Microsoft Security Response Center

134 results · Clear filters · Feed

• High max 7.8
  MSRC-CVE-2023-36802 1 CVE 1 exploited rev. 2

  Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Sep 19, 2023

  first Sep 12, 2023
• High max 7.5
  MSRC-CVE-2023-38180 1 CVE 1 exploited rev. 2

  .NET and Visual Studio Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Aug 11, 2023

  first Aug 8, 2023
• High max 8.4
  MSRC-CVE-2023-29360 1 CVE 1 exploited rev. 2

  Microsoft Streaming Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Aug 10, 2023

  first Jun 13, 2023
• High max 8.8
  MSRC-CVE-2023-35311 1 CVE 1 exploited rev. 2

  Microsoft Outlook Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Jul 21, 2023

  first Jul 11, 2023
• High max 8.8
  MSRC-CVE-2023-32049 1 CVE 1 exploited

  Windows SmartScreen Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Jul 11, 2023
• High max 7.8
  MSRC-CVE-2023-36874 1 CVE 1 exploited

  Windows Error Reporting Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Jul 11, 2023
• High max 7.8
  MSRC-CVE-2023-32046 1 CVE 1 exploited

  Windows MSHTML Platform Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Jul 11, 2023
• High max 7.8
  MSRC-CVE-2023-29336 1 CVE 1 exploited

  Win32k Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  May 9, 2023
• High max 7.3
  MSRC-CVE-2023-21715 1 CVE 1 exploited rev. 4

  Microsoft Publisher Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Apr 14, 2023

  first Feb 14, 2023
• High max 7.8
  MSRC-CVE-2023-28252 1 CVE 1 exploited

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Apr 11, 2023
• High max 7.0
  MSRC-CVE-2023-28229 1 CVE 1 exploited

  Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 11, 2023
• High max 7.8
  MSRC-CVE-2023-21823 1 CVE 1 exploited rev. 2

  Windows Graphics Component Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Feb 17, 2023

  first Feb 14, 2023
• High max 7.8
  MSRC-CVE-2023-23376 1 CVE 1 exploited

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Feb 14, 2023
• High max 8.8
  MSRC-CVE-2023-21529 1 CVE 1 exploited

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Feb 14, 2023
• High max 8.8
  MSRC-CVE-2023-21674 1 CVE 1 exploited

  Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Jan 10, 2023
• High max 5.4
  MSRC-CVE-2022-41049 1 CVE 1 exploited rev. 2

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Nov 11, 2022

  first Nov 8, 2022
• High max 8.0
  MSRC-CVE-2022-41082 1 CVE 1 exploited rev. 3

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Nov 8, 2022

  first Sep 13, 2022
• High max 7.8
  MSRC-CVE-2022-41125 1 CVE 1 exploited

  Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Nov 8, 2022
• High max 7.8
  MSRC-CVE-2022-41073 1 CVE 1 exploited

  Windows Print Spooler Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Nov 8, 2022
• High max 5.4
  MSRC-CVE-2022-41091 1 CVE 1 exploited

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  Nov 8, 2022
• High max 7.8
  MSRC-CVE-2022-41033 1 CVE 1 exploited

  Windows COM+ Event System Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Oct 11, 2022
• High max 7.8
  MSRC-CVE-2022-38028 1 CVE 1 exploited

  Windows Print Spooler Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• High max 7.8
  MSRC-CVE-2022-37969 1 CVE 1 exploited

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  Sep 13, 2022
• High max 8.8
  MSRC-CVE-2021-40444 1 CVE 1 exploited rev. 5

  Microsoft MSHTML Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  Aug 16, 2022

  first Sep 7, 2021
• High max 7.8
  MSRC-CVE-2022-34713 1 CVE 1 exploited rev. 2

  Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Aug 10, 2022

  first Aug 9, 2022
• High max 7.8
  MSRC-CVE-2022-22047 1 CVE 1 exploited

  Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Jul 12, 2022
• High max 8.8
  MSRC-CVE-2021-42321 1 CVE 1 exploited rev. 5

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Jun 21, 2022

  first Nov 9, 2021
• High max 7.8
  MSRC-CVE-2022-30190 1 CVE 1 exploited rev. 3

  Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  Jun 14, 2022

  first May 10, 2022
• High max 8.1
  MSRC-CVE-2022-26925 1 CVE 1 exploited

  Windows LSA Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  May 10, 2022
• High max 7.0
  MSRC-CVE-2022-26904 1 CVE 1 exploited

  Windows User Profile Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 7.8
  MSRC-CVE-2022-24521 1 CVE 1 exploited

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 7.8
  MSRC-CVE-2022-21999 1 CVE 1 exploited rev. 2

  Windows Print Spooler Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Feb 9, 2022

  first Feb 8, 2022
• High max 7.8
  MSRC-CVE-2022-22718 1 CVE 1 exploited rev. 2

  Windows Print Spooler Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Feb 9, 2022

  first Feb 8, 2022
• High max 7.8
  MSRC-CVE-2022-21971 1 CVE 1 exploited

  Windows Runtime Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Feb 8, 2022
• High max 7.0
  MSRC-CVE-2022-21882 1 CVE 1 exploited rev. 2

  Win32k Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jan 13, 2022

  first Jan 11, 2022
• High max 7.0
  MSRC-CVE-2022-21919 1 CVE 1 exploited

  Windows User Profile Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jan 11, 2022
• High max 7.8
  MSRC-CVE-2021-42292 1 CVE 1 exploited rev. 2

  Microsoft Excel Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Nov 16, 2021

  first Nov 9, 2021
• High max 7.5
  MSRC-CVE-2021-42278 1 CVE 1 exploited

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021
• High max 7.5
  MSRC-CVE-2021-42287 1 CVE 1 exploited

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021
• High max 5.5
  MSRC-CVE-2021-41379 1 CVE 1 exploited

  Windows Installer Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021