Microsoft Products Vulnerability CVE-2026-32249 Discovered

CERT-FR Security Advisories

Published March 17th, 2026

Detected March 17th, 2026

Summary

CERT-FR has issued a notice regarding a vulnerability (CVE-2026-32249) discovered in Microsoft products. The advisory details affected systems and directs users to Microsoft's security bulletin for patches.

View original document View source feed page

What changed

CERT-FR has published a security advisory (CERTFR-2026-AVI-0307) concerning vulnerability CVE-2026-32249 affecting specific versions of Microsoft products, including azl3 vim and cbl2 vim. The advisory notes that the vulnerability, detailed in a Microsoft Security Bulletin from March 15, 2026, allows an unspecified security issue to be exploited by an attacker.

Regulated entities using the affected Microsoft products should consult the provided Microsoft Security Bulletin and the CVE record for detailed information on the vulnerability and to apply the necessary patches. While the advisory does not specify a compliance deadline or penalty, prompt patching is crucial to mitigate potential security risks and prevent exploitation.

What to do next

Review Microsoft Security Bulletin CVE-2026-32249 for affected product versions.
Apply relevant patches and updates provided by Microsoft to mitigate the vulnerability.
Consult internal IT security teams to assess potential impact and implement remediation steps.

Source document (simplified)

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 17 mars 2026 N° CERTFR-2026-AVI-0307 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Vulnérabilité dans les produits Microsoft

Gestion du document

Risque

Non spécifié par l'éditeur

Systèmes affectés

azl3 vim 9.2.0088-1 versions antérieures à 9.2.0173-1
cbl2 vim 9.2.0088-1 versions antérieures à 9.2.0173-1

Résumé

Une vulnérabilité a été découverte dans les produits Microsoft. Elle permet à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.