Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

1,056 results · Clear filters · Feed

  • Critical max 8.8
    MSRC-CVE-2024-43488 1 CVE rev. 2

    Visual Studio Code extension for Arduino Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    first Oct 8, 2024
  • Critical max 8.6

    Power Platform Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  • Critical max 7.5

    Imagine Cup site Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  • Critical max 8.7

    Microsoft Dataverse Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Not required.

  • Critical max 9.6
    MSRC-CVE-2024-38175 1 CVE rev. 2

    Azure Managed Instance for Apache Cassandra Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    first Aug 13, 2024
  • Critical max 7.4

    Copilot Studio Information Disclosure Vulnerability

    Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Not required.

  • Critical max 9.8
    MSRC-CVE-2024-43468 1 CVE 1 exploited

    Microsoft Configuration Manager Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Critical max 7.2
    MSRC-CVE-2024-43464 1 CVE rev. 2

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Sep 10, 2024
  • Critical max 8.8
    MSRC-CVE-2024-38018 1 CVE rev. 2

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Sep 10, 2024
  • Critical max 9.0
    MSRC-CVE-2024-38220 1 CVE rev. 2

    Azure Stack Hub Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 10, 2024
  • Critical max 8.2
    MSRC-CVE-2024-38216 1 CVE rev. 2

    Azure Stack Hub Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 10, 2024
  • Critical max 8.1

    Dynamics 365 Business Central Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

  • Critical max 9.8
    MSRC-CVE-2024-38063 1 CVE rev. 2

    Windows TCP/IP Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Aug 13, 2024
  • Critical max 8.4

    Azure Web Apps Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

  • Critical max 9.8

    Microsoft Windows Update Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  • Critical max 7.5

    Windows Network Address Translation (NAT) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Critical max 7.5

    Microsoft Entra ID Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    first Aug 13, 2024
  • Critical max 9.1

    Azure Health Bot Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

  • Critical max 9.8

    Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Critical max 9.1

    Windows Network Virtualization Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Critical max 9.1

    Windows Network Virtualization Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Critical max 8.5

    Microsoft Copilot Studio Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    first Aug 13, 2024
  • Critical max 8.2

    Microsoft Dynamics 365 Cross-site Scripting Vulnerability

    Impact: Spoofing. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    first Aug 13, 2024
  • Critical max 9.0

    Microsoft Dynamics 365 Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    first Jul 9, 2024
  • Critical max 9.6

    GroupMe Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    first Jul 9, 2024
  • Critical max 8.1

    GroupMe Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    first Jul 9, 2024
  • Critical max 9.8

    Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Critical max 9.8

    Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Critical max 9.8

    Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Critical max 8.8

    Windows Imaging Component Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  • Critical max 7.2

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  • Critical max 8.0

    Microsoft Dataverse Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Not required.

  • Critical max 9.8
    MSRC-CVE-2024-30080 1 CVE rev. 2

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Jun 11, 2024
  • Critical max 7.2
    MSRC-CVE-2024-30044 1 CVE rev. 2

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first May 14, 2024
  • Critical max 8.8
    MSRC-CVE-2024-29053 1 CVE rev. 2

    Microsoft Defender for IoT Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Apr 9, 2024
  • Critical max 8.8
    MSRC-CVE-2024-21323 1 CVE rev. 2

    Microsoft Defender for IoT Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Apr 9, 2024
  • Critical max 7.2
    MSRC-CVE-2024-21322 1 CVE rev. 2

    Microsoft Defender for IoT Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Apr 9, 2024
  • Critical max 5.5

    Windows Hyper-V Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Critical max 8.1

    Windows Hyper-V Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Critical max 9.8
    MSRC-CVE-2024-21410 1 CVE 1 exploited rev. 4

    Microsoft Exchange Server Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Feb 13, 2024