Veille CVE

Mardi 13 octobre 2026

2 CVE

  1. CVE-2026-85916 5.5 Moyenne

    Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1

    Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally.

  2. CVE-2026-100207 7.3 Élevée

    Microsoft Azure CycleCloud 8.9.1

    Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.