Microsoft Security Response Center

8,900 results · Clear filters · Feed

• High max 8.1
  MSRC-CVE-2026-118741 1 CVE rev. 2

  ASP.NET Core Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 9.1
  MSRC-CVE-2026-118740 1 CVE rev. 2

  Aspire Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 5.3
  MSRC-CVE-2026-120796 1 CVE rev. 2

  .NET Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 7.3
  MSRC-CVE-2026-120778 1 CVE rev. 2

  Aspire Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 7.3
  MSRC-CVE-2026-120792 1 CVE rev. 2

  Aspire Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 7.5
  MSRC-CVE-2026-118750 1 CVE rev. 2

  ASP.NET Core Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 7.5
  MSRC-CVE-2026-118749 1 CVE rev. 2

  ASP.NET Core Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 7.5
  MSRC-CVE-2026-118748 1 CVE rev. 2

  ASP.NET Core Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 7.5
  MSRC-CVE-2026-118747 1 CVE rev. 2

  .NET Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 6.8
  MSRC-CVE-2026-118746 1 CVE rev. 2

  .NET Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 8.8
  MSRC-CVE-2026-118745 1 CVE rev. 2

  Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 7.5
  MSRC-CVE-2026-120006 1 CVE rev. 2

  Aspire Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 8.8
  MSRC-CVE-2026-114159 1 CVE rev. 2

  Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 8.8
  MSRC-CVE-2026-114158 1 CVE rev. 2

  Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 7.5
  MSRC-CVE-2026-114157 1 CVE rev. 2

  ASP.NET Core Security Feature Bypass Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 6.5
  MSRC-CVE-2026-114156 1 CVE rev. 2

  ASP.NET Core Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 7.5
  MSRC-CVE-2026-114155 1 CVE rev. 2

  .NET Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 7.5
  MSRC-CVE-2026-114154 1 CVE rev. 2

  ASP.NET Core Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 8.8
  MSRC-CVE-2026-114152 1 CVE rev. 2

  Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 8.8
  MSRC-CVE-2026-114151 1 CVE rev. 2

  Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 5.9
  MSRC-CVE-2026-114150 1 CVE rev. 2

  ASP.NET Core Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 7.5
  MSRC-CVE-2026-114149 1 CVE rev. 2

  ASP.NET Core Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 7.5
  MSRC-CVE-2026-114147 1 CVE rev. 2

  ASP.NET Core Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 9.0
  MSRC-CVE-2026-114146 1 CVE rev. 2

  ASP.NET Core Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 7.5
  MSRC-CVE-2026-109481 1 CVE rev. 2

  ASP.NET Core Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 7.5
  MSRC-CVE-2026-109478 1 CVE rev. 2

  ASP.NET Core Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 6.1
  MSRC-CVE-2026-109476 1 CVE rev. 2

  ASP.NET Core Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 7.5
  MSRC-CVE-2026-109475 1 CVE rev. 2

  .NET Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 7.5
  MSRC-CVE-2026-105544 1 CVE rev. 2

  .NET Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 11, 2026

  first Nov 10, 2026
• High max 8.8
  MSRC-CVE-2026-44815 1 CVE rev. 2

  Windows DHCP Client Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Jun 9, 2026
• High max 5.4
  MSRC-CVE-2026-45465 1 CVE rev. 3

  Microsoft SharePoint Server Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-50423 1 CVE rev. 2

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Jul 14, 2026
• High max 5.5
  MSRC-CVE-2026-66810 1 CVE rev. 2

  Microsoft Office Word Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Aug 11, 2026
• High max 8.8
  MSRC-CVE-2026-62784 1 CVE rev. 4

  Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Aug 11, 2026
• High max 7.8
  MSRC-CVE-2026-83985 1 CVE rev. 2

  Windows Biometric Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-83978 1 CVE rev. 2

  Windows Biometric Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 6.5
  MSRC-CVE-2026-77911 1 CVE rev. 2

  Microsoft Office Word Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-69465 1 CVE rev. 3

  Microsoft Office SharePoint Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 5.5
  MSRC-CVE-2026-69453 1 CVE rev. 2

  Microsoft Windows Search Component Tampering Vulnerability

  Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-69407 1 CVE rev. 3

  Volume Manager Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026