Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

172 results · Clear filters · Feed

  • High max 8.8
    MSRC-CVE-2025-33073 1 CVE 1 exploited rev. 2

    Windows SMB Client Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 10, 2025
  • High max 7.8
    MSRC-CVE-2025-32709 1 CVE 1 exploited rev. 2

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first May 13, 2025
  • High max 7.5
    MSRC-CVE-2025-30397 1 CVE 1 exploited

    Scripting Engine Memory Corruption Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-32706 1 CVE 1 exploited

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-32701 1 CVE 1 exploited

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-30400 1 CVE 1 exploited

    Microsoft DWM Core Library Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2025-24054 1 CVE 1 exploited rev. 3

    NTLM Hash Disclosure Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Mar 11, 2025
  • High max 7.8
    MSRC-CVE-2025-29824 1 CVE 1 exploited rev. 2

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.0
    MSRC-CVE-2025-26633 1 CVE 1 exploited

    Microsoft Management Console Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-24993 1 CVE 1 exploited

    Windows NTFS Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2025-24991 1 CVE 1 exploited

    Windows NTFS Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-24985 1 CVE 1 exploited

    Windows Fast FAT File System Driver Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 4.6
    MSRC-CVE-2025-24984 1 CVE 1 exploited

    Windows NTFS Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2025-24983 1 CVE 1 exploited

    Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • Critical max 8.2
    MSRC-CVE-2025-24989 1 CVE 1 exploited rev. 2

    Microsoft Power Pages Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Feb 11, 2025
  • High max 7.8
    MSRC-CVE-2025-21418 1 CVE 1 exploited

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.1
    MSRC-CVE-2025-21391 1 CVE 1 exploited

    Windows Storage Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-21335 1 CVE 1 exploited rev. 2

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Jan 14, 2025
  • High max 7.8
    MSRC-CVE-2025-21334 1 CVE 1 exploited rev. 2

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Jan 14, 2025
  • High max 7.8
    MSRC-CVE-2025-21333 1 CVE 1 exploited rev. 2

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Jan 14, 2025
  • High max 5.5
    MSRC-CVE-2013-3900 1 CVE 1 exploited rev. 6

    WinVerifyTrust Signature Validation Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    Microsoft
    first Jan 11, 2022
  • High max 6.5
    MSRC-CVE-2024-43451 1 CVE 1 exploited rev. 2

    NTLM Hash Disclosure Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    Microsoft
    first Nov 12, 2024
  • High max 7.8
    MSRC-CVE-2024-49138 1 CVE 1 exploited

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    Microsoft
  • Critical max 8.7
    MSRC-CVE-2024-49035 1 CVE 1 exploited rev. 2

    Partner.Microsoft.Com Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Not required.

    Microsoft
    first Nov 12, 2024
  • High max 8.8
    MSRC-CVE-2024-49039 1 CVE 1 exploited rev. 2

    Windows Task Scheduler Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Nov 12, 2024
  • High max 7.8
    MSRC-CVE-2024-43572 1 CVE 1 exploited

    Microsoft Management Console Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2024-43468 1 CVE 1 exploited

    Microsoft Configuration Manager Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Medium max 6.5
    MSRC-CVE-2024-43573 1 CVE 1 exploited

    Windows MSHTML Platform Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.3
    MSRC-CVE-2024-38226 1 CVE 1 exploited rev. 2

    Microsoft Publisher Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Sep 10, 2024
  • Medium max 6.5
    MSRC-CVE-2024-38213 1 CVE 1 exploited rev. 2

    Windows Mark of the Web Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Moderate. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Aug 13, 2024
  • High max 8.8
    MSRC-CVE-2024-43461 1 CVE 1 exploited rev. 2

    Windows MSHTML Platform Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    Microsoft
    first Sep 10, 2024
  • High max 5.4
    MSRC-CVE-2024-38217 1 CVE 1 exploited

    Windows Mark of the Web Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-38014 1 CVE 1 exploited

    Windows Installer Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2024-38178 1 CVE 1 exploited rev. 2

    Scripting Engine Memory Corruption Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Aug 13, 2024
  • High max 8.8
    MSRC-CVE-2024-38189 1 CVE 1 exploited rev. 2

    Microsoft Project Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Aug 13, 2024
  • High max 7.8
    MSRC-CVE-2024-38107 1 CVE 1 exploited

    Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2024-38106 1 CVE 1 exploited

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-38193 1 CVE 1 exploited

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2024-38112 1 CVE 1 exploited rev. 2

    Windows MSHTML Platform Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Jul 9, 2024
  • High max 7.2
    MSRC-CVE-2024-38094 1 CVE 1 exploited

    Microsoft SharePoint Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft