Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

1,056 results · Clear filters · Feed

  • Critical max 8.1
    MSRC-CVE-2026-42987 1 CVE

    Windows Deployment Services (WDS) Remote Code Execution

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.8
    MSRC-CVE-2026-42985 1 CVE

    Remote Desktop Client Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • Critical max 7.5
    MSRC-CVE-2026-44801 1 CVE

    Remote Desktop Client Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.5
    MSRC-CVE-2026-44799 1 CVE

    Remote Desktop Client Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.5
    MSRC-CVE-2026-42992 1 CVE

    Remote Desktop Client Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.4
    MSRC-CVE-2026-44810 1 CVE

    Microsoft Cryptographic Services Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.8
    MSRC-CVE-2026-48574 1 CVE

    Windows Media Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.2
    MSRC-CVE-2026-45476 1 CVE

    Microsoft Azure Network Adapter Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2026-26142 1 CVE

    Nuance PowerScribe Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.5
    MSRC-CVE-2026-48563 1 CVE

    Remote Desktop Client Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.5
    MSRC-CVE-2026-47654 1 CVE

    Remote Desktop Client Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • Critical max 8.2
    MSRC-CVE-2026-47652 1 CVE

    Windows Hyper-V Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.4
    MSRC-CVE-2026-47635 1 CVE

    Microsoft Outlook and Word Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.8
    MSRC-CVE-2026-32193 1 CVE

    Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2026-47291 1 CVE

    HTTP.sys Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • Critical max 8.8
    MSRC-CVE-2026-47289 1 CVE

    Remote Desktop Client Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.1
    MSRC-CVE-2026-47288 1 CVE

    Windows Kerberos Key Distribution Center (KDC) Remote Code Execution

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2026-45657 1 CVE

    Windows Kernel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.8
    MSRC-CVE-2026-45648 1 CVE

    Windows Active Directory Domain Services Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • Critical max 8.4
    MSRC-CVE-2026-45641 1 CVE

    Windows Hyper-V Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.4
    MSRC-CVE-2026-45607 1 CVE

    Windows Hyper-V Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.8
    MSRC-CVE-2026-33828 1 CVE

    Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • Critical max 9.1
    MSRC-CVE-2026-48579 1 CVE

    Microsoft Exchange Online Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 6.5
    MSRC-CVE-2026-47655 1 CVE

    Microsoft Graph Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 6.5
    MSRC-CVE-2026-47644 1 CVE

    Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    Microsoft
  • Critical max 7.7
    MSRC-CVE-2026-45497 1 CVE

    Microsoft M365 Copilot Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 6.5
    MSRC-CVE-2026-42824 1 CVE

    M365 Copilot Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 10.0
    MSRC-CVE-2026-48567 1 CVE

    Azure HorizonDB Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 8.4
    MSRC-CVE-2026-40361 1 CVE rev. 2

    Microsoft Outlook and Word Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first May 12, 2026
  • Critical max 9.9
    MSRC-CVE-2026-42898 1 CVE rev. 4

    Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
    first May 12, 2026
  • Critical max 8.1
    MSRC-CVE-2026-45584 1 CVE rev. 2

    Microsoft Defender Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited. Customer action: Required.

    Microsoft
    first May 19, 2026
  • Critical max 7.5
    MSRC-CVE-2026-23663 1 CVE

    Microsoft Global Secure Access (GSA) Information Disclosure Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 10.0
    MSRC-CVE-2026-42901 1 CVE

    Microsoft Entra ID Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 10.0
    MSRC-CVE-2026-41104 1 CVE

    Microsoft Planetary Computer Pro Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 9.1
    MSRC-CVE-2026-33843 1 CVE

    Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 7.7
    MSRC-CVE-2026-26147 1 CVE

    Azure Stack HCI Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 9.3
    MSRC-CVE-2026-41090 1 CVE

    Microsoft Copilot Tampering Vulnerability

    Impact: Tampering. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 6.5
    MSRC-CVE-2026-42827 1 CVE

    M365 Copilot Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 10.0
    MSRC-CVE-2026-47280 1 CVE

    Azure Resource Manager Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 9.9
    MSRC-CVE-2026-40411 1 CVE

    Azure Virtual Network Gateway Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft