Changeflow GovPing Data Privacy & Cybersecurity Multiple Microsoft Product Vulnerabilities Iden...
Priority review Notice Added Final

Multiple Microsoft Product Vulnerabilities Identified by CERT-FR

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published
Detected
Email

Summary

CERT-FR Advisory CERTFR-2026-AVI-0503 identifies 25 unspecified security vulnerabilities in Microsoft products affecting specific azl3 and cbl2 distribution packages (MySQL 8.0.45-2/8.0.45-3, protobuf 25.3-6, cri-o 1.22.3-20). The vulnerabilities allow an attacker to cause unspecified security issues. Organizations should refer to Microsoft security bulletins CVE-2026-21998 through CVE-2026-6409 for patching guidance.

“De multiples vulnérabilités ont été découvertes dans les produits Microsoft.”

— CERT-FR , verbatim from source
Published by CERT-FR on cert.ssi.gouv.fr . Detected, standardized, and enriched by GovPing. Review our methodology and editorial standards .

About this source

CERT-FR is the French government's national cybersecurity incident response team, run by the ANSSI. Their advisory feed publishes vulnerability disclosures, active exploitation warnings, and emergency patching guidance for software in widespread enterprise use: browsers, hypervisors, ERP systems, network equipment, file transfer products. Around 180 advisories a month. The advisories are written in French but cover the same vulnerability universe as CISA, NCSC-UK, BSI's CERT-Bund, and JPCERT, often hours earlier on European-headquartered vendors. Watch this if you patch enterprise software, run a SOC, write detection content, or track Schneider, Dassault, OVH, Atos, or any French-vendor advisory faster than English-language sources will surface it. GovPing publishes each advisory with the affected vendor, severity, and CERT-FR link.

View original document View source feed page

What changed

CERT-FR published Advisory CERTFR-2026-AVI-0503, a new security advisory listing 25 Microsoft security vulnerabilities (CVE-2026-21998 through CVE-2026-6409) published by Microsoft on 23 April 2026. The affected systems include specific versions of azl3 MySQL, azl3 protobuf, cbl2 cri-o, and cbl2 MySQL packages requiring updates to their next patched versions. The risk level is unspecified by the vendor. The advisory recommends referring to Microsoft's security bulletins for patch information.

Organizations running the affected azl3 and cbl2 distribution packages should monitor Microsoft security bulletins and apply available patches to mitigate potential security issues. This advisory serves as an early warning for French enterprises and government agencies using these specific software packages.

What to do next

  1. Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs

Archived snapshot

Apr 27, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 27 avril 2026 N° CERTFR-2026-AVI-0503 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans les produits Microsoft

Gestion du document

| Référence | CERTFR-2026-AVI-0503 |
| Titre | Multiples vulnérabilités dans les produits Microsoft |
| Date de la première version | 27 avril 2026 |
| Date de la dernière version | 27 avril 2026 |
| Source(s) | Bulletin de sécurité Microsoft CVE-2026-21998 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-22001 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-22002 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-22004 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-22005 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-22009 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-22015 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-22017 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-34267 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-34270 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-34271 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-34276 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-34278 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-34293 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-34303 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-34304 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-34308 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-35236 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-35237 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-35238 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-35239 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-35240 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-40890 du 23 avril 2026
Bulletin de sécurité Microsoft CVE-2026-6409 du 23 avril 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.

Risque

  • Non spécifié par l'éditeur

Systèmes affectés

  • azl3 mysql 8.0.45-2 versions antérieures à 8.0.46-1
  • azl3 protobuf 25.3-6 versions antérieures à 25.3-7
  • cbl2 cri-o 1.22.3-20 versions antérieures à 1.22.3-21
  • cbl2 mysql 8.0.45-3 versions antérieures à 8.0.46-1

Résumé

De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation

Gestion détaillée du document

  1. le 27 avril 2026 Version initiale

Related changes

Favicon for www.cert.ssi.gouv.fr Multiples vulnérabilités dans Microsoft Edge, versions antérieures à 147.0.3912.86
Priority review Apr 27, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr FoxIT PDF Editor and Reader Multiple Remote Code Execution Vulnerabilities
Priority review Apr 27, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiple Vulnerabilities in VMware Tanzu Products
Routine Apr 27, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity

Get daily alerts for CERT-FR Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

Source

Favicon for www.cert.ssi.gouv.fr
CERT-FR Security Advisories cert.ssi.gouv.fr/avis
Data Privacy & Cybersecurity

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-FR.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Press inquiries →

Classification

Agency
CERT-FR
Published
April 27th, 2026
Instrument
Notice
Branch
Executive
Source language
fr
Legal weight
Non-binding
Stage
Final
Change scope
Minor

Who this affects

Applies to
Technology companies Government agencies Healthcare providers
Industry sector
5112 Software & Technology
Activity scope
Vulnerability monitoring Patch management Security advisory response
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Topics
Software & Technology Public Health

Browse Categories

Agriculture & Food Safety 84 Banking & Finance 507 Consumer Protection 142 Courts & Legal 631 Data Privacy & Cybersecurity 153 Defense & National Security 52 Education 63 Energy 135 Environment 170 Government & Legislation 529 Healthcare & Life Sciences 411 Immigration 11 Insurance 90 Labor & Employment 196 Pharma & Drug Safety 14 Real Estate & Housing 76 Securities & Markets 178 Tax 118 Telecom & Technology 58 Trade & Sanctions 167 Transportation 132

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!