https://cyberveille.ch/tags/cve-2026-40376/ Recent content in CVE-2026-40376 on CyberVeille Hugo -- 0.146.0 fr-fr Cyberveille CC BY-NC-SA 4.0 Sat, 13 Jun 2026 00:00:00 +0000 https://cyberveille.ch/posts/2026-06-13-patch-tuesday-juin-2026-microsoft-corrige-6-zero-days-et-200-vulnerabilites/ Sat, 13 Jun 2026 00:00:00 +0000 https://cyberveille.ch/posts/2026-06-13-patch-tuesday-juin-2026-microsoft-corrige-6-zero-days-et-200-vulnerabilites/ <p>📅 <strong>Source</strong> : BleepingComputer — <strong>Date</strong> : 9 juin 2026</p> <p>Microsoft a publié son <strong>Patch Tuesday de juin 2026</strong>, corrigeant <strong>200 vulnérabilités</strong> dont <strong>6 zero-days</strong> sur l&rsquo;ensemble de son écosystème logiciel. Ce bulletin massif couvre des dizaines de composants Windows, des produits cloud Azure, des applications Office, Exchange Server, Visual Studio Code et bien d&rsquo;autres.</p> <h2 id="-vulnérabilités-critiques-notables">🔴 Vulnérabilités critiques notables</h2> <ul> <li><strong>CVE-2026-45648</strong> — Windows Active Directory Domain Services <strong>Remote Code Execution</strong> (Critical)</li> <li><strong>CVE-2026-45476</strong> — Microsoft Azure Network Adapter (Linux MANA Driver) <strong>Elevation of Privilege</strong> (Critical)</li> <li><strong>CVE-2026-33828</strong> — Windows Device Health Attestation <strong>Elevation of Privilege</strong> (Critical)</li> <li><strong>CVE-2026-32193</strong> — Azure Kubernetes Service <strong>Remote Code Execution</strong> (Critical)</li> <li><strong>CVE-2026-45463 / CVE-2026-45474 / CVE-2026-45472 / CVE-2026-45458 / CVE-2026-47635 / CVE-2026-45456 / CVE-2026-45461</strong> — <strong>Microsoft Office Remote Code Execution</strong> multiples (Critical)</li> <li><strong>CVE-2026-42985 / CVE-2026-47289 / CVE-2026-47654 / CVE-2026-42992 / CVE-2026-44801 / CVE-2026-44799 / CVE-2026-48563</strong> — <strong>Remote Desktop Client Remote Code Execution</strong> multiples (Critical)</li> <li><strong>CVE-2026-47288</strong> — Windows Kerberos KDC <strong>Remote Code Execution</strong> (Critical)</li> <li><strong>CVE-2026-47291</strong> — HTTP.sys <strong>Remote Code Execution</strong> (Critical)</li> <li><strong>CVE-2026-45641 / CVE-2026-47652 / CVE-2026-45607</strong> — Windows <strong>Hyper-V Remote Code Execution</strong> (Critical)</li> <li><strong>CVE-2026-44812 / CVE-2026-44803</strong> — Windows <strong>Graphics Component Remote Code Execution</strong> (Critical)</li> <li><strong>CVE-2026-44815</strong> — DHCP Client Service <strong>Remote Code Execution</strong> (Critical)</li> <li><strong>CVE-2026-42987</strong> — Windows Deployment Services <strong>Remote Code Execution</strong> (Critical)</li> <li><strong>CVE-2026-44810</strong> — Microsoft Cryptographic Services <strong>Elevation of Privilege</strong> (Critical)</li> <li><strong>CVE-2026-45657</strong> — Windows Kernel <strong>Remote Code Execution</strong> (Critical)</li> <li><strong>CVE-2026-48574</strong> — Windows Media <strong>Remote Code Execution</strong> (Critical)</li> <li><strong>CVE-2025-10263</strong> — ARM kernel vulnerability (Critical)</li> <li><strong>CVE-2026-26142</strong> — Nuance PowerScribe <strong>Remote Code Execution</strong> (Critical)</li> </ul> <h2 id="-composants-les-plus-impactés">🟠 Composants les plus impactés</h2> <ul> <li><strong>Microsoft Office</strong> : ~15 CVE dont plusieurs RCE critiques (Outlook, Word, Excel, SharePoint)</li> <li><strong>Remote Desktop Client</strong> : 11 CVE dont 7 critiques RCE</li> <li><strong>Windows DWM Core Library</strong> : 11 CVE (EoP, Info Disclosure)</li> <li><strong>Microsoft SharePoint</strong> : ~20 CVE (Spoofing, RCE)</li> <li><strong>Windows Ancillary Function Driver for WinSock</strong> : 7 CVE EoP</li> <li><strong>Windows Secure Boot</strong> : 8 CVE Security Feature Bypass</li> <li><strong>Windows Push Notifications</strong> : 8 CVE (EoP, Info Disclosure)</li> <li><strong>Azure Stack Edge</strong> : 2 CVE (RCE, Spoofing)</li> <li><strong>Visual Studio Code</strong> : 6 CVE (EoP, Info Disclosure, Tampering, SFB)</li> <li><strong>Exchange Server</strong> : 7 CVE (Spoofing, Info Disclosure, EoP, RCE)</li> </ul> <h2 id="-types-de-vulnérabilités">📋 Types de vulnérabilités</h2> <ul> <li><strong>Remote Code Execution (RCE)</strong> : majoritaire, nombreuses failles critiques</li> <li><strong>Elevation of Privilege (EoP)</strong> : très répandu sur les composants Windows</li> <li><strong>Security Feature Bypass</strong> : BitLocker, Secure Boot, UEFI, MOTW</li> <li><strong>Spoofing</strong> : Exchange, SharePoint, Bing, NTLM</li> <li><strong>Information Disclosure</strong> : Office, RDP, Push Notifications</li> <li><strong>Denial of Service</strong> : HTTP.sys, ASP.NET Core, Kerberos</li> </ul> <p>📌 <strong>Type d&rsquo;article</strong> : Patch de sécurité — bulletin mensuel Microsoft. But principal : documenter l&rsquo;ensemble des correctifs publiés lors du Patch Tuesday de juin 2026 pour permettre aux équipes de sécurité de prioriser les mises à jour.</p>