# CERT-FR Details Microsoft Multi-Product Flaws

Published: 2026-10-16 · Severity: routine · Sectors: technology
Canonical: https://vorant.io/reports/1e7c5984-fb17-5b3b-abdd-ae99a4f8834d/cert-fr-details-microsoft-multi-product-flaws

> CERT-FR advisory covers multiple Microsoft vulnerabilities including SharePoint, Visual Studio, and .NET components allowing RCE, privilege escalation and DoS.

CERT-FR published an advisory consolidating four CVEs affecting several Microsoft products and libraries: Microsoft Identity Client for NodeJS, SharePoint Server Subscription Edition, Visual Studio 2022/2026, microsoft-identity-web, and System.Formats.Cbor (multiple .NET versions). The vulnerabilities collectively allow attackers to achieve remote code execution, privilege escalation, remote denial of service, and confidentiality breaches depending on the specific flaw and affected component.

No in-the-wild exploitation is mentioned in the advisory. CERT-FR directs defenders to the corresponding Microsoft Security Response Center (MSRC) bulletins for patch details and affected version ranges. Organizations running SharePoint Server, Visual Studio, or applications using the listed NuGet/npm packages (microsoft-identity-web, System.Formats.Cbor, Identity Client for NodeJS) should prioritize patching per the vendor's guidance, particularly given the RCE and privilege escalation impacts noted for some of the four CVEs.

This is a routine CERT-FR vulnerability roundup referencing Microsoft's own October 2026 patch cycle disclosures; it is not independent research but a consolidated notice pointing to official remediation sources.

## Mentioned in this report

- Vulnerabilities: CVE-2026-108452, CVE-2026-109461, CVE-2026-109468, CVE-2026-80092

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1332

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/1e7c5984-fb17-5b3b-abdd-ae99a4f8834d/cert-fr-details-microsoft-multi-product-flaws.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup