Microsoft Security Response Center

1,056 results · Clear filters · Feed

• Critical max 9.8
  MSRC-CVE-2023-21708 1 CVE

  Remote Procedure Call Runtime Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Mar 14, 2023
• Critical max 9.8
  MSRC-CVE-2023-23392 1 CVE

  HTTP Protocol Stack Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Mar 14, 2023
• Critical max 9.8
  MSRC-CVE-2023-21716 1 CVE rev. 3

  Microsoft Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Feb 23, 2023

  first Feb 14, 2023
• Critical max 9.8
  MSRC-CVE-2023-21692 1 CVE

  Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Feb 14, 2023
• Critical max 9.8
  MSRC-CVE-2023-21690 1 CVE

  Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Feb 14, 2023
• Critical max 9.8
  MSRC-CVE-2023-21689 1 CVE

  Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Feb 14, 2023
• Critical max 9.8
  MSRC-CVE-2023-21803 1 CVE

  Windows iSCSI Discovery Service Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Feb 14, 2023
• Critical max 8.1
  MSRC-CVE-2023-21712 1 CVE rev. 2

  Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jan 27, 2023

  first Jan 10, 2023
• Critical max 7.8
  MSRC-CVE-2023-21561 1 CVE rev. 2

  Microsoft Cryptographic Services Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 17, 2023

  first Jan 10, 2023
• Critical max 5.3
  MSRC-CVE-2023-21743 1 CVE

  Microsoft SharePoint Server Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jan 10, 2023
• Critical max 7.8
  MSRC-CVE-2023-21730 1 CVE

  Microsoft Cryptographic Services Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 10, 2023
• Critical max 8.1
  MSRC-CVE-2023-21679 1 CVE

  Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 10, 2023
• Critical max 8.1
  MSRC-CVE-2023-21556 1 CVE

  Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 10, 2023
• Critical max 8.1
  MSRC-CVE-2023-21555 1 CVE

  Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 10, 2023
• Critical max 7.8
  MSRC-CVE-2023-21551 1 CVE

  Microsoft Cryptographic Services Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 10, 2023
• Critical max 8.1
  MSRC-CVE-2023-21548 1 CVE

  Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 10, 2023
• Critical max 8.1
  MSRC-CVE-2023-21543 1 CVE

  Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 10, 2023
• Critical max 8.1
  MSRC-CVE-2023-21546 1 CVE

  Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 10, 2023
• Critical max 8.1
  MSRC-CVE-2023-21535 1 CVE

  Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 10, 2023
• Critical max 8.8
  MSRC-CVE-2022-41080 1 CVE 1 exploited rev. 2

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Dec 15, 2022

  first Nov 8, 2022
• Critical max 8.1
  MSRC-CVE-2022-44670 1 CVE

  Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Dec 13, 2022
• Critical max 8.5
  MSRC-CVE-2022-41076 1 CVE

  PowerShell Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Dec 13, 2022
• Critical max 8.8
  MSRC-CVE-2022-44690 1 CVE

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Dec 13, 2022
• Critical max 8.1
  MSRC-CVE-2022-44676 1 CVE

  Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Dec 13, 2022
• Critical max 8.1
  MSRC-CVE-2022-37966 1 CVE rev. 2

  Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Nov 17, 2022

  first Nov 8, 2022
• Critical max 8.8
  MSRC-CVE-2022-41040 1 CVE 1 exploited rev. 5

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Nov 8, 2022

  first Sep 13, 2022
• Critical max 7.5
  MSRC-CVE-2022-41118 1 CVE

  Windows Scripting Languages Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Nov 8, 2022
• Critical max 8.1
  MSRC-CVE-2022-41088 1 CVE

  Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 8, 2022
• Critical max 8.1
  MSRC-CVE-2022-41044 1 CVE

  Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 8, 2022
• Critical max 8.1
  MSRC-CVE-2022-41039 1 CVE

  Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 8, 2022
• Critical max 6.5
  MSRC-CVE-2022-38015 1 CVE

  Windows Hyper-V Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 8, 2022
• Critical max 8.8
  MSRC-CVE-2022-41128 1 CVE 1 exploited

  Windows Scripting Languages Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Nov 8, 2022
• Critical max 8.8
  MSRC-CVE-2022-37976 1 CVE rev. 3

  Active Directory Certificate Services Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 18, 2022

  first Oct 11, 2022
• Critical max 8.8
  MSRC-CVE-2022-41038 1 CVE

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• Critical max 7.8
  MSRC-CVE-2022-37979 1 CVE

  Windows Hyper-V Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• Critical max 7.5
  MSRC-CVE-2022-34689 1 CVE

  Windows CryptoAPI Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• Critical max 8.1
  MSRC-CVE-2022-41081 1 CVE

  Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• Critical max 8.1
  MSRC-CVE-2022-38000 1 CVE

  Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• Critical max 7.8
  MSRC-CVE-2022-38048 1 CVE

  Microsoft Office Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• Critical max 8.1
  MSRC-CVE-2022-38047 1 CVE

  Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022