Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

1,056 results · Clear filters · Feed

  • Critical max 7.8
    MSRC-CVE-2025-50176 1 CVE

    DirectX Graphics Kernel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2025-50165 1 CVE

    Windows Graphics Component Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.7
    MSRC-CVE-2025-53781 1 CVE

    Azure Virtual Machines Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    Microsoft
  • Critical max 8.2
    MSRC-CVE-2025-53787 1 CVE

    Microsoft 365 Copilot BizChat Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
    first Aug 12, 2025
  • Critical max 6.5
    MSRC-CVE-2025-53774 1 CVE

    Microsoft 365 Copilot BizChat Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    Microsoft
    first Aug 12, 2025
  • Critical max 10.0
    MSRC-CVE-2025-53767 1 CVE

    Azure OpenAI Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
    first Aug 12, 2025
  • Critical max 9.1
    MSRC-CVE-2025-53792 1 CVE

    Azure Portal Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
    first Aug 12, 2025
  • Critical max 9.8
    MSRC-CVE-2025-53770 1 CVE 1 exploited rev. 6

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Jul 8, 2025
  • Critical max 8.8
    MSRC-CVE-2022-44693 1 CVE rev. 2

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Dec 13, 2022
  • Critical max 8.7
    MSRC-CVE-2025-53762 1 CVE

    Microsoft Purview Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
    first Jul 8, 2025
  • Critical max 9.0
    MSRC-CVE-2025-47158 1 CVE

    Azure DevOps Server Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
    first Jul 8, 2025
  • Critical max 6.5
    MSRC-CVE-2025-47995 1 CVE

    Azure Machine Learning Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
    first Jul 8, 2025
  • Critical max 9.9
    MSRC-CVE-2025-49746 1 CVE

    Azure Machine Learning Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
    first Jul 8, 2025
  • Critical max 9.9
    MSRC-CVE-2025-49747 1 CVE

    Azure Machine Learning Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
    first Jul 8, 2025
  • Critical max 8.1
    MSRC-CVE-2025-49735 1 CVE rev. 4

    Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Jul 8, 2025
  • Critical max 7.8
    MSRC-CVE-2025-49703 1 CVE rev. 2

    Microsoft Word Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 8, 2025
  • Critical max 7.8
    MSRC-CVE-2025-49702 1 CVE rev. 2

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 8, 2025
  • Critical max 7.8
    MSRC-CVE-2025-49698 1 CVE rev. 2

    Microsoft Word Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 8, 2025
  • Critical max 8.4
    MSRC-CVE-2025-49697 1 CVE rev. 2

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 8, 2025
  • Critical max 8.4
    MSRC-CVE-2025-49696 1 CVE rev. 2

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Jul 8, 2025
  • Critical max 8.4
    MSRC-CVE-2025-49695 1 CVE rev. 2

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Jul 8, 2025
  • Critical max 8.8
    MSRC-CVE-2025-49704 1 CVE 1 exploited

    Microsoft SharePoint Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • Critical max 8.6
    MSRC-CVE-2025-48822 1 CVE

    Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2025-47981 1 CVE

    SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • Critical max 6.2
    MSRC-CVE-2025-47980 1 CVE

    Windows Imaging Component Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.5
    MSRC-CVE-2025-49715 1 CVE rev. 2

    Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
    first Jun 10, 2025
  • Critical max 8.8
    MSRC-CVE-2025-47172 1 CVE rev. 2

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 10, 2025
  • Critical max 8.4
    MSRC-CVE-2025-32717 1 CVE rev. 2

    Microsoft Word Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • Critical max 8.4
    MSRC-CVE-2025-47167 1 CVE rev. 2

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • Critical max 8.4
    MSRC-CVE-2025-47164 1 CVE rev. 2

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • Critical max 8.1
    MSRC-CVE-2025-33070 1 CVE

    Windows Netlogon Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • Critical max 8.1
    MSRC-CVE-2025-33071 1 CVE

    Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • Critical max 8.4
    MSRC-CVE-2025-47953 1 CVE rev. 2

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.4
    MSRC-CVE-2025-47162 1 CVE rev. 2

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • Critical max 8.1
    MSRC-CVE-2025-32710 1 CVE

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.1
    MSRC-CVE-2025-29828 1 CVE

    Windows Schannel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2025-47966 1 CVE

    Power Automate Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
    first Jun 10, 2025
  • Critical max 7.7
    MSRC-CVE-2025-29833 1 CVE rev. 2

    Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first May 13, 2025
  • Critical max 8.4
    MSRC-CVE-2025-30386 1 CVE rev. 2

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first May 13, 2025
  • Critical max 8.4
    MSRC-CVE-2025-30377 1 CVE rev. 2

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first May 13, 2025