{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft.AspNet.OData versions ant\u00e9rieures \u00e0 7.8.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Copilot",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Surface Laptop 4 with Intel Processor",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (CU 31) versions ant\u00e9rieures \u00e0 14.0.3540.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Visual Studio Code versions ant\u00e9rieures \u00e0 1.128.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 14.0.2120.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Dynamics NAV 2018 versions ant\u00e9rieures \u00e0 11.0.50704.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Surface Laptop Go 3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SharePoint Server 2019 versions ant\u00e9rieures \u00e0 16.0.10417.20153",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Configuration Manager 2509 versions ant\u00e9rieures \u00e0 2509",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SharePoint Server 2019 versions ant\u00e9rieures \u00e0 16.0.10417.20175",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SharePoint Server Subscription Edition versions ant\u00e9rieures \u00e0 16.0.19725.20434",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Surface Pro 7+",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Exchange Server 2019 Cumulative Update 15 versions ant\u00e9rieures \u00e0 15.02.1748.048",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SharePoint Enterprise Server 2016 versions ant\u00e9rieures \u00e0 16.0.5561.1001",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Surface Laptop 4 with AMD Processor",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Power BI Report Server versions ant\u00e9rieures \u00e0 15.0.1121.120",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2026 version 18.7 ant\u00e9rieures \u00e0 18.7.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2022 version 17.14 ant\u00e9rieures \u00e0 17.14.36",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SharePoint Enterprise Server 2016 versions ant\u00e9rieures \u00e0 16.0.5556.1005",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Fabric Data Warehouse versions ant\u00e9rieures \u00e0 8.0.206.113",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Configuration Manager 2503 versions ant\u00e9rieures \u00e0 2503",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (CU 32) versions ant\u00e9rieures \u00e0 15.0.4480.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Malware Protection Engine versions ant\u00e9rieures \u00e0 1.1.26060.3008",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Bing Search pour iOS versions ant\u00e9rieures \u00e0 33.4.440529002",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 16.0.1190.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Surface Hub 3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2016 pour syst\u00e8mes x64 Service Pack 3 Azure Connect Feature Pack versions ant\u00e9rieures \u00e0 13.0.7095.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Surface Go 2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Surface Hub",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft PC Manager versions ant\u00e9rieures \u00e0 3.21.6.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Surface Go 3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Configuration Manager 2603 versions ant\u00e9rieures \u00e0 2603",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft.AspNetCore.OData versions ant\u00e9rieures \u00e0 9.5.0[SX1]",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SharePoint Server Subscription Edition versions ant\u00e9rieures \u00e0 16.0.19725.20384",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Surface Hub 2S",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "GitHub Copilot Plugin pour JetBrains IDEs versions ant\u00e9rieures \u00e0 1.13.0-251",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2016 pour syst\u00e8mes x64 Service Pack 3 (GDR) versions ant\u00e9rieures \u00e0 13.0.6500.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Exchange Server 2019 Cumulative Update 14 versions ant\u00e9rieures \u00e0 15.02.1544.043",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Surface Pro 8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (CU 25) versions ant\u00e9rieures \u00e0 16.0.4262.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft PC Manager versions ant\u00e9rieures \u00e0 3.22.1.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Surface Laptop Go",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Defender pour Endpoint pour Mac versions ant\u00e9rieures \u00e0 101.26042.0020",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2022 version 17.12 ant\u00e9rieures \u00e0 17.12.22",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 15.0.2180.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Exchange Server 2016 Cumulative Update 23 versions ant\u00e9rieures \u00e0 15.01.2507.071",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2025 pour syst\u00e8mes x64 (CU6) versions ant\u00e9rieures \u00e0 17.0.4060.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Surface Laptop Go 2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2025 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 17.0.1125.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Age of Empires II: Definitive Edition Game versions ant\u00e9rieures \u00e0 101.103.46651.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Exchange Server Subscription Edition RTM versions ant\u00e9rieures \u00e0 15.02.2562.045",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-55030",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55030"
    },
    {
      "name": "CVE-2026-55134",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55134"
    },
    {
      "name": "CVE-2026-55020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55020"
    },
    {
      "name": "CVE-2026-45646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45646"
    },
    {
      "name": "CVE-2026-50657",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50657"
    },
    {
      "name": "CVE-2026-50524",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50524"
    },
    {
      "name": "CVE-2026-55130",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55130"
    },
    {
      "name": "CVE-2026-55142",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55142"
    },
    {
      "name": "CVE-2026-55944",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55944"
    },
    {
      "name": "CVE-2026-55002",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55002"
    },
    {
      "name": "CVE-2026-50522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50522"
    },
    {
      "name": "CVE-2026-55009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55009"
    },
    {
      "name": "CVE-2026-57101",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57101"
    },
    {
      "name": "CVE-2026-56642",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56642"
    },
    {
      "name": "CVE-2026-56178",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56178"
    },
    {
      "name": "CVE-2026-55033",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55033"
    },
    {
      "name": "CVE-2026-56157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56157"
    },
    {
      "name": "CVE-2026-55026",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55026"
    },
    {
      "name": "CVE-2026-50510",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50510"
    },
    {
      "name": "CVE-2026-55038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55038"
    },
    {
      "name": "CVE-2026-47282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47282"
    },
    {
      "name": "CVE-2026-50526",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50526"
    },
    {
      "name": "CVE-2026-55021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55021"
    },
    {
      "name": "CVE-2026-45496",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45496"
    },
    {
      "name": "CVE-2026-55055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55055"
    },
    {
      "name": "CVE-2026-55028",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55028"
    },
    {
      "name": "CVE-2026-55045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55045"
    },
    {
      "name": "CVE-2026-55051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55051"
    },
    {
      "name": "CVE-2026-55135",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55135"
    },
    {
      "name": "CVE-2026-55035",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55035"
    },
    {
      "name": "CVE-2026-55008",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55008"
    },
    {
      "name": "CVE-2026-55019",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55019"
    },
    {
      "name": "CVE-2026-47305",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47305"
    },
    {
      "name": "CVE-2026-55016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55016"
    },
    {
      "name": "CVE-2026-58595",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58595"
    },
    {
      "name": "CVE-2026-47303",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47303"
    },
    {
      "name": "CVE-2026-47295",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47295"
    },
    {
      "name": "CVE-2026-50468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50468"
    },
    {
      "name": "CVE-2026-50663",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50663"
    },
    {
      "name": "CVE-2026-55047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55047"
    },
    {
      "name": "CVE-2026-55011",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55011"
    },
    {
      "name": "CVE-2026-55052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55052"
    },
    {
      "name": "CVE-2026-50650",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50650"
    },
    {
      "name": "CVE-2026-55128",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55128"
    },
    {
      "name": "CVE-2026-55145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55145"
    },
    {
      "name": "CVE-2026-55006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55006"
    },
    {
      "name": "CVE-2026-55012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55012"
    },
    {
      "name": "CVE-2026-47296",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47296"
    },
    {
      "name": "CVE-2026-57102",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57102"
    },
    {
      "name": "CVE-2026-47304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47304"
    },
    {
      "name": "CVE-2026-50527",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50527"
    },
    {
      "name": "CVE-2026-55027",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55027"
    },
    {
      "name": "CVE-2026-55032",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55032"
    },
    {
      "name": "CVE-2026-55126",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55126"
    },
    {
      "name": "CVE-2026-58647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58647"
    },
    {
      "name": "CVE-2026-55050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55050"
    },
    {
      "name": "CVE-2026-56164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56164"
    },
    {
      "name": "CVE-2026-50506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50506"
    },
    {
      "name": "CVE-2026-50525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50525"
    },
    {
      "name": "CVE-2026-48581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48581"
    },
    {
      "name": "CVE-2026-55034",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55034"
    },
    {
      "name": "CVE-2026-55124",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55124"
    },
    {
      "name": "CVE-2026-54108",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54108"
    },
    {
      "name": "CVE-2026-50520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50520"
    },
    {
      "name": "CVE-2026-50528",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50528"
    },
    {
      "name": "CVE-2026-58636",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58636"
    },
    {
      "name": "CVE-2026-55127",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55127"
    },
    {
      "name": "CVE-2026-55121",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55121"
    },
    {
      "name": "CVE-2026-47302",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47302"
    },
    {
      "name": "CVE-2026-56192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56192"
    },
    {
      "name": "CVE-2026-47301",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47301"
    },
    {
      "name": "CVE-2026-50646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50646"
    },
    {
      "name": "CVE-2026-50648",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50648"
    },
    {
      "name": "CVE-2026-50438",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50438"
    },
    {
      "name": "CVE-2026-55132",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55132"
    },
    {
      "name": "CVE-2026-55125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55125"
    },
    {
      "name": "CVE-2026-55040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55040"
    },
    {
      "name": "CVE-2026-55023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55023"
    },
    {
      "name": "CVE-2026-54116",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54116"
    },
    {
      "name": "CVE-2026-55005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55005"
    },
    {
      "name": "CVE-2026-50659",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50659"
    },
    {
      "name": "CVE-2026-54118",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54118"
    },
    {
      "name": "CVE-2026-47300",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47300"
    },
    {
      "name": "CVE-2026-50651",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50651"
    },
    {
      "name": "CVE-2026-50658",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50658"
    },
    {
      "name": "CVE-2026-58644",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58644"
    },
    {
      "name": "CVE-2026-50649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50649"
    },
    {
      "name": "CVE-2026-54117",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54117"
    },
    {
      "name": "CVE-2026-58277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58277"
    }
  ],
  "initial_release_date": "2026-07-15T00:00:00",
  "last_revision_date": "2026-07-15T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0872",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-07-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Microsoft. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.\n\nMicrosoft indique que la vuln\u00e9rabilit\u00e9 CVE-2026-56164 est activement exploit\u00e9e.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
  "vendor_advisories": [
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50649",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55130",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55130"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50658",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50658"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54108",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54108"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47296",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47296"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54118",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54118"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55124",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55124"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55132",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55132"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-57102",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57102"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54116",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54116"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55142",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55142"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47282",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47282"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55126",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55126"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58647",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58647"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50650",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-57101",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57101"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54118",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54118"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-45496",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45496"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55127",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55127"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50527",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55032",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55032"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50526",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55002",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55002"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47302",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50506",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50506"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50520",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50520"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55038",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55038"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55021",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55021"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55121",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55121"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55006",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55006"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58277",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58277"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55134",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55134"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55027",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55027"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55035",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55035"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55128",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55128"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55055",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55055"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47305",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47305"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50438",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50438"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55135",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55135"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58636",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58636"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58595",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58595"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55019",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55019"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55023",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55023"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50648",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55009",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55009"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55026",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55026"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55045",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55045"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56157",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56157"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50528",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50646",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50651",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50651"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55033",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55033"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55016",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55016"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55944",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55944"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47300",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55030",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55030"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55012",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55012"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47295",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47295"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50510",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50510"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55125",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55125"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58644",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58644"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50659",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47303",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54117",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54117"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56164",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56164"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55011",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55011"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55052",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55052"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56192",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56192"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55008",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55008"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56642",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56642"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50525",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55028",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55028"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-45646",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45646"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50522",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50522"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55051",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55051"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56178",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56178"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-48581",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48581"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50657",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50657"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55047",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55047"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50468",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50468"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47304",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55145",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55145"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55040",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55040"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50663",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50663"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47301",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47301"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55034",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55034"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55005",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55005"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50524",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55050",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55050"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55020",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55020"
    }
  ]
}

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Service Fabric",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "8.0.206.113",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "secure@microsoft.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attacker to execute code over a network."
    }
  ],
  "id": "CVE-2026-56642",
  "lastModified": "2026-07-15T14:18:25.430",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "secure@microsoft.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-56642",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-07-15T13:06:31.540186Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-07-14T18:18:30.353",
  "references": [
    {
      "source": "secure@microsoft.com",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56642"
    }
  ],
  "sourceIdentifier": "secure@microsoft.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-121"
        }
      ],
      "source": "secure@microsoft.com",
      "type": "Secondary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2026-56642"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-121"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-07-14T18:18:30Z",
    "severity": "HIGH"
  },
  "details": "Stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attacker to execute code over a network.",
  "id": "GHSA-m474-xrpw-p6pj",
  "modified": "2026-07-14T18:32:38Z",
  "published": "2026-07-14T18:32:38Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56642"
    },
    {
      "type": "WEB",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56642"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "Microsoft Red Team"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      },
      {
        "category": "general",
        "text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
        "title": "Customer Action"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2026-56642 Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability - HTML",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56642"
      },
      {
        "category": "self",
        "summary": "CVE-2026-56642 Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability - CSAF",
        "url": "https://msrc.microsoft.com/csaf/advisories/2026/msrc_cve-2026-56642.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Exploitability Index",
        "url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability",
    "tracking": {
      "current_release_date": "2026-07-14T07:00:00.000Z",
      "generator": {
        "date": "2026-07-14T20:05:38.249Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2026-56642",
      "initial_release_date": "2026-07-14T07:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-07-14T07:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c8.0.206.113",
            "product": {
              "name": "Fabric Data Warehouse \u003c8.0.206.113",
              "product_id": "1"
            }
          },
          {
            "category": "product_version",
            "name": "8.0.206.113",
            "product": {
              "name": "Fabric Data Warehouse 8.0.206.113",
              "product_id": "21573"
            }
          }
        ],
        "category": "product_name",
        "name": "Fabric Data Warehouse"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-56642",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "general",
          "text": "Microsoft",
          "title": "Assigning CNA"
        },
        {
          "category": "faq",
          "text": "An attacker who successfully exploits this vulnerability could achieve remote code execution without user interaction.",
          "title": "How could an attacker exploit the vulnerability?"
        },
        {
          "category": "faq",
          "text": "Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.",
          "title": "According to the CVSS metric, privileges required is low (PR:L).  What does that mean for this vulnerability?"
        }
      ],
      "product_status": {
        "fixed": [
          "21573"
        ],
        "known_affected": [
          "1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-56642 Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability - HTML",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56642"
        },
        {
          "category": "self",
          "summary": "CVE-2026-56642 Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability - CSAF",
          "url": "https://msrc.microsoft.com/csaf/advisories/2026/msrc_cve-2026-56642.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-14T07:00:00.000Z",
          "details": "8.0.206.113:Security Update:https://github.com/sdebruyn/fabric-dw-mcp-cli/releases",
          "product_ids": [
            "1"
          ],
          "url": "https://github.com/sdebruyn/fabric-dw-mcp-cli/releases"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 0.0,
            "exploitCodeMaturity": "UNPROVEN",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "remediationLevel": "OFFICIAL_FIX",
            "reportConfidence": "CONFIRMED",
            "scope": "UNCHANGED",
            "temporalScore": 7.7,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Remote Code Execution"
        },
        {
          "category": "exploit_status",
          "details": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely"
        }
      ],
      "title": "Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability"
    }
  ]
}

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Microsoft heeft kwetsbaarheden verholpen in diverse componenten van SQL Server.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en/of toegang te krijgen tot gevoelige gegevens.\n\n```\nSQL Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47296 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54117 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54118 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55002 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47295 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50468 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54116 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Fabric Data Warehouse: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56642 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nPower BI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58647 | 8.00 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n```",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:\n\nhttps://portal.msrc.microsoft.com/en-us/security-guidance",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "External Control of File Name or Path",
        "title": "CWE-73"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
        "title": "CWE-79"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
        "title": "CWE-89"
      },
      {
        "category": "general",
        "text": "Stack-based Buffer Overflow",
        "title": "CWE-121"
      },
      {
        "category": "general",
        "text": "Buffer Over-read",
        "title": "CWE-126"
      },
      {
        "category": "general",
        "text": "Deserialization of Untrusted Data",
        "title": "CWE-502"
      },
      {
        "category": "general",
        "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
        "title": "CWE-843"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "title": "Kwetsbaarheden verholpen in Microsoft SQL Server",
    "tracking": {
      "current_release_date": "2026-07-14T18:19:43.628856Z",
      "generator": {
        "date": "2025-08-04T16:30:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.3"
        }
      },
      "id": "NCSC-2026-0232",
      "initial_release_date": "2026-07-14T18:19:43.628856Z",
      "revision_history": [
        {
          "date": "2026-07-14T18:19:43.628856Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1"
                }
              }
            ],
            "category": "product_name",
            "name": "Fabric Data Warehouse"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-2"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-3"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-4"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft SQL Server 2017 for x64-based Systems (CU 31)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-5"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft SQL Server 2017 for x64-based Systems (GDR)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-6"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft SQL Server 2019 for x64-based Systems (CU 32)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-7"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft SQL Server 2019 for x64-based Systems (GDR)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-8"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft SQL Server 2022 for x64-based Systems (CU 25)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-9"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft SQL Server 2022 for x64-based Systems (GDR)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-10"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft SQL Server 2025 for x64-based Systems (CU6)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-11"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft SQL Server 2025 for x64-based Systems (GDR)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-12"
                }
              }
            ],
            "category": "product_name",
            "name": "Power BI Report Server"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-47296",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
          "title": "CWE-89"
        },
        {
          "category": "description",
          "text": "Improper neutralization of special elements in SQL Server commands, known as SQL injection, allows an authorized attacker to locally elevate privileges within the system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-47296 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47296.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12"
          ]
        }
      ],
      "title": "CVE-2026-47296"
    },
    {
      "cve": "CVE-2026-54118",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "notes": [
        {
          "category": "other",
          "text": "Deserialization of Untrusted Data",
          "title": "CWE-502"
        },
        {
          "category": "description",
          "text": "A deserialization vulnerability in SQL Server allows an authorized attacker to execute arbitrary code remotely by processing untrusted data over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-54118 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-54118.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12"
          ]
        }
      ],
      "title": "CVE-2026-54118"
    },
    {
      "cve": "CVE-2026-55002",
      "cwe": {
        "id": "CWE-73",
        "name": "External Control of File Name or Path"
      },
      "notes": [
        {
          "category": "other",
          "text": "External Control of File Name or Path",
          "title": "CWE-73"
        },
        {
          "category": "description",
          "text": "An external control of file name or path vulnerability in SQL Server allows an authorized attacker to locally elevate privileges by manipulating file paths or names.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-55002 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-55002.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12"
          ]
        }
      ],
      "title": "CVE-2026-55002"
    },
    {
      "cve": "CVE-2026-47295",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
          "title": "CWE-89"
        },
        {
          "category": "description",
          "text": "SQL Server is vulnerable to SQL injection due to improper neutralization of special elements in SQL commands, allowing authorized attackers to elevate privileges over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-47295 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47295.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12"
          ]
        }
      ],
      "title": "CVE-2026-47295"
    },
    {
      "cve": "CVE-2026-54117",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "notes": [
        {
          "category": "other",
          "text": "Deserialization of Untrusted Data",
          "title": "CWE-502"
        },
        {
          "category": "description",
          "text": "A deserialization vulnerability in SQL Server allows an authorized attacker to remotely execute code over a network by exploiting untrusted data processing.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-54117 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-54117.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12"
          ]
        }
      ],
      "title": "CVE-2026-54117"
    },
    {
      "cve": "CVE-2026-50468",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "description",
          "text": "A buffer over-read vulnerability in Microsoft SQL Server allows an authorized attacker to disclose sensitive information over a network, potentially compromising data confidentiality.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-50468 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-50468.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12"
          ]
        }
      ],
      "title": "CVE-2026-50468"
    },
    {
      "cve": "CVE-2026-54116",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
          "title": "CWE-843"
        },
        {
          "category": "description",
          "text": "A type confusion vulnerability in Microsoft SQL Server allows an authorized attacker to access resources with incompatible types and disclose sensitive information over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-54116 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-54116.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12"
          ]
        }
      ],
      "title": "CVE-2026-54116"
    },
    {
      "cve": "CVE-2026-58647",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
          "title": "CWE-79"
        },
        {
          "category": "description",
          "text": "Power BI contains a cross-site scripting vulnerability due to improper input neutralization during web page generation, enabling authorized attackers to perform network spoofing.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-58647 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-58647.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12"
          ]
        }
      ],
      "title": "CVE-2026-58647"
    },
    {
      "cve": "CVE-2026-56642",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Stack-based Buffer Overflow",
          "title": "CWE-121"
        },
        {
          "category": "description",
          "text": "A stack-based buffer overflow vulnerability in Microsoft Fabric Data Warehouse allows an authorized attacker to remotely execute code over a network, posing a significant security risk.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-56642 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-56642.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12"
          ]
        }
      ],
      "title": "CVE-2026-56642"
    }
  ]
}