Microsoft Security Response Center

1,056 results · Clear filters · Feed

• Critical max 9.8
  MSRC-CVE-2022-24491 1 CVE

  Windows Network File System Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• Critical max 7.8
  MSRC-CVE-2022-24537 1 CVE

  Windows Hyper-V Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• Critical max 8.8
  MSRC-CVE-2022-24500 1 CVE

  Windows SMB Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• Critical max 7.8
  MSRC-CVE-2022-22008 1 CVE

  Windows Hyper-V Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• Critical max 8.8
  MSRC-CVE-2022-23259 1 CVE

  Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• Critical max 9.8
  MSRC-CVE-2022-24497 1 CVE

  Windows Network File System Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Apr 5, 2022

  first Apr 12, 2022
• Critical max 8.8
  MSRC-CVE-2022-23277 1 CVE

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Mar 8, 2022
• Critical max 7.8
  MSRC-CVE-2022-24501 1 CVE

  VP9 Video Extensions Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Mar 8, 2022
• Critical max 7.8
  MSRC-CVE-2022-22006 1 CVE

  HEVC Video Extensions Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Mar 8, 2022
• Critical max 8.8
  MSRC-CVE-2022-21840 1 CVE rev. 2

  Microsoft Office Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 13, 2022

  first Jan 11, 2022
• Critical max 9.8
  MSRC-CVE-2022-21907 1 CVE rev. 2

  HTTP Protocol Stack Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jan 12, 2022

  first Jan 11, 2022
• Critical max 7.8
  MSRC-CVE-2022-21898 1 CVE

  DirectX Graphics Kernel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 11, 2022
• Critical max 7.8
  MSRC-CVE-2022-21833 1 CVE

  Virtual Machine IDE Drive Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 11, 2022
• Critical max 9.0
  MSRC-CVE-2022-21846 1 CVE

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jan 11, 2022
• Critical max 7.8
  MSRC-CVE-2022-21917 1 CVE

  HEVC Video Extensions Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 11, 2022
• Critical max 7.8
  MSRC-CVE-2022-21912 1 CVE

  DirectX Graphics Kernel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 11, 2022
• Critical max 8.8
  MSRC-CVE-2022-21857 1 CVE

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 11, 2022
• Critical max 8.8
  MSRC-CVE-2021-42316 1 CVE rev. 2

  Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 12, 2021

  first Nov 9, 2021
• Critical max 9.0
  MSRC-CVE-2021-26443 1 CVE rev. 2

  Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 12, 2021

  first Nov 9, 2021
• Critical max 7.8
  MSRC-CVE-2021-42298 1 CVE

  Microsoft Defender Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021
• Critical max 8.8
  MSRC-CVE-2021-38666 1 CVE

  Remote Desktop Client Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021
• Critical max 8.1
  MSRC-CVE-2021-26435 1 CVE rev. 2

  Windows Scripting Engine Memory Corruption Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• Critical max 8.8
  MSRC-CVE-2021-36965 1 CVE rev. 2

  Windows WLAN AutoConfig Service Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• Critical max 4.4
  MSRC-CVE-2021-36956 1 CVE

  Azure Sphere Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• Critical max 9.9
  MSRC-CVE-2021-26424 1 CVE rev. 2

  Windows TCP/IP Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Aug 17, 2021

  first Aug 10, 2021
• Critical max 9.8
  MSRC-CVE-2021-26432 1 CVE rev. 2

  Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Aug 12, 2021

  first Aug 10, 2021
• Critical max 7.8
  MSRC-CVE-2021-34530 1 CVE

  Windows Graphics Component Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 10, 2021
• Critical max 8.8
  MSRC-CVE-2021-36936 1 CVE

  Windows Print Spooler Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

  Microsoft
  Aug 10, 2021
• Critical max 6.0
  MSRC-CVE-2021-26430 1 CVE

  Azure Sphere Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 10, 2021
• Critical max 4.4
  MSRC-CVE-2021-26428 1 CVE

  Azure Sphere Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 10, 2021
• Critical max 6.8
  MSRC-CVE-2021-34534 1 CVE

  Windows MSHTML Platform Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 10, 2021
• Critical max 6.8
  MSRC-CVE-2021-34480 1 CVE

  Scripting Engine Memory Corruption Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Aug 10, 2021
• Critical max 7.8
  MSRC-CVE-2021-34522 1 CVE

  Microsoft Defender Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 13, 2021
• Critical max 7.8
  MSRC-CVE-2021-34464 1 CVE

  Microsoft Defender Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 13, 2021
• Critical max 9.9
  MSRC-CVE-2021-34458 1 CVE

  Windows Kernel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 13, 2021
• Critical max 7.8
  MSRC-CVE-2021-34503 1 CVE

  Microsoft Windows Media Foundation Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 13, 2021
• Critical max 7.8
  MSRC-CVE-2021-34439 1 CVE

  Microsoft Windows Media Foundation Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 13, 2021
• Critical max 9.1
  MSRC-CVE-2021-34473 1 CVE 1 exploited

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jul 13, 2021
• Critical max 8.5
  MSRC-CVE-2021-34450 1 CVE

  Windows Hyper-V Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 13, 2021
• Critical max 6.8
  MSRC-CVE-2021-34448 1 CVE 1 exploited

  Scripting Engine Memory Corruption Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Jul 13, 2021