Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

28 results · Clear filters · Feed

  • Critical max 10.0
    MSRC-CVE-2026-69836 1 CVE 1 exploited rev. 2

    Microsoft Entra ID Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    first Aug 20, 2026
  • Critical max 9.8
    MSRC-CVE-2026-33824 1 CVE 1 exploited rev. 2

    Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Apr 14, 2026
  • Critical max 9.8
    MSRC-CVE-2026-58644 1 CVE 1 exploited rev. 3

    Microsoft SharePoint Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Jul 14, 2026
  • Critical max 8.1
    MSRC-CVE-2026-42897 1 CVE 1 exploited rev. 4

    Microsoft Exchange Server Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first May 14, 2026
  • Critical max 9.1
    MSRC-CVE-2026-55040 1 CVE 1 exploited

    Microsoft SharePoint Server Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  • Critical max 9.8
    MSRC-CVE-2026-50522 1 CVE 1 exploited

    Microsoft SharePoint Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  • Critical max 9.8
    MSRC-CVE-2025-59287 1 CVE 1 exploited rev. 4

    Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Oct 14, 2025
  • Critical max 9.8
    MSRC-CVE-2025-53770 1 CVE 1 exploited rev. 6

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Jul 8, 2025
  • Critical max 8.8
    MSRC-CVE-2025-49704 1 CVE 1 exploited

    Microsoft SharePoint Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  • Critical max 8.2
    MSRC-CVE-2025-24989 1 CVE 1 exploited rev. 2

    Microsoft Power Pages Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Feb 11, 2025
  • Critical max 8.7
    MSRC-CVE-2024-49035 1 CVE 1 exploited rev. 2

    Partner.Microsoft.Com Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Not required.

    first Nov 12, 2024
  • Critical max 9.8
    MSRC-CVE-2024-43468 1 CVE 1 exploited

    Microsoft Configuration Manager Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Critical max 9.8
    MSRC-CVE-2024-21410 1 CVE 1 exploited rev. 4

    Microsoft Exchange Server Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Feb 13, 2024
  • Critical max 9.8
    MSRC-CVE-2024-21413 1 CVE 1 exploited rev. 3

    Microsoft Outlook Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Feb 13, 2024
  • Critical max 9.8
    MSRC-CVE-2023-29357 1 CVE 1 exploited rev. 2

    Microsoft SharePoint Server Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Jun 13, 2023
  • Critical max 8.8
    MSRC-CVE-2021-34527 1 CVE 1 exploited rev. 11

    Windows Print Spooler Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    first Jul 1, 2021
  • Critical max 7.2
    MSRC-CVE-2023-24955 1 CVE 1 exploited

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  • Critical max 8.8
    MSRC-CVE-2022-26923 1 CVE 1 exploited rev. 4

    Active Directory Domain Services Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first May 10, 2022
  • Critical max 9.8
    MSRC-CVE-2023-23397 1 CVE 1 exploited rev. 4

    Microsoft Outlook Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Mar 14, 2023
  • Critical max 8.8
    MSRC-CVE-2022-41080 1 CVE 1 exploited rev. 2

    Microsoft Exchange Server Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Nov 8, 2022
  • Critical max 8.8
    MSRC-CVE-2022-41040 1 CVE 1 exploited rev. 5

    Microsoft Exchange Server Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Sep 13, 2022
  • Critical max 8.8
    MSRC-CVE-2022-41128 1 CVE 1 exploited

    Windows Scripting Languages Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  • Critical max 9.1
    MSRC-CVE-2021-34473 1 CVE 1 exploited

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

  • Critical max 6.8
    MSRC-CVE-2021-34448 1 CVE 1 exploited

    Scripting Engine Memory Corruption Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  • Critical max 7.8
    MSRC-CVE-2021-27065 1 CVE 1 exploited rev. 6

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Mar 2, 2021
  • Critical max 7.8
    MSRC-CVE-2021-26857 1 CVE 1 exploited rev. 6

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Mar 2, 2021
  • Critical max 9.1
    MSRC-CVE-2021-26855 1 CVE 1 exploited rev. 6

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Mar 2, 2021
  • Critical max 8.8
    MSRC-CVE-2021-26411 1 CVE 1 exploited

    Internet Explorer Memory Corruption Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.