Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-96185 | 7.5 (v3.1) | Microsoft Exchange Online Remote Code Execution Vulner… |
Microsoft |
Microsoft Exchange Online |
2026-10-22T21:44:41.837Z | 2026-10-31T18:00:19.270Z |
| cve-2026-97785 | 10 (v3.1) | AAD App Proxy Elevation of Privilege Vulnerability |
Microsoft |
Microsoft Entra application proxy |
2026-10-22T21:44:41.227Z | 2026-10-31T18:00:18.695Z |
| cve-2026-108456 | 7.7 (v3.1) | Azure AI Foundry Elevation of Privilege Vulnerability |
Microsoft |
Azure AI Foundry |
2026-10-22T21:44:40.650Z | 2026-10-31T18:00:18.195Z |
| cve-2026-105014 | 9.1 (v3.1) | Azure Pipelines Remote Code Execution Vulnerability |
Microsoft |
Azure Pipelines |
2026-10-22T21:44:40.069Z | 2026-10-31T18:00:17.364Z |
| cve-2026-102227 | 7.8 (v3.1) | Windows Resilient File System (ReFS) Remote Code Execu… |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T18:59:25.824Z | 2026-10-31T18:00:16.847Z |
| cve-2026-108468 | 7 (v3.1) | Windows Installer Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T18:59:25.035Z | 2026-10-31T18:00:15.726Z |
| cve-2026-108457 | 8.1 (v3.1) | Microsoft Windows PDF Remote Code Execution Vulnerability |
Microsoft |
Windows 10 Version 21H2 |
2026-10-13T18:59:24.552Z | 2026-10-31T18:00:15.145Z |
| cve-2026-108400 | 8.8 (v3.1) | HEVC Video Extensions Remote Code Execution Vulnerability |
Microsoft |
HEVC Video Extensions |
2026-10-13T18:59:24.362Z | 2026-10-31T18:00:14.672Z |
| cve-2026-105728 | 7.5 (v3.1) | Dynamics Business Central Information Disclosure Vulne… |
Microsoft |
Microsoft Dynamics NAV 2018 |
2026-10-13T18:59:24.248Z | 2026-10-31T18:00:13.735Z |
| cve-2026-105727 | 8.8 (v3.1) | Microsoft Dynamics 365 Business Central Elevation of P… |
Microsoft |
Microsoft Dynamics NAV 2018 |
2026-10-13T18:59:23.799Z | 2026-10-31T18:00:13.174Z |
| cve-2026-105725 | 7 (v3.1) | Windows Security App Elevation of Privilege Vulnerability |
Microsoft |
Windows Security App |
2026-10-13T18:59:23.648Z | 2026-10-31T18:00:12.283Z |
| cve-2026-103572 | 8.8 (v3.1) | Visual Studio Tools for Applications and SQL Server Ma… |
Microsoft |
Microsoft Visual Studio 2022 version 17.14 |
2026-10-13T18:56:39.614Z | 2026-10-31T18:00:11.253Z |
| cve-2026-102850 | 8.8 (v3.1) | Microsoft Office Access Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-10-13T18:56:38.866Z | 2026-10-31T18:00:10.316Z |
| cve-2026-102849 | 8.8 (v3.1) | Microsoft Office Access Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-10-13T18:56:35.500Z | 2026-10-31T18:00:08.757Z |
| cve-2026-120210 | 5.3 (v4.0) 4.3 (v3.1) | FFmpeg 5.0 through 9.0.2 Path Traversal via IMF Demuxe… |
FFmpeg |
FFmpeg |
2026-10-31T17:25:56.847Z | 2026-10-31T17:25:56.847Z |
| cve-2026-120203 | 8.7 (v4.0) 8.8 (v3.1) | ShowDoc 2.8.14 before 3.9.6 Code Injection via Mock Te… |
ShowDoc |
ShowDoc |
2026-10-31T17:25:52.170Z | 2026-10-31T17:25:52.170Z |
| cve-2026-120202 | 7.1 (v4.0) 6.5 (v3.1) | Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle S… |
highflame-ai |
ramparts |
2026-10-31T17:25:51.512Z | 2026-10-31T17:25:51.512Z |
| cve-2026-120199 | 5.3 (v4.0) 4.3 (v3.1) | LearnHouse before 1.1.1 Missing Authorization via Assi… |
learnhouse |
learnhouse |
2026-10-31T17:25:49.528Z | 2026-10-31T17:25:49.528Z |
| cve-2026-69399 | 9.9 (v3.1) | Azure Arc Elevation of Privilege Vulnerability |
Microsoft |
Azure ARC |
2026-09-17T22:55:54.666Z | 2026-10-31T16:18:11.793Z |
| cve-2026-70125 | 7.8 (v3.1) | Microsoft Office Outlook Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-09-23T22:40:40.537Z | 2026-10-31T16:18:11.218Z |
| cve-2026-85887 | 7.7 (v3.1) | M365 Copilot Information Disclosure Vulnerability |
Microsoft |
Microsoft 365 Copilot |
2026-09-17T23:04:48.423Z | 2026-10-31T16:18:10.707Z |
| cve-2026-83946 | 8.2 (v3.1) | Azure Portal Spoofing Vulnerability |
Microsoft |
Azure Portal |
2026-09-17T23:04:47.883Z | 2026-10-31T16:18:10.195Z |
| cve-2026-69843 | 10 (v3.1) | Microsoft Fabric Elevation of Privilege Vulnerability |
Microsoft |
Microsoft Fabric |
2026-09-17T23:04:47.355Z | 2026-10-31T16:18:09.754Z |
| cve-2026-85878 | 9.9 (v3.1) | Azure Database for PostgreSQL Elevation of Privilege V… |
Microsoft |
Azure HorizonDB |
2026-09-17T23:04:46.779Z | 2026-10-31T16:18:09.304Z |
| cve-2026-62874 | 10 (v3.1) | Azure Billing Elevation of Privilege Vulnerability |
Microsoft |
Azure Billing |
2026-09-17T23:04:46.281Z | 2026-10-31T16:18:08.790Z |
| cve-2026-83711 | 10 (v3.1) | Microsoft Azure Active Directory B2C Elevation of Priv… |
Microsoft |
Entra |
2026-09-03T22:59:15.478Z | 2026-10-31T16:18:08.277Z |
| cve-2026-80098 | 9.3 (v3.1) | Copilot Studio Elevation of Privilege Vulnerability |
Microsoft |
Microsoft Copilot Studio |
2026-09-03T22:59:13.804Z | 2026-10-31T16:18:07.769Z |
| cve-2026-70352 | 10 (v3.1) | Azure AI Language Elevation of Privilege Vulnerability |
Microsoft |
Azure AI Language Authoring |
2026-09-03T22:59:12.503Z | 2026-10-31T16:18:07.330Z |
| cve-2026-62906 | 7.4 (v3.1) | Microsoft Discovery Studio Information Disclosure Vuln… |
Microsoft |
Microsoft Discovery Studio |
2026-09-03T22:59:10.137Z | 2026-10-31T16:18:06.811Z |
| cve-2026-62804 | 7.8 (v3.1) | Microsoft Word Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-09-08T17:19:33.702Z | 2026-10-31T16:18:06.278Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0067 | Multiples vulnérabilités dans les produits NetApp | 2024-01-25T00:00:00.000000 | 2024-01-25T00:00:00.000000 |
| certfr-2024-avi-0066 | Vulnérabilité dans Squid | 2024-01-24T00:00:00.000000 | 2024-01-24T00:00:00.000000 |
| certfr-2024-avi-0065 | Vulnérabilité dans Citrix Hypervisor | 2024-01-24T00:00:00.000000 | 2024-01-24T00:00:00.000000 |
| certfr-2024-avi-0064 | Multiples vulnérabilités dans Google Chrome | 2024-01-24T00:00:00.000000 | 2024-01-24T00:00:00.000000 |
| certfr-2024-avi-0063 | Multiples vulnérabilités dans les produits Mozilla | 2024-01-24T00:00:00.000000 | 2024-01-24T00:00:00.000000 |
| certfr-2024-avi-0061 | Multiples vulnérabilités dans les produits Splunk | 2024-01-23T00:00:00.000000 | 2024-01-23T00:00:00.000000 |
| certfr-2024-avi-0060 | Vulnérabilité dans Xen | 2024-01-23T00:00:00.000000 | 2024-01-23T00:00:00.000000 |
| certfr-2023-avi-1019 | Vulnérabilité dans les produits Cisco | 2023-12-13T00:00:00.000000 | 2024-01-23T00:00:00.000000 |
| certfr-2024-avi-0059 | Vulnérabilité dans Spring Framework | 2024-01-22T00:00:00.000000 | 2024-01-22T00:00:00.000000 |
| certfr-2024-avi-0058 | Vulnérabilité dans Postfix | 2024-01-22T00:00:00.000000 | 2024-01-22T00:00:00.000000 |
| certfr-2024-avi-0057 | Multiples vulnérabilités dans les produits IBM | 2024-01-19T00:00:00.000000 | 2024-01-19T00:00:00.000000 |
| certfr-2024-avi-0056 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-01-19T00:00:00.000000 | 2024-01-19T00:00:00.000000 |
| certfr-2024-avi-0055 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-01-19T00:00:00.000000 | 2024-01-19T00:00:00.000000 |
| certfr-2024-avi-0054 | Vulnérabilité dans Exim | 2024-01-19T00:00:00.000000 | 2024-01-19T00:00:00.000000 |
| certfr-2024-avi-0053 | Multiples vulnérabilités dans les produits Nextcloud | 2024-01-18T00:00:00.000000 | 2024-01-18T00:00:00.000000 |
| certfr-2024-avi-0052 | Multiples vulnérabilités dans Microsoft Edge | 2024-01-18T00:00:00.000000 | 2024-01-18T00:00:00.000000 |
| certfr-2024-avi-0051 | Vulnérabilité dans Drupal Core | 2024-01-18T00:00:00.000000 | 2024-01-18T00:00:00.000000 |
| certfr-2024-avi-0050 | Multiples vulnérabilités dans Juniper Secure Analytics | 2024-01-18T00:00:00.000000 | 2024-01-18T00:00:00.000000 |
| certfr-2024-avi-0038 | Vulnérabilité dans les produits SonicWall | 2024-01-16T00:00:00.000000 | 2024-01-18T00:00:00.000000 |
| certfr-2024-avi-0049 | Multiples vulnérabilités dans Oracle Weblogic Server | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0048 | Multiples vulnérabilités dans Oracle Systems | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0047 | Multiples vulnérabilités dans Oracle PeopleSoft | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0046 | Multiples vulnérabilités dans Oracle Java SE | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0045 | Multiples vulnérabilités dans Oracle Database Server | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0044 | Multiples vulnérabilités dans Oracle MySQL | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0043 | Multiples vulnérabilités dans Trend Micro Deep Security Agent | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0042 | Vulnérabilité dans MongoDB C-Driver | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0041 | Multiples vulnérabilités dans Google Chrome | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0040 | Multiples vulnérabilités dans Atlassian Confluence et Jira | 2024-01-16T00:00:00.000000 | 2024-01-16T00:00:00.000000 |
| certfr-2024-avi-0039 | Multiples vulnérabilités dans les produits Citrix | 2024-01-16T00:00:00.000000 | 2024-01-16T00:00:00.000000 |