Microsoft Security Response Center

172 results · Clear filters · Feed

• High max 7.8
  MSRC-CVE-2023-23376 1 CVE 1 exploited

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Feb 14, 2023
• High max 8.8
  MSRC-CVE-2023-21529 1 CVE 1 exploited

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Feb 14, 2023
• High max 8.8
  MSRC-CVE-2023-21674 1 CVE 1 exploited

  Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Jan 10, 2023
• Critical max 8.8
  MSRC-CVE-2022-41080 1 CVE 1 exploited rev. 2

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Dec 15, 2022

  first Nov 8, 2022
• Medium max 5.4
  MSRC-CVE-2022-44698 1 CVE 1 exploited

  Windows SmartScreen Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Moderate. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Dec 13, 2022
• High max 5.4
  MSRC-CVE-2022-41049 1 CVE 1 exploited rev. 2

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Nov 11, 2022

  first Nov 8, 2022
• High max 8.0
  MSRC-CVE-2022-41082 1 CVE 1 exploited rev. 3

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Nov 8, 2022

  first Sep 13, 2022
• Critical max 8.8
  MSRC-CVE-2022-41040 1 CVE 1 exploited rev. 5

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Nov 8, 2022

  first Sep 13, 2022
• High max 7.8
  MSRC-CVE-2022-41125 1 CVE 1 exploited

  Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Nov 8, 2022
• High max 7.8
  MSRC-CVE-2022-41073 1 CVE 1 exploited

  Windows Print Spooler Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Nov 8, 2022
• High max 5.4
  MSRC-CVE-2022-41091 1 CVE 1 exploited

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  Nov 8, 2022
• Critical max 8.8
  MSRC-CVE-2022-41128 1 CVE 1 exploited

  Windows Scripting Languages Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Nov 8, 2022
• High max 7.8
  MSRC-CVE-2022-41033 1 CVE 1 exploited

  Windows COM+ Event System Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Oct 11, 2022
• High max 7.8
  MSRC-CVE-2022-38028 1 CVE 1 exploited

  Windows Print Spooler Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• High max 7.8
  MSRC-CVE-2022-37969 1 CVE 1 exploited

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  Sep 13, 2022
• High max 8.8
  MSRC-CVE-2021-40444 1 CVE 1 exploited rev. 5

  Microsoft MSHTML Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  Aug 16, 2022

  first Sep 7, 2021
• High max 7.8
  MSRC-CVE-2022-34713 1 CVE 1 exploited rev. 2

  Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Aug 10, 2022

  first Aug 9, 2022
• High max 7.8
  MSRC-CVE-2022-22047 1 CVE 1 exploited

  Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Jul 12, 2022
• High max 8.8
  MSRC-CVE-2021-42321 1 CVE 1 exploited rev. 5

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Jun 21, 2022

  first Nov 9, 2021
• High max 7.8
  MSRC-CVE-2022-30190 1 CVE 1 exploited rev. 3

  Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  Jun 14, 2022

  first May 10, 2022
• High max 8.1
  MSRC-CVE-2022-26925 1 CVE 1 exploited

  Windows LSA Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  May 10, 2022
• High max 7.0
  MSRC-CVE-2022-26904 1 CVE 1 exploited

  Windows User Profile Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 7.8
  MSRC-CVE-2022-24521 1 CVE 1 exploited

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 7.8
  MSRC-CVE-2022-21999 1 CVE 1 exploited rev. 2

  Windows Print Spooler Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Feb 9, 2022

  first Feb 8, 2022
• High max 7.8
  MSRC-CVE-2022-22718 1 CVE 1 exploited rev. 2

  Windows Print Spooler Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Feb 9, 2022

  first Feb 8, 2022
• High max 7.8
  MSRC-CVE-2022-21971 1 CVE 1 exploited

  Windows Runtime Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Feb 8, 2022
• High max 7.0
  MSRC-CVE-2022-21882 1 CVE 1 exploited rev. 2

  Win32k Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jan 13, 2022

  first Jan 11, 2022
• High max 7.0
  MSRC-CVE-2022-21919 1 CVE 1 exploited

  Windows User Profile Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jan 11, 2022
• High max 7.8
  MSRC-CVE-2021-42292 1 CVE 1 exploited rev. 2

  Microsoft Excel Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Nov 16, 2021

  first Nov 9, 2021
• High max 7.5
  MSRC-CVE-2021-42278 1 CVE 1 exploited

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021
• High max 7.5
  MSRC-CVE-2021-42287 1 CVE 1 exploited

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021
• High max 5.5
  MSRC-CVE-2021-41379 1 CVE 1 exploited

  Windows Installer Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021
• High max 7.8
  MSRC-CVE-2021-36955 1 CVE 1 exploited rev. 2

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38646 1 CVE 1 exploited

  Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-36934 1 CVE 1 exploited rev. 7

  Windows Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

  Microsoft
  Aug 12, 2021

  first Jul 20, 2021
• High max 7.8
  MSRC-CVE-2021-34486 1 CVE 1 exploited rev. 2

  Windows Event Tracing Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 12, 2021

  first Aug 10, 2021
• High max 7.8
  MSRC-CVE-2021-34484 1 CVE 1 exploited

  Windows User Profile Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 10, 2021
• High max 7.8
  MSRC-CVE-2021-36948 1 CVE 1 exploited

  Windows Update Medic Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Aug 10, 2021
• High max 7.5
  MSRC-CVE-2021-36942 1 CVE 1 exploited

  Windows LSA Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

  Microsoft
  Aug 10, 2021
• High max 7.3
  MSRC-CVE-2021-33766 1 CVE 1 exploited

  Microsoft Exchange Server Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 13, 2021