{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Microsoft Dynamics NAV 2018","product":{"name":"N/A","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)","product":{"name":"N/A","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Visual Studio 2019 version 16.10 (includes 16.0 - 16.9)","product":{"name":"N/A","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Dynamics 365 Business Central 2020 Release Wave 1 - Update 16.15","product":{"name":"N/A","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Visual Studio 2019 version 16.7 (includes 16.0 \u2013 16.6)","product":{"name":"N/A","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)","product":{"name":"N/A","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Dynamics NAV 2017","product":{"name":"N/A","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)","product":{"name":"N/A","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Malware Protection Engine","product":{"name":"N/A","vendor":{"name":"Microsoft","scada":false}}},{"description":"Visual Studio 2019 pour Mac version 8.10","product":{"name":"N/A","vendor":{"name":"Microsoft","scada":false}}},{"description":"Azure CycleCloud 7.9.10","product":{"name":"Azure","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Dynamics 365 (on-premises) version 9.1","product":{"name":"N/A","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft 365 Apps pour Enterprise pour syst\u00e8mes 32 bits","product":{"name":"N/A","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft 365 Apps pour Enterprise pour 64 bits Systems","product":{"name":"N/A","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Dynamics 365 Business Central 2020 Release Wave 2 - Update 17.9","product":{"name":"N/A","vendor":{"name":"Microsoft","scada":false}}},{"description":"Azure Active Directory Connect Provisioning Agent","product":{"name":"Azure","vendor":{"name":"Microsoft","scada":false}}},{"description":"Azure Sphere","product":{"name":"Azure","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Dynamics 365 (on-premises) version 9.0","product":{"name":"N/A","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Azure Active Directory Connect 2.0.X.Y","product":{"name":"Azure","vendor":{"name":"Microsoft","scada":false}}},{"description":"Azure CycleCloud 8.2.0","product":{"name":"Azure","vendor":{"name":"Microsoft","scada":false}}},{"description":"Dynamics 365 Business Central 2019 Spring Update","product":{"name":"N/A","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Azure Active Directory Connect 1.X.Y.Z","product":{"name":"Azure","vendor":{"name":"Microsoft","scada":false}}}],"affected_systems_content":null,"content":"## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2021-34471","url":"https://www.cve.org/CVERecord?id=CVE-2021-34471"},{"name":"CVE-2021-34478","url":"https://www.cve.org/CVERecord?id=CVE-2021-34478"},{"name":"CVE-2021-26428","url":"https://www.cve.org/CVERecord?id=CVE-2021-26428"},{"name":"CVE-2021-26423","url":"https://www.cve.org/CVERecord?id=CVE-2021-26423"},{"name":"CVE-2021-26430","url":"https://www.cve.org/CVERecord?id=CVE-2021-26430"},{"name":"CVE-2021-36946","url":"https://www.cve.org/CVERecord?id=CVE-2021-36946"},{"name":"CVE-2021-36943","url":"https://www.cve.org/CVERecord?id=CVE-2021-36943"},{"name":"CVE-2021-36941","url":"https://www.cve.org/CVERecord?id=CVE-2021-36941"},{"name":"CVE-2021-33762","url":"https://www.cve.org/CVERecord?id=CVE-2021-33762"},{"name":"CVE-2021-34524","url":"https://www.cve.org/CVERecord?id=CVE-2021-34524"},{"name":"CVE-2021-34485","url":"https://www.cve.org/CVERecord?id=CVE-2021-34485"},{"name":"CVE-2021-34532","url":"https://www.cve.org/CVERecord?id=CVE-2021-34532"},{"name":"CVE-2021-36950","url":"https://www.cve.org/CVERecord?id=CVE-2021-36950"},{"name":"CVE-2021-36949","url":"https://www.cve.org/CVERecord?id=CVE-2021-36949"},{"name":"CVE-2021-26429","url":"https://www.cve.org/CVERecord?id=CVE-2021-26429"}],"links":[],"reference":"CERTFR-2021-AVI-620","revisions":[{"description":"Version initiale","revision_date":"2021-08-11T00:00:00.000000"}],"risks":[{"description":"Usurpation d'identit\u00e9"},{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"},{"description":"D\u00e9ni de service"},{"description":"Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"},{"description":"\u00c9l\u00e9vation de privil\u00e8ges"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans <span\nclass=\"textit\">les produits Microsoft</span>. Elles permettent \u00e0 un\nattaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une ex\u00e9cution de\ncode \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, un d\u00e9ni\nde service et une usurpation d'identit\u00e9.\n","title":"Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Microsoft du 10 ao\u00fbt 2021","url":"https://portal.msrc.microsoft.com/fr-FR/security-guidance"}]}