Microsoft Security Response Center

1,056 results · Clear filters · Feed

• Critical max 9.8
  MSRC-CVE-2023-36911 1 CVE

  Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 8, 2023
• Critical max 9.8
  MSRC-CVE-2023-36910 1 CVE

  Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 8, 2023
• Critical max 8.8
  MSRC-CVE-2023-33160 1 CVE

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 11, 2023
• Critical max 8.8
  MSRC-CVE-2023-33157 1 CVE

  Microsoft SharePoint Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jul 11, 2023
• Critical max 9.8
  MSRC-CVE-2023-35367 1 CVE

  Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 11, 2023
• Critical max 9.8
  MSRC-CVE-2023-35366 1 CVE

  Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 11, 2023
• Critical max 9.8
  MSRC-CVE-2023-35365 1 CVE

  Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 11, 2023
• Critical max 7.5
  MSRC-CVE-2023-35352 1 CVE

  Windows Remote Desktop Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jul 11, 2023
• Critical max 8.8
  MSRC-CVE-2023-35315 1 CVE

  Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 11, 2023
• Critical max 9.8
  MSRC-CVE-2023-29357 1 CVE 1 exploited rev. 2

  Microsoft SharePoint Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jun 19, 2023

  first Jun 13, 2023
• Critical max 7.8
  MSRC-CVE-2023-23416 1 CVE rev. 2

  Windows Cryptographic Services Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jun 19, 2023

  first Mar 14, 2023
• Critical max 9.8
  MSRC-CVE-2023-29363 1 CVE rev. 2

  Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 15, 2023

  first Jun 13, 2023
• Critical max 8.8
  MSRC-CVE-2021-34527 1 CVE 1 exploited rev. 11

  Windows Print Spooler Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  Jun 13, 2023

  first Jul 1, 2021
• Critical max 9.8
  MSRC-CVE-2023-32015 1 CVE

  Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• Critical max 9.8
  MSRC-CVE-2023-32014 1 CVE

  Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• Critical max 5.3
  MSRC-CVE-2023-32013 1 CVE

  Windows Hyper-V Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• Critical max 7.8
  MSRC-CVE-2023-23381 1 CVE rev. 4

  Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023

  first Feb 14, 2023
• Critical max 7.8
  MSRC-CVE-2023-21815 1 CVE rev. 3

  Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023

  first Feb 14, 2023
• Critical max 9.8
  MSRC-CVE-2023-24943 1 CVE rev. 2

  Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  May 10, 2023

  first May 9, 2023
• Critical max 8.1
  MSRC-CVE-2023-29325 1 CVE

  Windows OLE Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

  Microsoft
  May 9, 2023
• Critical max 7.2
  MSRC-CVE-2023-24955 1 CVE 1 exploited

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  May 9, 2023
• Critical max 8.1
  MSRC-CVE-2023-24903 1 CVE

  Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  May 9, 2023
• Critical max 9.8
  MSRC-CVE-2023-24941 1 CVE

  Windows Network File System Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  May 9, 2023
• Critical max 8.1
  MSRC-CVE-2023-28283 1 CVE

  Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  May 9, 2023
• Critical max 8.8
  MSRC-CVE-2023-28231 1 CVE rev. 2

  DHCP Server Service Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Apr 14, 2023

  first Apr 11, 2023
• Critical max 8.8
  MSRC-CVE-2022-26923 1 CVE 1 exploited rev. 4

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Apr 11, 2023

  first May 10, 2022
• Critical max 9.8
  MSRC-CVE-2023-28250 1 CVE

  Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 11, 2023
• Critical max 8.8
  MSRC-CVE-2023-28240 1 CVE

  Windows Network Load Balancing Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 11, 2023
• Critical max 7.5
  MSRC-CVE-2023-28232 1 CVE

  Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 11, 2023
• Critical max 8.1
  MSRC-CVE-2023-28220 1 CVE

  Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Apr 11, 2023
• Critical max 8.1
  MSRC-CVE-2023-28219 1 CVE

  Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Apr 11, 2023
• Critical max 9.8
  MSRC-CVE-2023-21554 1 CVE

  Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Apr 11, 2023
• Critical max 8.4
  MSRC-CVE-2023-28291 1 CVE

  Raw Image Extension Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 11, 2023
• Critical max 7.0
  MSRC-CVE-2022-33646 1 CVE rev. 2

  Azure Batch Node Agent Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Mar 29, 2023

  first Aug 9, 2022
• Critical max 8.1
  MSRC-CVE-2022-37958 1 CVE rev. 3

  SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Mar 23, 2023

  first Sep 13, 2022
• Critical max 9.8
  MSRC-CVE-2023-23397 1 CVE 1 exploited rev. 4

  Microsoft Outlook Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Mar 21, 2023

  first Mar 14, 2023
• Critical max 8.8
  MSRC-CVE-2022-23257 1 CVE rev. 2

  Windows Hyper-V Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Mar 14, 2023

  first Apr 12, 2022
• Critical max 9.8
  MSRC-CVE-2023-23415 1 CVE

  Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Mar 14, 2023
• Critical max 6.5
  MSRC-CVE-2023-23411 1 CVE

  Windows Hyper-V Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Mar 14, 2023
• Critical max 8.1
  MSRC-CVE-2023-23404 1 CVE

  Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Mar 14, 2023