-08 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-77897",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T16:15:09.806116Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:15:19.192Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Power Automate agent for virtual desktops",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "2.71.115.26224",
"status": "affected",
"version": "1.0.0.0",
"versionType": "custom"
}
]
},
{
"product": "Power Automate for Desktop",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "2.71.115.26224",
"status": "affected",
"version": "1.0.0.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:power_automate_for_desktop:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.71.115.26224",
"versionStartIncluding": "1.0.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:power_automate_agent_for_virtual_desktops:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.71.115.26224",
"versionStartIncluding": "1.0.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-09-08T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-23",
"description": "CWE-23: Relative Path Traversal",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T21:36:10.519Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft Power Automate Desktop Elevation of Privilege Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77897"
}
],
"title": "Microsoft Power Automate Desktop Elevation of Privilege Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-77897",
"datePublished": "2026-09-08T17:19:11.971Z",
"dateReserved": "2026-08-21T17:26:55.612Z",
"dateUpdated": "2026-09-09T21:36:10.519Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-77897",
"date": "2026-09-10",
"epss": "0.0027",
"percentile": "0.19048"
},
"microsoft_vex": {
"current_release_date": "2026-09-08T07:00:00.000Z",
"cve": "CVE-2026-77897",
"id": "msrc_CVE-2026-77897",
"initial_release_date": "2026-09-08T07:00:00.000Z",
"product_status:fixed": "2",
"product_status:known_affected": "2",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "Microsoft Power Automate Desktop Elevation of Privilege Vulnerability",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-77897.json",
"version": "1"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-77897\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2026-09-08T18:20:39.850\",\"lastModified\":\"2026-09-09T17:17:42.117\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.\"}],\"affected\":[{\"source\":\"secure@microsoft.com\",\"affectedData\":[{\"vendor\":\"Microsoft\",\"product\":\"Power Automate agent for virtual desktops\",\"versions\":[{\"version\":\"1.0.0.0\",\"lessThan\":\"2.71.115.26224\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Power Automate for Desktop\",\"versions\":[{\"version\":\"1.0.0.0\",\"lessThan\":\"2.71.115.26224\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.0,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.0,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-09-09T16:15:09.806116Z\",\"id\":\"CVE-2026-77897\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-23\"}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77897\",\"source\":\"secure@microsoft.com\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-77897\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-09-09T16:15:09.806116Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-09-09T16:15:15.582Z\"}}], \"cna\": {\"title\": \"Microsoft Power Automate Desktop Elevation of Privilege Vulnerability\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Microsoft\", \"product\": \"Power Automate agent for virtual desktops\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.0.0.0\", \"lessThan\": \"2.71.115.26224\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Power Automate for Desktop\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.0.0.0\", \"lessThan\": \"2.71.115.26224\", \"versionType\": \"custom\"}]}], \"datePublic\": \"2026-09-08T14:00:00.000Z\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77897\", \"name\": \"Microsoft Power Automate Desktop Elevation of Privilege Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"]}], \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-23\", \"description\": \"CWE-23: Relative Path Traversal\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:power_automate_for_desktop:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"2.71.115.26224\", \"versionStartIncluding\": \"1.0.0.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:power_automate_agent_for_virtual_desktops:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"2.71.115.26224\", \"versionStartIncluding\": \"1.0.0.0\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\", \"dateUpdated\": \"2026-09-09T21:36:10.519Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-77897\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-09T21:36:10.519Z\", \"dateReserved\": \"2026-08-21T17:26:55.612Z\", \"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"datePublished\": \"2026-09-08T17:19:11.971Z\", \"assignerShortName\": \"microsoft\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
CERTFR-2026-AVI-1149
Vulnerability from certfr_avis - Published: 2026-09-09 - Updated: 2026-09-09
De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | N/A | Microsoft SQL Server 2025 pour systèmes x64 (CU8) versions antérieures à 17.0.4085.5 | ||
| Microsoft | N/A | Microsoft Exchange Server 2019 Cumulative Update 14 versions antérieures à 15.02.1544.046 | ||
| Microsoft | N/A | SQL Server Management Studio 22 versions antérieures à 22.8.2 | ||
| Microsoft | N/A | Microsoft Exchange Server 2019 Cumulative Update 15 versions antérieures à 15.02.1748.051 | ||
| Microsoft | N/A | Microsoft.AspNetCore.OData versions antérieures à 7.8.1 | ||
| Microsoft | N/A | Microsoft Visual Studio 2022 version 17.14 antérieures à 17.14.40 | ||
| Microsoft | N/A | Web Media Extensions versions antérieures à 1.2.42.0 | ||
| Microsoft | N/A | Raw Image Extension versions antérieures à 2.4.24.0 | ||
| Microsoft | N/A | Microsoft SQL Server 2022 pour systèmes x64 (GDR) versions antérieures à 16.0.1200.5 | ||
| Microsoft | N/A | Power Automate agent pour virtual desktops versions antérieures à 2.71.115.26224 | ||
| Microsoft | N/A | HEVC Video Extensions from Device Manufacturer versions antérieures à 2.5.25.0 | ||
| Microsoft | N/A | Microsoft SQL Server 2025 pour systèmes x64 (GDR) versions antérieures à 17.0.1135.8 | ||
| Microsoft | N/A | Microsoft SQL Server 2017 pour systèmes x64 (GDR) versions antérieures à 14.0.2130.4 | ||
| Microsoft | N/A | Microsoft.Diagnostics.Runtime versions antérieures à 4.1.740301 | ||
| Microsoft | N/A | Microsoft Visual Studio 2026 version 18.9 antérieures à 18.9.3 | ||
| Microsoft | N/A | Power Automate pour Desktop versions antérieures à 2.71.115.26224 | ||
| Microsoft | N/A | Microsoft Exchange Server Subscription Edition RTM versions antérieures à 15.02.2562.049 | ||
| Microsoft | N/A | Microsoft SQL Server 2017 pour systèmes x64 (CU 31) versions antérieures à 14.0.3550.4 | ||
| Microsoft | N/A | Microsoft Authentication Library (MSAL) pour Node.js versions antérieures à 5.6.0 | ||
| Microsoft | N/A | Microsoft SQL Server 2019 pour systèmes x64 (CU 32) versions antérieures à 15.0.4490.9 | ||
| Microsoft | N/A | Skype pour Business Server Subscription Edition CU1 versions antérieures à 7.0.2046.879 | ||
| Microsoft | N/A | HEVC Video Extensions pour Licensed Applications versions antérieures à 2.4.85.0 | ||
| Microsoft | N/A | HEIF Image Extension versions antérieures à 1.2.48.0 | ||
| Microsoft | N/A | Xbox Gaming Services versions antérieures à 37.114.10001.0 | ||
| Microsoft | N/A | Raw Image Extension versions antérieures à 2.5.24.0 | ||
| Microsoft | N/A | Microsoft SQL Server 2019 pour systèmes x64 (GDR) versions antérieures à 15.0.2190.7 | ||
| Microsoft | N/A | Microsoft Teams pour Android versions antérieures à 1416/1.0.0.2026133602 | ||
| Microsoft | N/A | Visual Studio Code versions antérieures à 1.136.2 | ||
| Microsoft | N/A | Microsoft Dynamics 365 Customer Engagement V9.1 versions antérieures à 9.1.0048.0004 | ||
| Microsoft | N/A | Microsoft Exchange Server 2016 Cumulative Update 23 versions antérieures à 15.01.2507.073 | ||
| Microsoft | N/A | Microsoft Authenticator pour Android versions antérieures à 16.3.0 | ||
| Microsoft | N/A | Microsoft SQL Server 2022 pour systèmes x64 (CU 26) versions antérieures à 16.0.4275.2 | ||
| Microsoft | N/A | HEVC Video Extensions versions antérieures à 2.4.87.0 | ||
| Microsoft | N/A | Skype pour Business Server 2019 CU8 versions antérieures à 7.0.2046.569 | ||
| Microsoft | N/A | Microsoft Dynamics 365 (on-premises) version 9.1 antérieures à 9.1.0046.0006 | ||
| Microsoft | N/A | WebP Image Extension versions antérieures à 1.2.31.0 | ||
| Microsoft | N/A | Skype pour Business Server 2015 CU13 versions antérieures à 6.0.9319.885 | ||
| Microsoft | N/A | Microsoft SharePoint Server Subscription Edition versions antérieures à 16.0.20326.20094 | ||
| Microsoft | N/A | HEVC Video Extensions from Device Manufacturer versions antérieures à 2.4.86.0 | ||
| Microsoft | N/A | Web Media Extensions versions antérieures à 2.1.51.0 | ||
| Microsoft | N/A | Microsoft Teams pour Android versions antérieures à 1416/1.0.0.2026142702 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft SQL Server 2025 pour syst\u00e8mes x64 (CU8) versions ant\u00e9rieures \u00e0 17.0.4085.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server 2019 Cumulative Update 14 versions ant\u00e9rieures \u00e0 15.02.1544.046",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "SQL Server Management Studio 22 versions ant\u00e9rieures \u00e0 22.8.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server 2019 Cumulative Update 15 versions ant\u00e9rieures \u00e0 15.02.1748.051",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.OData versions ant\u00e9rieures \u00e0 7.8.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2022 version 17.14 ant\u00e9rieures \u00e0 17.14.40",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Web Media Extensions versions ant\u00e9rieures \u00e0 1.2.42.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Raw Image Extension versions ant\u00e9rieures \u00e0 2.4.24.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 16.0.1200.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Power Automate agent pour virtual desktops versions ant\u00e9rieures \u00e0 2.71.115.26224",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "HEVC Video Extensions from Device Manufacturer versions ant\u00e9rieures \u00e0 2.5.25.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2025 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 17.0.1135.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 14.0.2130.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.Diagnostics.Runtime versions ant\u00e9rieures \u00e0 4.1.740301",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2026 version 18.9 ant\u00e9rieures \u00e0 18.9.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Power Automate pour Desktop versions ant\u00e9rieures \u00e0 2.71.115.26224",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server Subscription Edition RTM versions ant\u00e9rieures \u00e0 15.02.2562.049",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (CU 31) versions ant\u00e9rieures \u00e0 14.0.3550.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Authentication Library (MSAL) pour Node.js versions ant\u00e9rieures \u00e0 5.6.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (CU 32) versions ant\u00e9rieures \u00e0 15.0.4490.9",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Skype pour Business Server Subscription Edition CU1 versions ant\u00e9rieures \u00e0 7.0.2046.879",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "HEVC Video Extensions pour Licensed Applications versions ant\u00e9rieures \u00e0 2.4.85.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "HEIF Image Extension versions ant\u00e9rieures \u00e0 1.2.48.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Xbox Gaming Services versions ant\u00e9rieures \u00e0 37.114.10001.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Raw Image Extension versions ant\u00e9rieures \u00e0 2.5.24.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 15.0.2190.7",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Teams pour Android versions ant\u00e9rieures \u00e0 1416/1.0.0.2026133602",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Visual Studio Code versions ant\u00e9rieures \u00e0 1.136.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Dynamics 365 Customer Engagement V9.1 versions ant\u00e9rieures \u00e0 9.1.0048.0004",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server 2016 Cumulative Update 23 versions ant\u00e9rieures \u00e0 15.01.2507.073",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Authenticator pour Android versions ant\u00e9rieures \u00e0 16.3.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (CU 26) versions ant\u00e9rieures \u00e0 16.0.4275.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "HEVC Video Extensions versions ant\u00e9rieures \u00e0 2.4.87.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Skype pour Business Server 2019 CU8 versions ant\u00e9rieures \u00e0 7.0.2046.569",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Dynamics 365 (on-premises) version 9.1 ant\u00e9rieures \u00e0 9.1.0046.0006",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "WebP Image Extension versions ant\u00e9rieures \u00e0 1.2.31.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Skype pour Business Server 2015 CU13 versions ant\u00e9rieures \u00e0 6.0.9319.885",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Server Subscription Edition versions ant\u00e9rieures \u00e0 16.0.20326.20094",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "HEVC Video Extensions from Device Manufacturer versions ant\u00e9rieures \u00e0 2.4.86.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Web Media Extensions versions ant\u00e9rieures \u00e0 2.1.51.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Teams pour Android versions ant\u00e9rieures \u00e0 1416/1.0.0.2026142702",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-69268",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69268"
},
{
"name": "CVE-2026-69356",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69356"
},
{
"name": "CVE-2026-77487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77487"
},
{
"name": "CVE-2026-68775",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68775"
},
{
"name": "CVE-2026-63523",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63523"
},
{
"name": "CVE-2026-67379",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67379"
},
{
"name": "CVE-2026-78456",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78456"
},
{
"name": "CVE-2026-77485",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77485"
},
{
"name": "CVE-2026-69375",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69375"
},
{
"name": "CVE-2026-69636",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69636"
},
{
"name": "CVE-2026-58599",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58599"
},
{
"name": "CVE-2026-69904",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69904"
},
{
"name": "CVE-2026-84003",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84003"
},
{
"name": "CVE-2026-67373",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67373"
},
{
"name": "CVE-2026-78442",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78442"
},
{
"name": "CVE-2026-81357",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81357"
},
{
"name": "CVE-2026-81353",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81353"
},
{
"name": "CVE-2026-67376",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67376"
},
{
"name": "CVE-2026-77486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77486"
},
{
"name": "CVE-2026-69642",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69642"
},
{
"name": "CVE-2026-81356",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81356"
},
{
"name": "CVE-2026-58600",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58600"
},
{
"name": "CVE-2026-67643",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67643"
},
{
"name": "CVE-2026-77481",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77481"
},
{
"name": "CVE-2026-71328",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71328"
},
{
"name": "CVE-2026-66814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66814"
},
{
"name": "CVE-2026-77908",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77908"
},
{
"name": "CVE-2026-67629",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67629"
},
{
"name": "CVE-2026-67390",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67390"
},
{
"name": "CVE-2026-67641",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67641"
},
{
"name": "CVE-2026-55007",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55007"
},
{
"name": "CVE-2026-69464",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69464"
},
{
"name": "CVE-2026-67380",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67380"
},
{
"name": "CVE-2026-68780",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68780"
},
{
"name": "CVE-2026-69559",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69559"
},
{
"name": "CVE-2026-67648",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67648"
},
{
"name": "CVE-2026-66306",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66306"
},
{
"name": "CVE-2026-81381",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81381"
},
{
"name": "CVE-2026-77488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77488"
},
{
"name": "CVE-2026-81377",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81377"
},
{
"name": "CVE-2026-81352",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81352"
},
{
"name": "CVE-2026-67383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67383"
},
{
"name": "CVE-2026-67388",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67388"
},
{
"name": "CVE-2026-81380",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81380"
},
{
"name": "CVE-2026-66302",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66302"
},
{
"name": "CVE-2026-73029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73029"
},
{
"name": "CVE-2026-65812",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65812"
},
{
"name": "CVE-2026-70334",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70334"
},
{
"name": "CVE-2026-69282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69282"
},
{
"name": "CVE-2026-67384",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67384"
},
{
"name": "CVE-2026-80097",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-80097"
},
{
"name": "CVE-2026-66820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66820"
},
{
"name": "CVE-2026-67389",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67389"
},
{
"name": "CVE-2026-68787",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68787"
},
{
"name": "CVE-2026-67633",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67633"
},
{
"name": "CVE-2026-65772",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65772"
},
{
"name": "CVE-2026-68777",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68777"
},
{
"name": "CVE-2026-77480",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77480"
},
{
"name": "CVE-2026-70351",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70351"
},
{
"name": "CVE-2026-68778",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68778"
},
{
"name": "CVE-2026-78462",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78462"
},
{
"name": "CVE-2026-69806",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69806"
},
{
"name": "CVE-2026-68776",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68776"
},
{
"name": "CVE-2026-69522",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69522"
},
{
"name": "CVE-2026-57099",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57099"
},
{
"name": "CVE-2026-69465",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69465"
},
{
"name": "CVE-2026-68785",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68785"
},
{
"name": "CVE-2026-77484",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77484"
},
{
"name": "CVE-2026-66305",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66305"
},
{
"name": "CVE-2026-67631",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67631"
},
{
"name": "CVE-2026-67381",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67381"
},
{
"name": "CVE-2026-81383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81383"
},
{
"name": "CVE-2026-69378",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69378"
},
{
"name": "CVE-2026-66303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66303"
},
{
"name": "CVE-2026-67639",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67639"
},
{
"name": "CVE-2026-77906",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77906"
},
{
"name": "CVE-2026-67369",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67369"
},
{
"name": "CVE-2026-67636",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67636"
},
{
"name": "CVE-2026-66304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66304"
},
{
"name": "CVE-2026-66818",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66818"
},
{
"name": "CVE-2026-69439",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69439"
},
{
"name": "CVE-2026-69683",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69683"
},
{
"name": "CVE-2026-69804",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69804"
},
{
"name": "CVE-2026-67385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67385"
},
{
"name": "CVE-2026-69380",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69380"
},
{
"name": "CVE-2026-81376",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81376"
},
{
"name": "CVE-2026-81378",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81378"
},
{
"name": "CVE-2026-77907",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77907"
},
{
"name": "CVE-2026-69724",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69724"
},
{
"name": "CVE-2026-67624",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67624"
},
{
"name": "CVE-2026-58611",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58611"
},
{
"name": "CVE-2026-66816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66816"
},
{
"name": "CVE-2026-77482",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77482"
},
{
"name": "CVE-2026-67378",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67378"
},
{
"name": "CVE-2026-68779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68779"
},
{
"name": "CVE-2026-69690",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69690"
},
{
"name": "CVE-2026-69805",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69805"
},
{
"name": "CVE-2026-69402",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69402"
},
{
"name": "CVE-2026-66819",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66819"
},
{
"name": "CVE-2026-69716",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69716"
},
{
"name": "CVE-2026-66307",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66307"
},
{
"name": "CVE-2026-67386",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67386"
},
{
"name": "CVE-2026-69361",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69361"
},
{
"name": "CVE-2026-47297",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47297"
},
{
"name": "CVE-2026-67645",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67645"
},
{
"name": "CVE-2026-81379",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81379"
},
{
"name": "CVE-2026-65669",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65669"
},
{
"name": "CVE-2026-78461",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78461"
},
{
"name": "CVE-2026-67370",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67370"
},
{
"name": "CVE-2026-69649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69649"
},
{
"name": "CVE-2026-68786",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68786"
},
{
"name": "CVE-2026-77897",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77897"
},
{
"name": "CVE-2026-66308",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66308"
},
{
"name": "CVE-2026-68781",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68781"
},
{
"name": "CVE-2026-69382",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69382"
},
{
"name": "CVE-2026-69562",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69562"
},
{
"name": "CVE-2026-69641",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69641"
},
{
"name": "CVE-2026-67630",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67630"
},
{
"name": "CVE-2026-58649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58649"
},
{
"name": "CVE-2026-67393",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67393"
},
{
"name": "CVE-2026-69646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69646"
},
{
"name": "CVE-2026-69417",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69417"
},
{
"name": "CVE-2026-69409",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69409"
},
{
"name": "CVE-2026-68784",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68784"
},
{
"name": "CVE-2026-69615",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69615"
},
{
"name": "CVE-2026-69304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69304"
},
{
"name": "CVE-2026-78441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78441"
},
{
"name": "CVE-2026-69355",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69355"
},
{
"name": "CVE-2026-73028",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73028"
},
{
"name": "CVE-2026-69273",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69273"
},
{
"name": "CVE-2026-67638",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67638"
},
{
"name": "CVE-2026-67368",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67368"
},
{
"name": "CVE-2026-67642",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67642"
},
{
"name": "CVE-2026-77483",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77483"
}
],
"initial_release_date": "2026-09-09T00:00:00",
"last_revision_date": "2026-09-09T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1149",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-09-09T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Microsoft. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
"vendor_advisories": [
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77482",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77482"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67388",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67388"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69562",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69562"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69642",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69642"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-78442",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78442"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67379",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67379"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69439",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69439"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-63523",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63523"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69522",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69522"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67370",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67370"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67648",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67648"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47297",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47297"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66818",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66818"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67642",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67642"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67624",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67624"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77488",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77488"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81357",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81357"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66308",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66308"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69361",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69361"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69409",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69409"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-73028",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73028"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-78441",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78441"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70351",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70351"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77484",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77484"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81380",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81380"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-78456",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78456"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81383",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81383"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69355",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69355"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69636",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69636"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69615",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69615"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69806",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69806"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81378",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81378"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69380",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69380"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68776",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68776"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-65812",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65812"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67629",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67629"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66305",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66305"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66819",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66819"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67376",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67376"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69282",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69282"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58611",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58611"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68775",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68775"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-70334",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70334"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67373",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67373"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66303",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66303"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77897",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77897"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67641",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67641"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69465",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69465"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68786",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68786"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67390",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67390"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67368",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67368"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67386",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67386"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68778",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68778"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69641",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69641"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67638",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67638"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-78461",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78461"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81377",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81377"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66814",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66814"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67380",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67380"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81352",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81352"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77483",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77483"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68780",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68780"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77906",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77906"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69382",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69382"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66816",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66816"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69716",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69716"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67393",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67393"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69649",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69649"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67383",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67383"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69904",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69904"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69559",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69559"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66820",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66820"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77481",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77481"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69804",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69804"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69268",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69268"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-65669",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65669"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69805",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69805"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55007",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55007"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67645",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67645"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81376",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81376"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81353",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81353"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-80097",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80097"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77907",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77907"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69375",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69375"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58599",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58599"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67384",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67384"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66306",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66306"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68781",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68781"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77480",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77480"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67643",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67643"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-84003",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84003"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-78462",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78462"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68787",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68787"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67381",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67381"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77486",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77486"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67631",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67631"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66302",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66302"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68784",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68784"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69646",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69646"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67369",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67369"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67636",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67636"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58600",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58600"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69464",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69464"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69683",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69683"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67639",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67639"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77487",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77487"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67385",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67385"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69273",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69273"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58649",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58649"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-57099",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57099"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81356",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81356"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-65772",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65772"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-71328",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71328"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67633",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67633"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-73029",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73029"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69378",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69378"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66304",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66304"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81381",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81381"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69402",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69402"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68785",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68785"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69356",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69356"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-66307",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66307"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-81379",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81379"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77485",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77485"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67630",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67630"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69724",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69724"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68777",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68777"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69690",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69690"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-77908",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77908"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69304",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69304"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-68779",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68779"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67378",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67378"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-69417",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69417"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-67389",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67389"
}
]
}
FKIE_CVE-2026-77897
Vulnerability from fkie_nvd - Published: 2026-09-08 18:20 - Updated: 2026-09-09 17:17
Severity
Summary
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.
References
Impacted products
| Vendor | Product | Version |
|---|
{
"affected": [
{
"affectedData": [
{
"product": "Power Automate agent for virtual desktops",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "2.71.115.26224",
"status": "affected",
"version": "1.0.0.0",
"versionType": "custom"
}
]
},
{
"product": "Power Automate for Desktop",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "2.71.115.26224",
"status": "affected",
"version": "1.0.0.0",
"versionType": "custom"
}
]
}
],
"source": "secure@microsoft.com"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally."
}
],
"id": "CVE-2026-77897",
"lastModified": "2026-09-09T17:17:42.117",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9,
"source": "secure@microsoft.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-77897",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T16:15:09.806116Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-09-08T18:20:39.850",
"references": [
{
"source": "secure@microsoft.com",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77897"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-23"
}
],
"source": "secure@microsoft.com",
"type": "Secondary"
}
]
}
GHSA-WF4R-6FVQ-98C6
Vulnerability from github – Published: 2026-09-08 18:33 – Updated: 2026-09-08 18:33
VLAI
Details
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.
Severity
7.0 (High)
{
"affected": [],
"aliases": [
"CVE-2026-77897"
],
"database_specific": {
"cwe_ids": [
"CWE-23"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-09-08T18:20:39Z",
"severity": "HIGH"
},
"details": "Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.",
"id": "GHSA-wf4r-6fvq-98c6",
"modified": "2026-09-08T18:33:22Z",
"published": "2026-09-08T18:33:22Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77897"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77897"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
NCSC-2026-0348
Vulnerability from csaf_ncscnl - Published: 2026-09-08 18:44 - Updated: 2026-09-08 18:44Summary
Kwetsbaarheden verholpen in Microsoft Dynamics
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Microsoft heeft 2 kwetsbaarheden verholpen in Dynamics, zowel online als on-premise.
Interpretaties: De kwetsbaarheden stellen een kwaadwillende in staat om zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en/of toegang te krijgen tot gevoelige gegevens.
```
Microsoft Dynamics 365:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-65772 | 8,80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Power Automate:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-77897 | 7,00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
```
Oplossingen: Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:
https://portal.msrc.microsoft.com/en-us/security-guidance
Kans: medium
Schade: high
CWE-23: Relative Path Traversal
CWE-502: Deserialization of Untrusted Data
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / Microsoft Dynamics 365 (on-premises) version 9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Power Automate agent for virtual desktops
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Power Automate for Desktop
|
vers:unknown/* |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / Microsoft Dynamics 365 (on-premises) version 9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Power Automate agent for virtual desktops
|
vers:unknown/* | ||
|
vers:unknown/*
Microsoft / Power Automate for Desktop
|
vers:unknown/* |
References
3 references
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Microsoft heeft 2 kwetsbaarheden verholpen in Dynamics, zowel online als on-premise.",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden stellen een kwaadwillende in staat om zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en/of toegang te krijgen tot gevoelige gegevens.\n\n```\nMicrosoft Dynamics 365: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-65772 | 8,80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nPower Automate: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-77897 | 7,00 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\n```",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:\n\nhttps://portal.msrc.microsoft.com/en-us/security-guidance",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Relative Path Traversal",
"title": "CWE-23"
},
{
"category": "general",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://portal.msrc.microsoft.com/en-us/security-guidance"
}
],
"title": "Kwetsbaarheden verholpen in Microsoft Dynamics",
"tracking": {
"current_release_date": "2026-09-08T18:44:10.138549Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.3"
}
},
"id": "NCSC-2026-0348",
"initial_release_date": "2026-09-08T18:44:10.138549Z",
"revision_history": [
{
"date": "2026-09-08T18:44:10.138549Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1"
}
}
],
"category": "product_name",
"name": "Microsoft Dynamics 365 (on-premises) version 9.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-2"
}
}
],
"category": "product_name",
"name": "Power Automate agent for virtual desktops"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-3"
}
}
],
"category": "product_name",
"name": "Power Automate for Desktop"
}
],
"category": "vendor",
"name": "Microsoft"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-65772",
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65772 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65772.json"
}
],
"title": "CVE-2026-65772"
},
{
"cve": "CVE-2026-77897",
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-77897 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-77897.json"
}
],
"title": "CVE-2026-77897"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…