Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

134 results · Clear filters · Feed

  • High max 7.8
    MSRC-CVE-2025-21418 1 CVE 1 exploited

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  • High max 7.1
    MSRC-CVE-2025-21391 1 CVE 1 exploited

    Windows Storage Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  • High max 7.8
    MSRC-CVE-2025-21335 1 CVE 1 exploited rev. 2

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Jan 14, 2025
  • High max 7.8
    MSRC-CVE-2025-21334 1 CVE 1 exploited rev. 2

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Jan 14, 2025
  • High max 7.8
    MSRC-CVE-2025-21333 1 CVE 1 exploited rev. 2

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Jan 14, 2025
  • High max 5.5
    MSRC-CVE-2013-3900 1 CVE 1 exploited rev. 6

    WinVerifyTrust Signature Validation Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    first Jan 11, 2022
  • High max 6.5
    MSRC-CVE-2024-43451 1 CVE 1 exploited rev. 2

    NTLM Hash Disclosure Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    first Nov 12, 2024
  • High max 7.8
    MSRC-CVE-2024-49138 1 CVE 1 exploited

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  • High max 8.8
    MSRC-CVE-2024-49039 1 CVE 1 exploited rev. 2

    Windows Task Scheduler Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Nov 12, 2024
  • High max 7.8
    MSRC-CVE-2024-43572 1 CVE 1 exploited

    Microsoft Management Console Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  • High max 7.3
    MSRC-CVE-2024-38226 1 CVE 1 exploited rev. 2

    Microsoft Publisher Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Sep 10, 2024
  • High max 8.8
    MSRC-CVE-2024-43461 1 CVE 1 exploited rev. 2

    Windows MSHTML Platform Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    first Sep 10, 2024
  • High max 5.4
    MSRC-CVE-2024-38217 1 CVE 1 exploited

    Windows Mark of the Web Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  • High max 7.8
    MSRC-CVE-2024-38014 1 CVE 1 exploited

    Windows Installer Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  • High max 7.5
    MSRC-CVE-2024-38178 1 CVE 1 exploited rev. 2

    Scripting Engine Memory Corruption Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Aug 13, 2024
  • High max 8.8
    MSRC-CVE-2024-38189 1 CVE 1 exploited rev. 2

    Microsoft Project Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Aug 13, 2024
  • High max 7.8
    MSRC-CVE-2024-38107 1 CVE 1 exploited

    Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  • High max 7.0
    MSRC-CVE-2024-38106 1 CVE 1 exploited

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  • High max 7.8
    MSRC-CVE-2024-38193 1 CVE 1 exploited

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  • High max 7.5
    MSRC-CVE-2024-38112 1 CVE 1 exploited rev. 2

    Windows MSHTML Platform Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Jul 9, 2024
  • High max 7.2
    MSRC-CVE-2024-38094 1 CVE 1 exploited

    Microsoft SharePoint Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  • High max 7.8
    MSRC-CVE-2024-38080 1 CVE 1 exploited

    Windows Hyper-V Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  • High max 7.0
    MSRC-CVE-2024-30088 1 CVE 1 exploited

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  • High max 7.8
    MSRC-CVE-2024-35250 1 CVE 1 exploited rev. 2

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  • High max 7.8
    MSRC-CVE-2024-30051 1 CVE 1 exploited

    Windows DWM Core Library Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  • High max 8.8
    MSRC-CVE-2024-30040 1 CVE 1 exploited

    Windows MSHTML Platform Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  • High max 7.5
    MSRC-CVE-2024-29059 1 CVE 1 exploited rev. 2

    .NET Framework Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Mar 12, 2024
  • High max 8.8
    MSRC-CVE-2024-29988 1 CVE 1 exploited

    SmartScreen Prompt Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  • High max 7.8
    MSRC-CVE-2024-26169 1 CVE 1 exploited

    Windows Error Reporting Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.8
    MSRC-CVE-2024-21338 1 CVE 1 exploited rev. 3

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Feb 13, 2024
  • High max 8.1
    MSRC-CVE-2024-21412 1 CVE 1 exploited rev. 2

    Internet Shortcut Files Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Feb 13, 2024
  • High max 8.8
    MSRC-CVE-2023-36025 1 CVE 1 exploited rev. 2

    Windows SmartScreen Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    first Nov 14, 2023
  • High max 7.8
    MSRC-CVE-2023-36033 1 CVE 1 exploited

    Windows DWM Core Library Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  • High max 7.8
    MSRC-CVE-2023-36424 1 CVE 1 exploited

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  • High max 7.8
    MSRC-CVE-2023-36036 1 CVE 1 exploited

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  • High max 6.5
    MSRC-CVE-2023-36761 1 CVE 1 exploited rev. 2

    Microsoft Word Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    first Sep 12, 2023
  • High max 7.5
    MSRC-CVE-2023-36884 1 CVE 1 exploited rev. 5

    Windows Search Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Jul 11, 2023
  • High max 6.5
    MSRC-CVE-2023-36563 1 CVE 1 exploited rev. 2

    Microsoft WordPad Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    first Oct 10, 2023
  • High max 5.4
    MSRC-CVE-2023-36584 1 CVE 1 exploited

    Windows Mark of the Web Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 5.3
    MSRC-CVE-2023-41763 1 CVE 1 exploited

    Skype for Business Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.