Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

134 results · Clear filters · Feed

  • High max 8.8
    MSRC-CVE-2026-96951 1 CVE 1 exploited rev. 2

    Windows Shell Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Oct 13, 2026
  • High max 7.8
    MSRC-CVE-2026-81963 1 CVE 1 exploited rev. 5

    Windows Update Stack Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Sep 8, 2026
  • High max 8.8
    MSRC-CVE-2026-65660 1 CVE 1 exploited rev. 3

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Aug 11, 2026
  • High max 7.8
    MSRC-CVE-2026-85880 1 CVE 1 exploited rev. 2

    Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Sep 8, 2026
  • High max 4.3
    MSRC-CVE-2026-32202 1 CVE 1 exploited rev. 4

    Windows Shell Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Apr 14, 2026
  • High max 7.0
    MSRC-CVE-2026-68820 1 CVE 1 exploited

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-56155 1 CVE 1 exploited

    Active Directory Federation Services Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2026-45659 1 CVE 1 exploited rev. 2

    Microsoft SharePoint Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first May 21, 2026
  • High max 7.8
    MSRC-CVE-2026-41091 1 CVE 1 exploited rev. 2

    Microsoft Defender Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    Microsoft
    first May 19, 2026
  • High max 7.8
    MSRC-CVE-2026-33825 1 CVE 1 exploited rev. 2

    Microsoft Defender Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Apr 14, 2026
  • High max 6.5
    MSRC-CVE-2026-32201 1 CVE 1 exploited rev. 2

    Microsoft SharePoint Server Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 9.8
    MSRC-CVE-2026-20963 1 CVE 1 exploited rev. 2

    Microsoft SharePoint Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 13, 2026
  • High max 7.8
    MSRC-CVE-2026-21514 1 CVE 1 exploited

    Microsoft Word Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2026-21510 1 CVE 1 exploited

    Windows Shell Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2026-21513 1 CVE 1 exploited

    MSHTML Framework Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-21533 1 CVE 1 exploited

    Windows Remote Desktop Services Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-21519 1 CVE 1 exploited

    Desktop Window Manager Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-21509 1 CVE 1 exploited rev. 7

    Microsoft Office Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Jan 26, 2026
  • High max 5.5
    MSRC-CVE-2026-20805 1 CVE 1 exploited rev. 4

    Desktop Window Manager Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Jan 13, 2026
  • High max 7.8
    MSRC-CVE-2025-60710 1 CVE 1 exploited rev. 4

    Host Process for Windows Tasks Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 11, 2025
  • High max 7.8
    MSRC-CVE-2025-62221 1 CVE 1 exploited

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2025-62215 1 CVE 1 exploited

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-59230 1 CVE 1 exploited

    Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-24990 1 CVE 1 exploited

    Windows Agere Modem Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2025-49706 1 CVE 1 exploited rev. 5

    Microsoft SharePoint Server Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 8, 2025
  • High max 8.8
    MSRC-CVE-2025-33053 1 CVE 1 exploited rev. 2

    Internet Shortcut Files Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Jun 10, 2025
  • High max 8.8
    MSRC-CVE-2025-33073 1 CVE 1 exploited rev. 2

    Windows SMB Client Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 10, 2025
  • High max 7.8
    MSRC-CVE-2025-32709 1 CVE 1 exploited rev. 2

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first May 13, 2025
  • High max 7.5
    MSRC-CVE-2025-30397 1 CVE 1 exploited

    Scripting Engine Memory Corruption Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-32706 1 CVE 1 exploited

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-32701 1 CVE 1 exploited

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-30400 1 CVE 1 exploited

    Microsoft DWM Core Library Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2025-24054 1 CVE 1 exploited rev. 3

    NTLM Hash Disclosure Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Mar 11, 2025
  • High max 7.8
    MSRC-CVE-2025-29824 1 CVE 1 exploited rev. 2

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.0
    MSRC-CVE-2025-26633 1 CVE 1 exploited

    Microsoft Management Console Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-24993 1 CVE 1 exploited

    Windows NTFS Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2025-24991 1 CVE 1 exploited

    Windows NTFS Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-24985 1 CVE 1 exploited

    Windows Fast FAT File System Driver Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 4.6
    MSRC-CVE-2025-24984 1 CVE 1 exploited

    Windows NTFS Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2025-24983 1 CVE 1 exploited

    Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft