Changeflow GovPing Data Privacy & Cybersecurity Multiple Vulnerabilities in Microsoft Products
Priority review Guidance Added Final

Multiple Vulnerabilities in Microsoft Products

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published
Detected
Email

Summary

CERT-FR issued an advisory warning of 14 unpatched vulnerabilities across Microsoft products, spanning CVEs from CVE-2026-33936 through CVE-2026-35177, disclosed between March 29 and April 8, 2026. The vulnerabilities affect multiple Microsoft products and could allow remote code execution, privilege escalation, or information disclosure. Affected organizations are advised to consult Microsoft Security Response Center bulletins and apply available patches immediately.

View original document View source feed page

What changed

CERT-FR published an advisory documenting 14 distinct Microsoft vulnerabilities spanning CVE-2026-33936 through CVE-2026-35177. The vulnerabilities were disclosed by Microsoft between March 29 and April 8, 2026, affecting various Microsoft products and potentially allowing remote code execution, privilege escalation, or information disclosure.\n\nOrganizations running any affected Microsoft products should immediately consult the corresponding Microsoft Security Response Center bulletins and apply patches. Failure to remediate could expose systems to exploitation. IT security teams should prioritize patching and monitor for indicators of compromise.

What to do next

  1. Apply Microsoft security patches referenced in associated MSRC bulletins immediately
  2. Audit systems for affected Microsoft product versions
  3. Monitor for new CVE disclosures and patch updates from Microsoft

Archived snapshot

Apr 8, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 08 avril 2026 N° CERTFR-2026-AVI-0406 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans les produits Microsoft

Gestion du document

| Référence | CERTFR-2026-AVI-0406 |
| Titre | Multiples vulnérabilités dans les produits Microsoft |
| Date de la première version | 08 avril 2026 |
| Date de la dernière version | 08 avril 2026 |
| Source(s) | Bulletin de sécurité Microsoft CVE-2026-33936 du 29 mars 2026
Bulletin de sécurité Microsoft CVE-2026-21710 du 01 avril 2026
Bulletin de sécurité Microsoft CVE-2026-21713 du 01 avril 2026
Bulletin de sécurité Microsoft CVE-2026-21714 du 01 avril 2026
Bulletin de sécurité Microsoft CVE-2026-21715 du 01 avril 2026
Bulletin de sécurité Microsoft CVE-2026-21716 du 01 avril 2026
Bulletin de sécurité Microsoft CVE-2026-34714 du 01 avril 2026
Bulletin de sécurité Microsoft CVE-2026-29785 du 02 avril 2026
Bulletin de sécurité Microsoft CVE-2026-33216 du 02 avril 2026
Bulletin de sécurité Microsoft CVE-2026-33554 du 02 avril 2026
Bulletin de sécurité Microsoft CVE-2026-5201 du 02 avril 2026
Bulletin de sécurité Microsoft CVE-2026-31394 du 05 avril 2026
Bulletin de sécurité Microsoft CVE-2026-34982 du 08 avril 2026
Bulletin de sécurité Microsoft CVE-2026-35177 du 08 avril 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.

Risque

  • Non spécifié par l'éditeur

Systèmes affectés

  • azl3 freeipmi 1.6.11-1 versions antérieures à 1.6.17-1
  • azl3 gdk-pixbuf2 2.42.10-4 versions antérieures à 2.42.10-5
  • azl3 kernel 6.6.130.1-3 versions antérieures à 6.6.130.1-3
  • azl3 nodejs 20.14.0-14 versions antérieures à 20.14.0-15
  • azl3 python-ecdsa 0.18.0-2 versions antérieures à 0.19.2-1
  • azl3 telegraf 1.31.0-17 versions antérieures à 1.31.0-18
  • azl3 vim 9.2.0240-1 versions antérieures à 9.2.0315-1

Résumé

De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation

Gestion détaillée du document

  1. le 08 avril 2026 Version initiale

Related changes

Favicon for www.cert.ssi.gouv.fr Microsoft Edge Multiple Security Vulnerabilities Advisory
Priority review Apr 03, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiples vulnérabilités dans les produits Mozilla
Priority review Apr 08, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiples vulnérabilités dans OpenSSL - Avis CERT-FR 2026-AVI-0403
Priority review Apr 08, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiple vulnerabilities in GLPI - RCE, SQL injection, XSS
Priority review Apr 08, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr SUSE Linux Kernel Multiple Vulnerabilities Advisory
Priority review Apr 03, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Red Hat Linux Kernel Multiple Vulnerabilities Advisory
Priority review Apr 03, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity

Get daily alerts for CERT-FR Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

Source

Favicon for www.cert.ssi.gouv.fr
CERT-FR Security Advisories cert.ssi.gouv.fr/avis
Data Privacy & Cybersecurity

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-FR.

What's AI-generated?

The plain-English summary, classification, and "what to do next" steps are AI-generated from the original text. Cite the source document, not the AI analysis.

Last updated

Press inquiries →

Classification

Agency
CERT-FR
Published
April 8th, 2026
Instrument
Guidance
Legal weight
Non-binding
Stage
Final
Change scope
Substantive
Document ID
CERTFR-2026-AVI-0406

Who this affects

Applies to
Technology companies Government agencies Organizations using Microsoft products
Industry sector
5112 Software & Technology
Activity scope
Vulnerability patching Systems security Cybersecurity
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Data Privacy Software & Technology

Browse Categories

Agriculture & Food Safety 63 AI Regulation 3 Banking & Finance 292 Consumer Protection 44 Courts & Legal 360 Data Privacy & Cybersecurity 74 Defense & National Security 52 Education 20 Energy 101 Environment 85 Environmental Permits 1 Environmental Regulation 13 Government & Legislation 278 Healthcare 136 Housing 16 Immigration 9 Insurance 58 Labor & Employment 113 Legal 1 Legislative 1 Pharma & Drug Safety 104 Public Health 3 Securities & Markets 104 Securities Regulation 14 Tax 66 Telecom & Technology 47 Trade & Sanctions 124 Transportation 57

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Optional. Personalizes your daily digest.

Free. Unsubscribe anytime.