Veille CVE

Mardi 13 octobre 2026

4 CVE

  1. CVE-2026-97788 7.5 Élevée

    Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

    Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

  2. CVE-2026-96222 7.4 Élevée

    Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

    Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

  3. CVE-2026-85790 5.9 Moyenne

    Microsoft Visual Studio 2022 version 17.14 · Microsoft Visual Studio 2026 version 18.10 · Microsoft.Native.Quic.MsQuic.Schannel · Microsoft Windows 11 Version 23H2

    Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

  4. CVE-2026-105016 9.8 Critique

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.