{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio-net: fix received length check in big packets\n\nSince commit 4959aebba8c0 (\"virtio-net: use mtu size as buffer length\nfor big packets\"), when guest gso is off, the allocated size for big\npackets is not MAX_SKB_FRAGS * PAGE_SIZE anymore but depends on\nnegotiated MTU. The number of allocated frags for big packets is stored\nin vi-\u003ebig_packets_num_skbfrags.\n\nBecause the host announced buffer length can be malicious (e.g. the host\nvhost_net driver\u0027s get_rx_bufs is modified to announce incorrect\nlength), we need a check in virtio_net receive path. Currently, the\ncheck is not adapted to the new change which can lead to NULL page\npointer dereference in the below while loop when receiving length that\nis larger than the allocated one.\n\nThis commit fixes the received length check corresponding to the new\nchange."
    }
  ],
  "id": "CVE-2025-40292",
  "lastModified": "2025-12-08T18:26:49.133",
  "metrics": {},
  "published": "2025-12-08T01:16:01.160",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/0c716703965ffc5ef4311b65cb5d84a703784717"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/3e9d89f2ecd3636bd4cbdfd0b2dfdaf58f9882e2"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/82f9028e83944a9eee5229cbc6fee9be1de8a62d"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/82fe78065450d2d07f36a22e2b6b44955cf5ca5b"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/946dec89c41726b94d31147ec528b96af0be1b5a"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Awaiting Analysis"
}

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2025-40292 virtio-net: fix received length check in big packets - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-40292.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "virtio-net: fix received length check in big packets",
    "tracking": {
      "current_release_date": "2025-12-09T01:01:52.000Z",
      "generator": {
        "date": "2025-12-09T08:19:57.243Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2025-40292",
      "initial_release_date": "2025-12-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2025-12-09T01:01:52.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "3.0",
                "product": {
                  "name": "Azure Linux 3.0",
                  "product_id": "17084"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "azl3 kernel 6.6.112.1-2",
                "product": {
                  "name": "azl3 kernel 6.6.112.1-2",
                  "product_id": "1"
                }
              }
            ],
            "category": "product_name",
            "name": "kernel"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 kernel 6.6.112.1-2 as a component of Azure Linux 3.0",
          "product_id": "17084-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17084"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-40292",
      "notes": [
        {
          "category": "general",
          "text": "Linux",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "known_affected": [
          "17084-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-40292 virtio-net: fix received length check in big packets - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-40292.json"
        }
      ],
      "remediations": [
        {
          "category": "none_available",
          "date": "2025-12-09T01:01:52.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-1"
          ]
        }
      ],
      "title": "virtio-net: fix received length check in big packets"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2025-40292"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-12-08T01:16:01Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio-net: fix received length check in big packets\n\nSince commit 4959aebba8c0 (\"virtio-net: use mtu size as buffer length\nfor big packets\"), when guest gso is off, the allocated size for big\npackets is not MAX_SKB_FRAGS * PAGE_SIZE anymore but depends on\nnegotiated MTU. The number of allocated frags for big packets is stored\nin vi-\u003ebig_packets_num_skbfrags.\n\nBecause the host announced buffer length can be malicious (e.g. the host\nvhost_net driver\u0027s get_rx_bufs is modified to announce incorrect\nlength), we need a check in virtio_net receive path. Currently, the\ncheck is not adapted to the new change which can lead to NULL page\npointer dereference in the below while loop when receiving length that\nis larger than the allocated one.\n\nThis commit fixes the received length check corresponding to the new\nchange.",
  "id": "GHSA-3mv7-84x4-8439",
  "modified": "2025-12-08T03:31:00Z",
  "published": "2025-12-08T03:31:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-40292"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/0c716703965ffc5ef4311b65cb5d84a703784717"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/3e9d89f2ecd3636bd4cbdfd0b2dfdaf58f9882e2"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/82f9028e83944a9eee5229cbc6fee9be1de8a62d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/82fe78065450d2d07f36a22e2b6b44955cf5ca5b"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/946dec89c41726b94d31147ec528b96af0be1b5a"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "cbl2 cni-plugins 1.3.0-9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "cbl2 cf-cli 8.4.0-25",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "cbl2 kube-vip-cloud-provider 0.0.2-23",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 httpd 2.4.65-1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 cni-plugins 1.4.0-3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 kata-containers-cc 3.15.0.aks0-5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "cbl2 dcos-cli 1.2.0-22",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "cbl2 jx 3.2.236-23",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "cbl2 cert-manager 1.11.2-24",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 dcos-cli 1.2.0-19",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 kubernetes 1.30.10-16",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 flannel 0.24.2-21",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 kernel 6.6.112.1-2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "cbl2 influxdb 2.6.1-24",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "cbl2 containerized-data-importer 1.55.0-26",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 kernel 6.6.117.1-1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "cbl2 flannel 0.14.0-26",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "cbl2 libcontainers-common 20210626-7",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "cbl2 kata-containers-cc 3.2.0.azl2-8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 containerized-data-importer 1.57.0-17",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "cbl2 kubevirt 0.59.0-31",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "cbl2 moby-compose 2.17.3-12",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "cbl2 cri-o 1.22.3-17",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "cbl2 httpd 2.4.65-1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 kata-containers 3.19.1.kata2-2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "cbl2 kubernetes 1.28.4-19",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "cbl2 moby-buildx 0.7.1-26",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "cbl2 local-path-provisioner 0.0.21-19",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "cbl2 prometheus 2.37.9-5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 influxdb 2.7.5-8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "cbl2 kata-containers 3.2.0.azl2-7",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 libcontainers-common 20240213-3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-40273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40273"
    },
    {
      "name": "CVE-2025-59775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59775"
    },
    {
      "name": "CVE-2025-40287",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40287"
    },
    {
      "name": "CVE-2025-40294",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40294"
    },
    {
      "name": "CVE-2025-40308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40308"
    },
    {
      "name": "CVE-2025-40311",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40311"
    },
    {
      "name": "CVE-2025-40322",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40322"
    },
    {
      "name": "CVE-2025-66200",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66200"
    },
    {
      "name": "CVE-2025-65637",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-65637"
    },
    {
      "name": "CVE-2025-40277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40277"
    },
    {
      "name": "CVE-2025-40272",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40272"
    },
    {
      "name": "CVE-2025-40269",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40269"
    },
    {
      "name": "CVE-2025-40289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40289"
    },
    {
      "name": "CVE-2025-40292",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40292"
    },
    {
      "name": "CVE-2025-65082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-65082"
    },
    {
      "name": "CVE-2025-40279",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40279"
    },
    {
      "name": "CVE-2023-53749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-53749"
    },
    {
      "name": "CVE-2025-40283",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40283"
    },
    {
      "name": "CVE-2025-40324",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40324"
    },
    {
      "name": "CVE-2025-40321",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40321"
    },
    {
      "name": "CVE-2025-40282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40282"
    },
    {
      "name": "CVE-2025-40301",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40301"
    },
    {
      "name": "CVE-2025-40310",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40310"
    },
    {
      "name": "CVE-2025-40280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40280"
    },
    {
      "name": "CVE-2025-40284",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40284"
    },
    {
      "name": "CVE-2025-40305",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40305"
    },
    {
      "name": "CVE-2025-40297",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40297"
    },
    {
      "name": "CVE-2025-40288",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40288"
    },
    {
      "name": "CVE-2025-40281",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40281"
    },
    {
      "name": "CVE-2025-40304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40304"
    },
    {
      "name": "CVE-2025-40268",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40268"
    },
    {
      "name": "CVE-2025-40303",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40303"
    },
    {
      "name": "CVE-2025-40323",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40323"
    },
    {
      "name": "CVE-2025-40275",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40275"
    },
    {
      "name": "CVE-2025-40319",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40319"
    }
  ],
  "initial_release_date": "2025-12-09T00:00:00",
  "last_revision_date": "2025-12-09T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-1082",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-12-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Microsoft. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
  "vendor_advisories": [
    {
      "published_at": "2025-12-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40275",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40275"
    },
    {
      "published_at": "2025-12-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40319",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40319"
    },
    {
      "published_at": "2025-12-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40280",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40280"
    },
    {
      "published_at": "2025-12-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40304",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40304"
    },
    {
      "published_at": "2025-12-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40301",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40301"
    },
    {
      "published_at": "2025-12-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40272",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40272"
    },
    {
      "published_at": "2025-12-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40269",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40269"
    },
    {
      "published_at": "2025-12-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40277",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40277"
    },
    {
      "published_at": "2025-12-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-65082",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-65082"
    },
    {
      "published_at": "2025-12-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40284",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40284"
    },
    {
      "published_at": "2025-12-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40292",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40292"
    },
    {
      "published_at": "2025-12-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-65637",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-65637"
    },
    {
      "published_at": "2025-12-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40294",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40294"
    },
    {
      "published_at": "2025-12-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40297",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40297"
    },
    {
      "published_at": "2025-12-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40311",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40311"
    },
    {
      "published_at": "2025-12-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40303",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40303"
    },
    {
      "published_at": "2025-12-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2023-53749",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-53749"
    },
    {
      "published_at": "2025-12-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-59775",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59775"
    },
    {
      "published_at": "2025-12-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40310",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40310"
    },
    {
      "published_at": "2025-12-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40281",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40281"
    },
    {
      "published_at": "2025-12-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40308",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40308"
    },
    {
      "published_at": "2025-12-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40283",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40283"
    },
    {
      "published_at": "2025-12-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40323",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40323"
    },
    {
      "published_at": "2025-12-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40279",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40279"
    },
    {
      "published_at": "2025-12-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40305",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40305"
    },
    {
      "published_at": "2025-12-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40288",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40288"
    },
    {
      "published_at": "2025-12-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40273",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40273"
    },
    {
      "published_at": "2025-12-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40268",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40268"
    },
    {
      "published_at": "2025-12-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40324",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40324"
    },
    {
      "published_at": "2025-12-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40289",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40289"
    },
    {
      "published_at": "2025-12-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40322",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40322"
    },
    {
      "published_at": "2025-12-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40282",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40282"
    },
    {
      "published_at": "2025-12-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40321",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40321"
    },
    {
      "published_at": "2025-12-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-66200",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-66200"
    },
    {
      "published_at": "2025-12-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40287",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40287"
    }
  ]
}