Multiples vulnérabilités dans les produits VMware (07 septembre 2026)

Details

Source

CERT-FR Avis de sécurité (FR · national-cert · site)

Severity

unknown

Published

2026-09-07

Exploitation

Not in CISA KEV at last sync

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1125/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Low exploitation riskCVE-2026-543690.15% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all EPSS-scored CVEs.
• Moderate exploitation riskCVE-2024-96812.0% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 79% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-568620.57% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 45% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-338180.57% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 45% of all EPSS-scored CVEs.
• Moderate exploitation riskCVE-2024-469818.2% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 95% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-19650.26% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 18% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-545720.36% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 30% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-398220.23% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 14% of all EPSS-scored CVEs.

Referenced CVEs

+12 more CVEs referenced in this advisory.

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• high[UPDATE] [hoch] Apple Safari, macOS, iOS und iPadOS: Mehrere Schwachstellencert-bund
• high[UPDATE] [hoch] Golang Go: Mehrere Schwachstellencert-bund
• high[UPDATE] [hoch] Apple macOS (Tahoe, Sonoma und Sequoia): Mehrere Schwachstellencert-bund
• medium[UPDATE] [mittel] Apple iOS und iPadOS: Mehrere Schwachstellencert-bund
• medium[UPDATE] [mittel] Red Hat Enterprise Linux (acl): Mehrere Schwachstellen ermöglichen Privilegieneskalation und…cert-bund
• medium[UPDATE] [mittel] Golang Go: Mehrere Schwachstellen ermöglichen Offenlegung von Informationencert-bund
• medium[UPDATE] [mittel] Red Hat Enterprise Linux (p11-kit): Schwachstelle ermöglicht Denial of Servicecert-bund
• medium[UPDATE] [mittel] cURL: Mehrere Schwachstellencert-bund
• medium[UPDATE] [mittel] GNU libc: Mehrere Schwachstellencert-bund
• critical[UPDATE] [kritisch] GNU libc: Mehrere Schwachstellencert-bund
• medium[UPDATE] [mittel] cURL: Mehrere Schwachstellencert-bund
• medium[UPDATE] [mittel] cURL: Mehrere Schwachstellencert-bund

More from CERT-FR Avis de sécurité

• unknownMultiples vulnérabilités dans Microsoft Edge (15 septembre 2026)2026-09-15
• unknownVulnérabilité dans Microsoft Windows (15 septembre 2026)2026-09-15
• unknownMultiples vulnérabilités dans les produits Cisco (15 septembre 2026)2026-09-15
• unknownMultiples vulnérabilités dans les produits Apple (15 septembre 2026)2026-09-15
• unknownMultiples vulnérabilités dans MISP (14 septembre 2026)2026-09-14