Microsoft Security Response Center

172 results · Clear filters · Feed

• High max 7.8
  MSRC-CVE-2024-38080 1 CVE 1 exploited

  Windows Hyper-V Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Jul 9, 2024
• High max 7.0
  MSRC-CVE-2024-30088 1 CVE 1 exploited

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jun 11, 2024
• High max 7.8
  MSRC-CVE-2024-35250 1 CVE 1 exploited rev. 2

  Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jun 11, 2024
• High max 7.8
  MSRC-CVE-2024-30051 1 CVE 1 exploited

  Windows DWM Core Library Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  May 14, 2024
• High max 8.8
  MSRC-CVE-2024-30040 1 CVE 1 exploited

  Windows MSHTML Platform Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  May 14, 2024
• High max 7.5
  MSRC-CVE-2024-29059 1 CVE 1 exploited rev. 2

  .NET Framework Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  May 8, 2024

  first Mar 12, 2024
• High max 8.8
  MSRC-CVE-2024-29988 1 CVE 1 exploited

  SmartScreen Prompt Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Apr 9, 2024
• High max 7.8
  MSRC-CVE-2024-26169 1 CVE 1 exploited

  Windows Error Reporting Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Mar 12, 2024
• Critical max 9.8
  MSRC-CVE-2024-21410 1 CVE 1 exploited rev. 4

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Mar 1, 2024

  first Feb 13, 2024
• High max 7.8
  MSRC-CVE-2024-21338 1 CVE 1 exploited rev. 3

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Feb 28, 2024

  first Feb 13, 2024
• High max 8.1
  MSRC-CVE-2024-21412 1 CVE 1 exploited rev. 2

  Internet Shortcut Files Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Feb 15, 2024

  first Feb 13, 2024
• Medium max 7.6
  MSRC-CVE-2024-21351 1 CVE 1 exploited rev. 2

  Windows SmartScreen Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Moderate. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Feb 15, 2024

  first Feb 13, 2024
• Critical max 9.8
  MSRC-CVE-2024-21413 1 CVE 1 exploited rev. 3

  Microsoft Outlook Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Feb 14, 2024

  first Feb 13, 2024
• High max 8.8
  MSRC-CVE-2023-36025 1 CVE 1 exploited rev. 2

  Windows SmartScreen Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  Nov 22, 2023

  first Nov 14, 2023
• High max 7.8
  MSRC-CVE-2023-36033 1 CVE 1 exploited

  Windows DWM Core Library Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  Nov 14, 2023
• High max 7.8
  MSRC-CVE-2023-36424 1 CVE 1 exploited

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Nov 14, 2023
• High max 7.8
  MSRC-CVE-2023-36036 1 CVE 1 exploited

  Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Nov 14, 2023
• High max 6.5
  MSRC-CVE-2023-36761 1 CVE 1 exploited rev. 2

  Microsoft Word Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  Oct 17, 2023

  first Sep 12, 2023
• High max 7.5
  MSRC-CVE-2023-36884 1 CVE 1 exploited rev. 5

  Windows Search Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Oct 17, 2023

  first Jul 11, 2023
• High max 6.5
  MSRC-CVE-2023-36563 1 CVE 1 exploited rev. 2

  Microsoft WordPad Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  Oct 11, 2023

  first Oct 10, 2023
• High max 5.4
  MSRC-CVE-2023-36584 1 CVE 1 exploited

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 10, 2023
• High max 5.3
  MSRC-CVE-2023-41763 1 CVE 1 exploited

  Skype for Business Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  Oct 10, 2023
• High max 7.8
  MSRC-CVE-2023-36802 1 CVE 1 exploited rev. 2

  Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Sep 19, 2023

  first Sep 12, 2023
• High max 7.5
  MSRC-CVE-2023-38180 1 CVE 1 exploited rev. 2

  .NET and Visual Studio Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Aug 11, 2023

  first Aug 8, 2023
• High max 8.4
  MSRC-CVE-2023-29360 1 CVE 1 exploited rev. 2

  Microsoft Streaming Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Aug 10, 2023

  first Jun 13, 2023
• High max 8.8
  MSRC-CVE-2023-35311 1 CVE 1 exploited rev. 2

  Microsoft Outlook Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Jul 21, 2023

  first Jul 11, 2023
• High max 8.8
  MSRC-CVE-2023-32049 1 CVE 1 exploited

  Windows SmartScreen Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Jul 11, 2023
• High max 7.8
  MSRC-CVE-2023-36874 1 CVE 1 exploited

  Windows Error Reporting Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Jul 11, 2023
• High max 7.8
  MSRC-CVE-2023-32046 1 CVE 1 exploited

  Windows MSHTML Platform Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Jul 11, 2023
• Critical max 9.8
  MSRC-CVE-2023-29357 1 CVE 1 exploited rev. 2

  Microsoft SharePoint Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jun 19, 2023

  first Jun 13, 2023
• Critical max 8.8
  MSRC-CVE-2021-34527 1 CVE 1 exploited rev. 11

  Windows Print Spooler Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  Jun 13, 2023

  first Jul 1, 2021
• Medium max 4.4
  MSRC-CVE-2023-24880 1 CVE 1 exploited rev. 2

  Windows SmartScreen Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Moderate. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Jun 13, 2023

  first Mar 14, 2023
• High max 7.8
  MSRC-CVE-2023-29336 1 CVE 1 exploited

  Win32k Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  May 9, 2023
• Critical max 7.2
  MSRC-CVE-2023-24955 1 CVE 1 exploited

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  May 9, 2023
• High max 7.3
  MSRC-CVE-2023-21715 1 CVE 1 exploited rev. 4

  Microsoft Publisher Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Apr 14, 2023

  first Feb 14, 2023
• Critical max 8.8
  MSRC-CVE-2022-26923 1 CVE 1 exploited rev. 4

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Apr 11, 2023

  first May 10, 2022
• High max 7.8
  MSRC-CVE-2023-28252 1 CVE 1 exploited

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Apr 11, 2023
• High max 7.0
  MSRC-CVE-2023-28229 1 CVE 1 exploited

  Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 11, 2023
• Critical max 9.8
  MSRC-CVE-2023-23397 1 CVE 1 exploited rev. 4

  Microsoft Outlook Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Mar 21, 2023

  first Mar 14, 2023
• High max 7.8
  MSRC-CVE-2023-21823 1 CVE 1 exploited rev. 2

  Windows Graphics Component Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Feb 17, 2023

  first Feb 14, 2023