Changeflow GovPing Data Privacy & Cybersecurity Multiple Vulnerabilities in Microsoft Products
Routine Notice Added Final

Multiple Vulnerabilities in Microsoft Products

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published
Detected
Email

Summary

CERT-FR issued a security advisory (CERTFR-2026-AVI-0381) detailing 5 CVEs affecting Microsoft products and related open-source libraries. The vulnerabilities impact azl3 python-requests, cbl2 kernel, cbl2 libpng, and cbl2 plexus-utils. Organizations using these components should consult Microsoft security bulletins and apply available patches.

Published by CERT-FR on cert.ssi.gouv.fr . Detected, standardized, and enriched by GovPing. Review our methodology and editorial standards .
View original document View source feed page

What changed

CERT-FR published advisory CERTFR-2026-AVI-0381 identifying 5 CVEs in Microsoft products and associated open-source libraries. The affected components are: azl3 python-requests versions prior to 2.31.0-4, cbl2 kernel versions prior to 5.15.202.1-1, cbl2 libpng versions prior to 1.6.56-1, and cbl2 plexus-utils versions prior to 3.3.0-4. Microsoft security bulletins include CVE-2026-23169, CVE-2025-67030, CVE-2026-25645, CVE-2026-33416, and CVE-2026-33636.

Organizations using affected versions of python-requests, Linux kernel, libpng, or plexus-utils should immediately review their systems against the CVE list and apply patches referenced in Microsoft security bulletins. No specific compliance deadline or penalties are stated in this advisory.

What to do next

  1. Identify systems running affected versions of azl3 python-requests, cbl2 kernel, cbl2 libpng, or cbl2 plexus-utils
  2. Review CVE details and Microsoft security bulletins for each referenced vulnerability
  3. Apply available patches from Microsoft or component maintainers

Archived snapshot

Mar 31, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 31 mars 2026 N° CERTFR-2026-AVI-0381 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans les produits Microsoft

Gestion du document

| Référence | CERTFR-2026-AVI-0381 |
| Titre | Multiples vulnérabilités dans les produits Microsoft |
| Date de la première version | 31 mars 2026 |
| Date de la dernière version | 31 mars 2026 |
| Source(s) | Bulletin de sécurité Microsoft CVE-2026-23169 du 20 mars 2026
Bulletin de sécurité Microsoft CVE-2025-67030 du 29 mars 2026
Bulletin de sécurité Microsoft CVE-2026-25645 du 29 mars 2026
Bulletin de sécurité Microsoft CVE-2026-33416 du 29 mars 2026
Bulletin de sécurité Microsoft CVE-2026-33636 du 29 mars 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.

Risque

  • Non spécifié par l'éditeur

Systèmes affectés

  • azl3 python-requests 2.31.0-3 versions antérieures à 2.31.0-4
  • cbl2 kernel 5.15.200.1-1 versions antérieures à 5.15.202.1-1
  • cbl2 libpng 1.6.55-1 versions antérieures à 1.6.56-1
  • cbl2 plexus-utils 3.3.0-3 versions antérieures à 3.3.0-4

Résumé

De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation

Gestion détaillée du document

  1. le 31 mars 2026 Version initiale

Named provisions

Objet: Multiples vulnérabilités dans les produits Microsoft Solutions Documentation

Related changes

Favicon for www.cert.ssi.gouv.fr Multiple Vulnerabilities in Cisco ISE and Webex Products
Priority review Apr 16, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiple Microsoft Office Vulnerabilities Allow Remote Code Execution, Data Breach
Priority review Apr 15, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiple Linux Kernel Vulnerabilities in Ubuntu, Privilege Escalation and Data Breach Risk
Priority review Apr 17, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity

Get daily alerts for CERT-FR Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

Source

Favicon for www.cert.ssi.gouv.fr
CERT-FR Security Advisories cert.ssi.gouv.fr/avis
Data Privacy & Cybersecurity

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-FR.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Press inquiries →

Classification

Agency
CERT-FR
Published
March 31st, 2026
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Minor
Document ID
CERTFR-2026-AVI-0381

Who this affects

Applies to
Technology companies Government agencies
Industry sector
5112 Software & Technology
Activity scope
Vulnerability Management Software Patching
Threshold
Versions earlier than 2.31.0-4 (azl3 python-requests), earlier than 5.15.202.1-1 (cbl2 kernel), earlier than 1.6.56-1 (cbl2 libpng), earlier than 3.3.0-4 (cbl2 plexus-utils)
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Software Security Data Privacy

Browse Categories

Agriculture & Food Safety 69 AI Regulation 3 Banking & Finance 345 Consumer Protection 72 Courts & Legal 361 Data Privacy & Cybersecurity 81 Defense & National Security 51 Education 48 Energy 100 Environment 86 Environmental & Energy 38 Environmental Regulation 7 Financial Regulation 2 Financial Services 7 Government & Legislation 278 Government Operations 116 Healthcare 136 Healthcare Compliance 6 Healthcare & Life Sciences 119 Housing 16 Immigration 8 Immigration & Border Control 2 Insurance 68 Labor & Employment 128 Legal & Judicial 36 Occupational Safety 2 Pharma & Drug Safety 101 Pharma & Healthcare 1 Privacy 1 Public Health 2 Real Estate & Housing 61 Sanctions & Export Controls 2 Securities & Investments 32 Securities & Markets 103 Securities Regulation 6 Tax 64 Tax & Revenue 9 Telecom & Technology 47 Trade & Commerce 3 Trade & Sanctions 135 Transportation 89

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!