Microsoft Security Response Center

1,056 results · Clear filters · Feed

• Critical max 8.4
  MSRC-CVE-2026-50301 1 CVE rev. 2

  Microsoft Office Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 1, 2026

  first Jul 14, 2026
• Critical max 8.8
  MSRC-CVE-2026-70250 1 CVE rev. 2

  Windows DHCP Client Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 28, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-73013 1 CVE rev. 2

  Windows Imaging Component Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 28, 2026

  first Sep 8, 2026
• Critical max 8.8
  MSRC-CVE-2026-69499 1 CVE rev. 2

  Windows Imaging Component Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 28, 2026

  first Sep 8, 2026
• Critical max 6.1
  MSRC-CVE-2026-55946 1 CVE rev. 2

  Microsoft Copilot Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  Microsoft
  Oct 27, 2026

  first Sep 17, 2026
• Critical max 8.8
  MSRC-CVE-2026-96202 1 CVE rev. 2

  Windows Raw Image Extension Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 16, 2026
• Critical max 10.0
  MSRC-CVE-2026-110063 1 CVE

  VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  Microsoft
  Oct 22, 2026
• Critical max 10.0
  MSRC-CVE-2026-83938 1 CVE

  Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  Microsoft
  Oct 22, 2026
• Critical max 7.5
  MSRC-CVE-2026-96185 1 CVE

  Microsoft Exchange Online Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  Microsoft
  Oct 22, 2026
• Critical max 10.0
  MSRC-CVE-2026-97785 1 CVE

  AAD App Proxy Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  Microsoft
  Oct 22, 2026
• Critical max 7.7
  MSRC-CVE-2026-108456 1 CVE

  Azure AI Foundry Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  Microsoft
  Oct 22, 2026
• Critical max 9.1
  MSRC-CVE-2026-105014 1 CVE

  Azure Pipelines Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  Microsoft
  Oct 22, 2026
• Critical max 8.8
  MSRC-CVE-2026-96913 1 CVE rev. 2

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 20, 2026

  first Oct 13, 2026
• Critical max 7.4
  MSRC-CVE-2026-96222 1 CVE rev. 2

  Active Directory Federation Services (AD FS) Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-108471 1 CVE rev. 2

  Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• Critical max 7.5
  MSRC-CVE-2026-108131 1 CVE rev. 2

  Active Directory Federation Services (AD FS) Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• Critical max 7.5
  MSRC-CVE-2026-108448 1 CVE rev. 2

  Microsoft Office Outlook Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• Critical max 8.8
  MSRC-CVE-2026-108440 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• Critical max 8.8
  MSRC-CVE-2026-108439 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• Critical max 8.8
  MSRC-CVE-2026-100210 1 CVE rev. 2

  Microsoft Office Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-100209 1 CVE rev. 2

  Microsoft Office Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-97741 1 CVE rev. 2

  Microsoft Office Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-97742 1 CVE rev. 2

  Microsoft Office Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-97756 1 CVE rev. 2

  Microsoft Office Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 7.5
  MSRC-CVE-2026-88207 1 CVE rev. 2

  Microsoft Office PowerPoint Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 8.1
  MSRC-CVE-2026-88185 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-88144 1 CVE rev. 2

  Microsoft Office PowerPoint Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-70215 1 CVE rev. 2

  Microsoft Office PowerPoint Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-97759 1 CVE rev. 2

  Microsoft Office Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-97778 1 CVE rev. 2

  Microsoft Office Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-97739 1 CVE rev. 2

  Microsoft Office Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-97765 1 CVE rev. 2

  Microsoft Office Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-97755 1 CVE rev. 2

  Microsoft Office Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-97780 1 CVE rev. 2

  Microsoft Office Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-97761 1 CVE rev. 2

  Microsoft Office Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-97758 1 CVE rev. 2

  Microsoft Office Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-97753 1 CVE rev. 2

  Microsoft Office Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 9.8
  MSRC-CVE-2026-88178 1 CVE rev. 2

  Microsoft Office PowerPoint Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 9.8
  MSRC-CVE-2026-88156 1 CVE rev. 2

  Microsoft Office Outlook Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 8.1
  MSRC-CVE-2026-70269 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026