Changeflow GovPing Data Privacy & Cybersecurity Multiples vulnérabilités dans les produits Micr...
Priority review Notice Added Final

Multiples vulnérabilités dans les produits Microsoft

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published
Detected
Email

Summary

CERT-FR published Avis CERTFR-2026-AVI-0466 on 21 April 2026, alerting that multiple unspecified vulnerabilities affect azl3 gh version 2.62.0-13 (prior to 2.62.0-14) and azl3 moby-engine version 25.0.3-15 (prior to 25.0.3-16). The vulnerabilities were sourced from Microsoft security bulletins CVE-2026-32288 and CVE-2026-39882 dated 11 April 2026. Organizations using these products should refer to Microsoft's security bulletin and apply available patches.

Published by CERT-FR on cert.ssi.gouv.fr . Detected, standardized, and enriched by GovPing. Review our methodology and editorial standards .
View original document View source feed page

What changed

CERT-FR published a security advisory detailing multiple unspecified vulnerabilities affecting two specific azl3 software package versions. The affected products are azl3 gh (versions prior to 2.62.0-14) and azl3 moby-engine (versions prior to 25.0.3-16). The risk level is characterized as unspecified by the editor (Microsoft), and no specific exploitation details are provided in the advisory. The only recommended mitigation is to obtain patches from Microsoft's official security bulletins referenced by CVE-2026-32288 and CVE-2026-39882.

Organizations running these software packages should identify their current versions and apply the updated patches (2.62.0-14 and 25.0.3-16 respectively) as soon as practicable. Since no specific attack vectors or impact severity are disclosed, security teams should treat these as routine patch-management activities rather than emergency incidents.

What to do next

  1. Consulter le bulletin de sécurité Microsoft pour l'obtention des correctifs

Archived snapshot

Apr 21, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 21 avril 2026 N° CERTFR-2026-AVI-0466 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans les produits Microsoft

Gestion du document

| Référence | CERTFR-2026-AVI-0466 |
| Titre | Multiples vulnérabilités dans les produits Microsoft |
| Date de la première version | 21 avril 2026 |
| Date de la dernière version | 21 avril 2026 |
| Source(s) | Bulletin de sécurité Microsoft CVE-2026-32288 du 11 avril 2026
Bulletin de sécurité Microsoft CVE-2026-39882 du 11 avril 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.

Risque

  • Non spécifié par l'éditeur

Systèmes affectés

  • azl3 gh 2.62.0-13 versions antérieures à 2.62.0-14
  • azl3 moby-engine 25.0.3-15 versions antérieures à 25.0.3-16

Résumé

De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation

Gestion détaillée du document

  1. le 21 avril 2026 Version initiale

Related changes

Favicon for www.cert.ssi.gouv.fr Multiples vulnérabilités dans les produits Splunk, risque d'exécution de code arbitraire
Priority review Apr 16, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiples vulnérabilités dans les produits Microsoft - CERTFR-2026-AVI-0463
Priority review Apr 20, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiples vulnérabilités dans les produits Microsoft
Routine Apr 17, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity

Get daily alerts for CERT-FR Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

Source

Favicon for www.cert.ssi.gouv.fr
CERT-FR Security Advisories cert.ssi.gouv.fr/avis
Data Privacy & Cybersecurity

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-FR.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Press inquiries →

Classification

Agency
CERT-FR
Published
April 21st, 2026
Instrument
Notice
Branch
Executive
Source language
fr
Legal weight
Non-binding
Stage
Final
Change scope
Minor

Who this affects

Applies to
Technology companies Government agencies
Industry sector
5112 Software & Technology
Activity scope
Vulnerability disclosure Patch management
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Data Privacy

Browse Categories

Agriculture & Food Safety 73 AI Regulation 3 Banking & Finance 414 Consumer Protection 89 Courts & Legal 411 Data Privacy & Cybersecurity 90 Defense & National Security 53 Education 55 Energy 100 Environment 152 Gaming 2 Government & Legislation 431 Healthcare 15 Healthcare & Life Sciences 375 Immigration 10 Insurance 76 Labor & Employment 138 Pharma & Drug Safety 21 Professional Licensing 8 Real Estate & Housing 78 Securities & Markets 154 Tax 78 Telecom & Technology 47 Trade & Sanctions 141 Transportation 91

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!