Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

1,056 results · Clear filters · Feed

  • Critical max 8.0
    MSRC-CVE-2026-35425 1 CVE

    Azure API Management (APIM) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 9.1
    MSRC-CVE-2026-56160 1 CVE

    Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 9.9
    MSRC-CVE-2026-54120 1 CVE

    Microsoft Surface Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2026-56165 1 CVE

    Microsoft Account Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    Microsoft
  • Critical max 8.5
    MSRC-CVE-2026-56167 1 CVE

    Azure AI Search Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2026-58644 1 CVE 1 exploited rev. 3

    Microsoft SharePoint Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Jul 14, 2026
  • Critical max 8.1
    MSRC-CVE-2026-42897 1 CVE 1 exploited rev. 4

    Microsoft Exchange Server Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first May 14, 2026
  • Critical max 7.8
    MSRC-CVE-2026-58542 1 CVE

    Windows Media Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • Critical max 8.8
    MSRC-CVE-2026-57087 1 CVE

    Microsoft Windows Media Foundation Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 9.9
    MSRC-CVE-2026-57092 1 CVE

    Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.8
    MSRC-CVE-2026-57094 1 CVE

    Microsoft Windows Media Foundation Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.8
    MSRC-CVE-2026-57090 1 CVE

    Microsoft Windows Media Foundation Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.8
    MSRC-CVE-2026-56189 1 CVE

    Microsoft Windows Media Foundation Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2026-55944 1 CVE

    Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • Critical max 7.8
    MSRC-CVE-2026-55120 1 CVE

    Microsoft PowerPoint Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.8
    MSRC-CVE-2026-55140 1 CVE

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 9.1
    MSRC-CVE-2026-55040 1 CVE 1 exploited

    Microsoft SharePoint Server Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • Critical max 7.8
    MSRC-CVE-2026-55056 1 CVE

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.8
    MSRC-CVE-2026-55132 1 CVE

    Microsoft Word Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.8
    MSRC-CVE-2026-55127 1 CVE

    Microsoft Word Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.8
    MSRC-CVE-2026-55033 1 CVE

    Microsoft Word Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.8
    MSRC-CVE-2026-55049 1 CVE

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.4
    MSRC-CVE-2026-55045 1 CVE

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.8
    MSRC-CVE-2026-55022 1 CVE

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.8
    MSRC-CVE-2026-55018 1 CVE

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.8
    MSRC-CVE-2026-50467 1 CVE

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.8
    MSRC-CVE-2026-50314 1 CVE

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2026-55010 1 CVE

    Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Not required.

    Microsoft
  • Critical max 8.8
    MSRC-CVE-2026-54121 1 CVE

    Active Directory Certificate Services Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.2
    MSRC-CVE-2026-50680 1 CVE

    Windows Hyper-V Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2026-50518 1 CVE

    Windows DHCP Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • Critical max 8.8
    MSRC-CVE-2026-50444 1 CVE

    Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.8
    MSRC-CVE-2026-50474 1 CVE

    Remote Desktop Client Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • Critical max 8.8
    MSRC-CVE-2026-50382 1 CVE

    DirectX Graphics Kernel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.8
    MSRC-CVE-2026-50370 1 CVE

    DHCP Server Service Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • Critical max 7.8
    MSRC-CVE-2026-50327 1 CVE

    Windows Media Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • Critical max 9.6
    MSRC-CVE-2026-50380 1 CVE

    Windows GDI+ Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.0
    MSRC-CVE-2026-50392 1 CVE

    Windows Secure Kernel Mode Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.8
    MSRC-CVE-2026-49796 1 CVE

    Windows GDI+ Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.8
    MSRC-CVE-2026-48564 1 CVE

    DHCP Server Service Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft