Microsoft Security Response Center

8,900 results · Clear filters · Feed

• High max 6.5
  MSRC-CVE-2026-57987 1 CVE

  Microsoft Edge (Chromium-based) Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jul 3, 2026
• High max 7.6
  MSRC-CVE-2026-57985 1 CVE

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jul 3, 2026
• High max 7.5
  MSRC-CVE-2026-57984 1 CVE

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jul 3, 2026
• High max 8.7
  MSRC-CVE-2026-57983 1 CVE

  Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jul 3, 2026
• High max 7.5
  MSRC-CVE-2026-57975 1 CVE

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jul 3, 2026
• High max 8.8
  MSRC-CVE-2026-56645 1 CVE

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 3, 2026
• High max 8.3
  MSRC-CVE-2026-50521 1 CVE rev. 2

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 2, 2026

  first Jun 26, 2026
• High max 7.4
  MSRC-CVE-2026-57991 1 CVE

  Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jul 2, 2026
• High max 7.8
  MSRC-CVE-2026-44802 1 CVE rev. 2

  Windows DWM Core Library Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 30, 2026

  first Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-42910 1 CVE rev. 2

  Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 30, 2026

  first Jun 9, 2026
• High max 8.8
  MSRC-CVE-2026-41086 1 CVE rev. 3

  Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 25, 2026

  first May 12, 2026
• High max 7.8
  MSRC-CVE-2026-33840 1 CVE rev. 3

  Win32k Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jun 23, 2026

  first May 12, 2026
• High max 8.8
  MSRC-CVE-2026-45504 1 CVE rev. 2

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jun 23, 2026

  first Jun 9, 2026
• High max 5.5
  MSRC-CVE-2026-42915 1 CVE rev. 3

  Microsoft Windows VMSwitch Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 23, 2026

  first Jun 9, 2026
• High max 3.3
  MSRC-CVE-2026-45459 1 CVE rev. 2

  Microsoft Excel Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-45457 1 CVE rev. 2

  Microsoft Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 3.3
  MSRC-CVE-2026-45455 1 CVE rev. 2

  Microsoft Excel Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 8.2
  MSRC-CVE-2026-44822 1 CVE rev. 2

  Microsoft Excel Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 7.1
  MSRC-CVE-2026-45649 1 CVE rev. 2

  Office for Android Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-45645 1 CVE rev. 2

  Microsoft Office Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-45643 1 CVE rev. 2

  Microsoft Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 3.3
  MSRC-CVE-2026-45466 1 CVE rev. 2

  Microsoft Word Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-44824 1 CVE rev. 2

  Microsoft Office Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-44823 1 CVE rev. 2

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 5.5
  MSRC-CVE-2026-44821 1 CVE rev. 2

  Microsoft Office Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-44820 1 CVE rev. 2

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-44819 1 CVE rev. 2

  Microsoft Office Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 7.0
  MSRC-CVE-2026-44818 1 CVE rev. 2

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-44817 1 CVE rev. 2

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 3.3
  MSRC-CVE-2026-45485 1 CVE rev. 2

  Microsoft Office Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-45486 1 CVE rev. 2

  Microsoft Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-45471 1 CVE rev. 2

  Microsoft Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-45469 1 CVE rev. 2

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 6.5
  MSRC-CVE-2026-42903 1 CVE rev. 3

  Windows Kerberos Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-45475 1 CVE rev. 3

  Microsoft Office Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-24289 1 CVE rev. 2

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first Mar 10, 2026
• High max 7.3
  MSRC-CVE-2026-32177 1 CVE rev. 5

  .NET Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2026

  first May 12, 2026
• High max 7.3
  MSRC-CVE-2026-35433 1 CVE rev. 4

  .NET Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jun 17, 2026

  first May 12, 2026
• High max 7.8
  MSRC-CVE-2026-42828 1 CVE rev. 2

  Windows Projected File System Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 17, 2026

  first Jun 9, 2026
• High max 5.4
  MSRC-CVE-2026-47636 1 CVE rev. 2

  Microsoft SharePoint Server Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 17, 2026

  first Jun 9, 2026