Veille CVE

Mercredi 20 mai 2026

3 CVE

Critique 1 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2026-9082 9.8 Critique Exploitée

    Drupal core · Drupal drupal

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection. This issue affects Drupal core: from 8.9.0 before 10.4.10, from 10.5.0 before 10.5.10, from 10.6.0 before 10.6.9, from 11.0.0 before 11.1.10, from 11.2.0 before 11.2.12, from 11.3.0 before 11.3.10.

  2. CVE-2026-45498 7.5 Élevée Exploitée

    Microsoft Defender Antimalware Platform

    Microsoft Defender Denial of Service Vulnerability

  3. CVE-2026-41091 7.8 Élevée Exploitée

    Microsoft Malware Protection Engine

    Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.