/
vendors:Microsoft × latest_source_host:cert.ssi.gouv.fr × limpar

Resultados

10 casos · pág. 1/1

cert.ssi.gouv.fr · high

CERT-FR: Multiple Microsoft Edge vulnerabilities allow remote code execution (155.0.4283.60 and 154.0.4258.37 fixes)

CERT-FR advisory CERTFR-2026-AVI-1342 reports a large batch of vulnerabilities in Microsoft Edge that could let an attacker achieve remote arbitrary code execution and cause an additional security issue the vendor has not specified. The advisory lists more than 130 Microsoft security bulletins dated 16 October 2026, from CVE-2026-102322 t…

cert.ssi.gouv.fr · high

CERT-FR: Multiple Microsoft Office vulnerabilities allow remote code execution, data disclosure and security bypass

CERT-FR advisory CERTFR-2026-AVI-1331, published 16 October 2026, reports multiple vulnerabilities in Microsoft Office products. They allow an attacker to achieve remote arbitrary code execution, compromise data confidentiality and bypass the security policy. The advisory is based on Microsoft security bulletins dated 15 October 2026 cove…

cert.ssi.gouv.fr · high

CERT-FR: Multiple Microsoft vulnerabilities (SharePoint, Visual Studio, Identity libraries, System.Formats.Cbor) allow RCE, DoS

CERT-FR advisory CERTFR-2026-AVI-1332, published 16 October 2026, reports multiple vulnerabilities in Microsoft products that may allow remote arbitrary code execution, privilege escalation, remote denial of service and breach of data confidentiality. The advisory is based on Microsoft security bulletins dated 15 October 2026 for four CVE…

cert.ssi.gouv.fr · high

CERT-FR: Multiple Microsoft .NET and ASP.NET Core vulnerabilities, including remote code execution, fixed in October 2026 updates

CERT-FR advisory CERTFR-2026-AVI-1313 reports multiple vulnerabilities in Microsoft .NET, ASP.NET Core and .NET Framework, covered by Microsoft's October 13, 2026 security bulletins for 43 CVEs. Some of them allow an attacker to achieve remote arbitrary code execution, privilege escalation and remote denial of service. The advisory also l…

cert.ssi.gouv.fr · high

CERT-FR: Multiple Microsoft product vulnerabilities allow remote code execution, privilege escalation and DoS (October 2026 patches)

CERT-FR advisory CERTFR-2026-AVI-1316 reports multiple vulnerabilities across Microsoft products, based on Microsoft security bulletins dated 13 October 2026. According to the advisory, some flaws allow an attacker to achieve remote arbitrary code execution, privilege escalation and remote denial of service. Other listed impacts are data …

cert.ssi.gouv.fr · critical

CERT-FR: Multiple Microsoft Windows vulnerabilities, including actively exploited CVE-2026-96951, fixed in October 2026 patches

CERT-FR advisory CERTFR-2026-AVI-1314 reports multiple vulnerabilities in Microsoft Windows and related components, covered by Microsoft's October 13, 2026 security bulletins (ADV260001 and dozens of CVEs). Some of them allow remote arbitrary code execution, privilege escalation, remote denial of service, security policy bypass and compro…

cert.ssi.gouv.fr · high

CERT-FR: Multiple Microsoft Azure vulnerabilities (CVE-2026-100207 and 7 others) allow RCE and data exposure

CERT-FR advisory CERTFR-2026-AVI-1315 reports multiple vulnerabilities in Microsoft Azure components, published on 14 October 2026. Some of them allow remote arbitrary code execution, privilege escalation, security policy bypass and loss of data confidentiality. Microsoft published the corresponding security bulletins on 13 October 2026. …

cert.ssi.gouv.fr · critical

CERT-FR: Multiple Microsoft Office vulnerabilities patched, CVE-2026-96951 actively exploited

CERT-FR advisory CERTFR-2026-AVI-1312 covers a large set of vulnerabilities in Microsoft Office, fixed in Microsoft's 13 October 2026 security updates. Exploitation can lead to remote arbitrary code execution, privilege escalation, security policy bypass and loss of data confidentiality. Microsoft states that CVE-2026-96951 is being activ…

cert.ssi.gouv.fr · · 5 fontes · 5 atualizações critical

Ivanti patches exploited Connect Secure zero-day CVE-2026-104935 (UTA0576); CISA adds it to KEV; six Xtraction and Intune flaws fixed

Ivanti released its October 2026 security update on 13 October 2026. It fixes the actively exploited Connect Secure zero-day CVE-2026-104935, a spoofing-based authentication bypass that lets remote, unauthenticated attackers execute arbitrary commands (cert.ssi.gouv.fr, darkwebinformer.com). The flaw was discovered by Volexity, which trac…