# CERT-FR advises Microsoft product patches across multiple vectors

Published: 2026-08-12 · Severity: routine
Canonical: https://vorant.io/reports/85db5c29-d138-5141-bd5b-010f7d067bbd/cert-fr-advises-microsoft-product-patches-across-multiple-vectors

> CERT-FR advisory on 60 vulnerabilities spanning Exchange, SharePoint, Dynamics, Teams, and developer tools requiring immediate patching.

French CERT (CERT-FR) has published a security advisory covering multiple vulnerabilities discovered across a broad range of Microsoft products released on 11 August 2026. The affected products span enterprise infrastructure (Exchange Server, SharePoint Server), business applications (Dynamics 365 Business Central), collaboration platforms (Microsoft Teams), development tools (Visual Studio, Visual Studio Code), system utilities (PowerShell), and cloud services (OneDrive, Entra Connect, Microsoft Defender for Endpoint). The vulnerabilities enable remote code execution, privilege escalation, denial of service, data confidentiality and integrity breaches, and security policy bypass. Affected versions are detailed for each product line, with patch versions specified. This is a typical monthly patch advisory from the primary vendor authority; defenders must prioritize updates based on which products are deployed in their environment and the specific attack surface each presents.

## Mentioned in this report

- Vulnerabilities: CVE-2026-40375, CVE-2026-47285, CVE-2026-54123, CVE-2026-54981, CVE-2026-57105, CVE-2026-58612, CVE-2026-58639, CVE-2026-58650, CVE-2026-59113, CVE-2026-59119, CVE-2026-62827, CVE-2026-62829, CVE-2026-62837, CVE-2026-62839, CVE-2026-62871, CVE-2026-62886, CVE-2026-62897, CVE-2026-62898, CVE-2026-62899, CVE-2026-62900, CVE-2026-62901, CVE-2026-62902, CVE-2026-62909, CVE-2026-62910, CVE-2026-62911, CVE-2026-62912, CVE-2026-62913, CVE-2026-62914, CVE-2026-62915, CVE-2026-62917, CVE-2026-63512, CVE-2026-63514, CVE-2026-63516, CVE-2026-63520, CVE-2026-64897, CVE-2026-64900, CVE-2026-64901, CVE-2026-64902, CVE-2026-64916, CVE-2026-64921

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/85db5c29-d138-5141-bd5b-010f7d067bbd/cert-fr-advises-microsoft-product-patches-across-multiple-vectors.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup