Microsoft Security Response Center

8,900 results · Clear filters · Feed

• High max 9.1
  MSRC-CVE-2026-45602 1 CVE rev. 2

  Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability

  Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 16, 2026

  first Jun 9, 2026
• High max 8.8
  MSRC-CVE-2026-40371 1 CVE rev. 3

  Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 16, 2026

  first Jun 9, 2026
• High max 7.5
  MSRC-CVE-2026-20846 1 CVE rev. 2

  GDI+ Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 10, 2026

  first Feb 10, 2026
• High max 8.0
  MSRC-CVE-2026-47294 1 CVE rev. 3

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 10, 2026

  first May 29, 2026
• High max 8.0
  MSRC-CVE-2026-47298 1 CVE rev. 2

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 10, 2026

  first Jun 9, 2026
• High max 8.4
  MSRC-CVE-2026-45482 1 CVE rev. 2

  Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 10, 2026

  first Jun 9, 2026
• High max 7.5
  MSRC-CVE-2026-40376 1 CVE rev. 2

  Visual Studio Code Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 10, 2026

  first Jun 9, 2026
• High max 7.1
  MSRC-CVE-2026-48569 1 CVE rev. 2

  Visual Studio Code Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 10, 2026

  first Jun 9, 2026
• High max 6.5
  MSRC-CVE-2026-50519 1 CVE

  Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 4.4
  MSRC-CVE-2026-41100 1 CVE rev. 2

  Microsoft 365 Copilot for Android Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jun 9, 2026

  first May 12, 2026
• High max 7.5
  MSRC-CVE-2024-49075 1 CVE rev. 2

  Windows Remote Desktop Services Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026

  first Dec 10, 2024
• High max 7.5
  MSRC-CVE-2025-21330 1 CVE rev. 2

  Windows Remote Desktop Services Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026

  first Jan 14, 2025
• High max 6.7
  MSRC-CVE-2026-21530 1 CVE rev. 3

  Windows Rich Text Edit Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026

  first May 12, 2026
• High max 6.8
  MSRC-CVE-2026-45585 1 CVE rev. 7

  Windows BitLocker Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026

  first May 19, 2026
• High max 7.0
  MSRC-CVE-2020-17103 1 CVE rev. 2

  Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026

  first Dec 8, 2020
• High max 7.8
  MSRC-CVE-2026-50511 1 CVE

  Microsoft PC Manager Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-50512 1 CVE

  Microsoft PC Manager Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-44804 1 CVE

  Windows DWM Core Library Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-44813 1 CVE

  Windows DWM Core Library Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-42983 1 CVE

  Windows DWM Core Library Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-44807 1 CVE

  Windows DWM Core Library Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-44808 1 CVE

  Windows DWM Core Library Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-44811 1 CVE

  Windows DWM Core Library Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 5.5
  MSRC-CVE-2026-44805 1 CVE

  Windows Network Controller (NC) Host Agent Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-44809 1 CVE

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-42989 1 CVE

  Winlogon Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-42991 1 CVE

  Windows Push Notifications Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-42979 1 CVE

  Windows Push Notifications Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-42977 1 CVE

  Windows Push Notifications Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-42978 1 CVE

  Windows Push Notifications Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-42986 1 CVE

  Microsoft Graphics Component Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 8.1
  MSRC-CVE-2026-42974 1 CVE

  Windows Performance Monitor Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 8.1
  MSRC-CVE-2026-42981 1 CVE

  Windows Performance Monitor Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 7.0
  MSRC-CVE-2026-42984 1 CVE

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 5.5
  MSRC-CVE-2026-42973 1 CVE

  Windows Push Notification Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 5.5
  MSRC-CVE-2026-42970 1 CVE

  Windows Push Notification Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 5.5
  MSRC-CVE-2026-42971 1 CVE

  Windows Push Notification Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 5.5
  MSRC-CVE-2026-42969 1 CVE

  Windows Push Notification Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 5.5
  MSRC-CVE-2026-42972 1 CVE

  Windows Hyper-V Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026
• High max 5.5
  MSRC-CVE-2026-42968 1 CVE

  Windows Telephony Server Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2026