Changeflow GovPing Data Privacy & Cybersecurity Microsoft Product Vulnerabilities Identified
Priority review Notice Added Final

Microsoft Product Vulnerabilities Identified

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published March 26th, 2026
Detected March 26th, 2026
Email

Summary

CERT-FR has issued an advisory regarding multiple vulnerabilities discovered in Microsoft products. These vulnerabilities could allow an attacker to exploit unspecified security issues. Users are advised to consult Microsoft's security bulletins for patch information.

View original document View source feed page

What changed

CERT-FR, the French national cybersecurity agency, has released an advisory (CERTFR-2026-AVI-0362) detailing multiple vulnerabilities affecting Microsoft products. The advisory cites specific CVEs (CVE-2026-25075 and CVE-2026-33412) and notes that these issues could allow an attacker to cause an unspecified security problem. The affected versions include specific configurations of azl3 strongswan and azl3 vim.

Organizations using the affected Microsoft products and related software should immediately consult the provided Microsoft security bulletins to obtain and apply the necessary patches. Failure to do so could expose systems to exploitation, leading to potential security breaches. While the specific risk is not detailed by the publisher, prompt patching is crucial for maintaining system integrity and preventing unauthorized access or disruption.

What to do next

  1. Consult Microsoft security bulletins for CVE-2026-25075 and CVE-2026-33412.
  2. Apply available patches and updates for affected Microsoft products and related software.
  3. Review system configurations for azl3 strongswan and azl3 vim to ensure they are updated to versions 5.9.14-9 and 9.2.0240-1 or later, respectively.

Source document (simplified)

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 26 mars 2026 N° CERTFR-2026-AVI-0362 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans les produits Microsoft

Gestion du document

| Référence | CERTFR-2026-AVI-0362 |
| Titre | Multiples vulnérabilités dans les produits Microsoft |
| Date de la première version | 26 mars 2026 |
| Date de la dernière version | 26 mars 2026 |
| Source(s) | Bulletin de sécurité Microsoft CVE-2026-25075 du 25 mars 2026
Bulletin de sécurité Microsoft CVE-2026-33412 du 26 mars 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.

Risque

  • Non spécifié par l'éditeur

Systèmes affectés

  • azl3 strongswan 5.9.14-8 versions antérieures à 5.9.14-9
  • azl3 vim 9.2.0088-1 versions antérieures à 9.2.0240-1

Résumé

De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation

Gestion détaillée du document

  1. le 26 mars 2026 Version initiale

Related changes

Favicon for www.cert.ssi.gouv.fr Siemens Product Vulnerabilities Allow Remote Denial of Service
Priority review Mar 27, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Spring AI Vulnerabilities Allow Code Execution, SSRF, Policy Bypass
Priority review Mar 27, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr NetApp Products Vulnerabilities Affecting Data Integrity and Confidentiality
Priority review Mar 27, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.jdsupra.com European Cybersecurity M&A Climbs Amid Accelerating AI-Driven Attacks
Priority review Mar 28, 2026 • JD Supra Technology & Cyber • Data Privacy & Cybersecurity
Favicon for www.cisa.gov CISA Adds CVE-2025-53521 to Known Exploited Vulnerabilities Catalog
Priority review Mar 28, 2026 • CISA ICS-CERT Advisories • Data Privacy & Cybersecurity
Favicon for www.cisa.gov F5 BIG-IP RCE Vulnerability (CVE-2025-53521)
Urgent Mar 28, 2026 • CISA ICS-CERT Advisories • Data Privacy & Cybersecurity

Source

Favicon for www.cert.ssi.gouv.fr
CERT-FR Security Advisories cert.ssi.gouv.fr/avis
Data Privacy & Cybersecurity
Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
CERT-FR
Published
March 26th, 2026
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Substantive
Document ID
CERTFR-2026-AVI-0362

Who this affects

Applies to
Manufacturers
Industry sector
3341 Computer & Electronics Manufacturing
Activity scope
Vulnerability Management Patch Management
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Vulnerability Management Information Security

Browse Categories

Agriculture & Food Safety 62 AI Regulation 3 Banking & Finance 247 Consumer Protection 42 Courts & Legal 355 Data Privacy & Cybersecurity 67 Defense & National Security 51 Education 20 Energy 105 Environment 85 Government & Legislation 271 Healthcare 136 Housing 16 Immigration 9 Insurance 56 Labor & Employment 114 Legal & Courts 1 Pharma & Drug Safety 101 Securities & Markets 84 Tax 65 Tax & Revenue 1 Telecom & Technology 47 Trade & Sanctions 124 Transportation 56

Get Data Privacy & Cybersecurity alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Optional. Personalizes your daily digest.

Free. Unsubscribe anytime.