Microsoft Security Response Center

1,056 results · Clear filters · Feed

• Critical max 10.0
  MSRC-CVE-2022-37968 1 CVE

  Azure Arc-enabled Kubernetes cluster Connect Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• Critical max 8.1
  MSRC-CVE-2022-33634 1 CVE

  Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• Critical max 8.1
  MSRC-CVE-2022-22035 1 CVE

  Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• Critical max 8.1
  MSRC-CVE-2022-30198 1 CVE

  Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• Critical max 8.1
  MSRC-CVE-2022-24504 1 CVE

  Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• Critical max 8.0
  MSRC-CVE-2022-24516 1 CVE rev. 3

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022

  first Aug 9, 2022
• Critical max 8.0
  MSRC-CVE-2022-21980 1 CVE rev. 3

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022

  first Aug 9, 2022
• Critical max 9.8
  MSRC-CVE-2022-34721 1 CVE rev. 2

  Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2022

  first Sep 13, 2022
• Critical max 9.8
  MSRC-CVE-2022-34718 1 CVE rev. 2

  Windows TCP/IP Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 23, 2022

  first Sep 13, 2022
• Critical max 9.8
  MSRC-CVE-2022-34722 1 CVE

  Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 13, 2022
• Critical max 8.8
  MSRC-CVE-2022-34700 1 CVE

  Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 13, 2022
• Critical max 8.8
  MSRC-CVE-2022-35805 1 CVE

  Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 13, 2022
• Critical max 8.8
  MSRC-CVE-2022-34691 1 CVE rev. 2

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 30, 2022

  first Aug 9, 2022
• Critical max 8.1
  MSRC-CVE-2022-35794 1 CVE

  Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 9, 2022
• Critical max 8.1
  MSRC-CVE-2022-35767 1 CVE

  Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 9, 2022
• Critical max 8.1
  MSRC-CVE-2022-35766 1 CVE

  Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 9, 2022
• Critical max 8.1
  MSRC-CVE-2022-34702 1 CVE

  Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 9, 2022
• Critical max 8.8
  MSRC-CVE-2022-35804 1 CVE

  SMB Client and Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Aug 9, 2022
• Critical max 8.1
  MSRC-CVE-2022-35753 1 CVE

  Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 9, 2022
• Critical max 8.1
  MSRC-CVE-2022-35752 1 CVE

  Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 9, 2022
• Critical max 8.1
  MSRC-CVE-2022-35745 1 CVE

  Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 9, 2022
• Critical max 9.8
  MSRC-CVE-2022-35744 1 CVE

  Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 9, 2022
• Critical max 8.1
  MSRC-CVE-2022-34714 1 CVE

  Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 9, 2022
• Critical max 7.8
  MSRC-CVE-2022-34696 1 CVE

  Windows Hyper-V Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 9, 2022
• Critical max 9.8
  MSRC-CVE-2022-30133 1 CVE

  Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 9, 2022
• Critical max 4.2
  MSRC-CVE-2021-42279 1 CVE rev. 2

  Chakra Scripting Engine Memory Corruption Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 3, 2022

  first Nov 9, 2021
• Critical max 7.5
  MSRC-CVE-2022-22039 1 CVE

  Windows Network File System Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 12, 2022
• Critical max 8.1
  MSRC-CVE-2022-22038 1 CVE

  Remote Procedure Call Runtime Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 12, 2022
• Critical max 8.1
  MSRC-CVE-2022-22029 1 CVE

  Windows Network File System Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 12, 2022
• Critical max 8.8
  MSRC-CVE-2022-30221 1 CVE

  Windows Graphics Component Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 12, 2022
• Critical max 8.5
  MSRC-CVE-2022-30163 1 CVE

  Windows Hyper-V Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• Critical max 9.8
  MSRC-CVE-2022-30136 1 CVE

  Windows Network File System Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• Critical max 8.8
  MSRC-CVE-2022-22017 1 CVE

  Remote Desktop Client Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  May 10, 2022
• Critical max 9.8
  MSRC-CVE-2022-26937 1 CVE

  Windows Network File System Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  May 10, 2022
• Critical max 7.5
  MSRC-CVE-2022-26931 1 CVE rev. 2

  Windows Kerberos Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  May 10, 2022
• Critical max 8.1
  MSRC-CVE-2022-23270 1 CVE

  Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  May 10, 2022
• Critical max 8.1
  MSRC-CVE-2022-21972 1 CVE

  Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  May 10, 2022
• Critical max 9.8
  MSRC-CVE-2022-26809 1 CVE rev. 2

  Remote Procedure Call Runtime Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Apr 19, 2022

  first Apr 12, 2022
• Critical max 8.1
  MSRC-CVE-2022-26919 1 CVE rev. 2

  Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 19, 2022

  first Apr 12, 2022
• Critical max 8.8
  MSRC-CVE-2022-24541 1 CVE

  Windows Server Service Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022