Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

8,900 results · Clear filters · Feed

  • High max 5.5
    MSRC-CVE-2026-20827 1 CVE

    Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-20826 1 CVE

    Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 4.4
    MSRC-CVE-2026-20825 1 CVE

    Windows Hyper-V Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2026-20824 1 CVE

    Windows Remote Assistance Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.2
    MSRC-CVE-2026-20821 1 CVE

    Remote Procedure Call Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-20820 1 CVE

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2026-20819 1 CVE

    Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-20817 1 CVE

    Windows Error Reporting Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-20816 1 CVE

    Windows Installer Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2026-20815 1 CVE

    Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2026-20814 1 CVE

    DirectX Graphics Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2026-20812 1 CVE

    LDAP Tampering Vulnerability

    Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-20811 1 CVE

    Win32k Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-20810 1 CVE

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-20809 1 CVE

    Windows Kernel Memory Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2026-20808 1 CVE

    Windows File Explorer Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.7
    MSRC-CVE-2026-20804 1 CVE

    Windows Hello Tampering Vulnerability

    Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2026-20965 1 CVE

    Windows Admin Center Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.2
    MSRC-CVE-2026-20803 1 CVE

    Microsoft SQL Server Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2026-0386 1 CVE

    Windows Deployment Services Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 6.4
    MSRC-CVE-2026-21265 1 CVE

    Secure Boot Certificate Expiration Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 4.4
    MSRC-CVE-2026-20962 1 CVE

    Dynamic Root of Trust for Measurement (DRTM) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2025-55683 1 CVE rev. 2

    Windows Kernel Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Oct 14, 2025
  • High max 5.5
    MSRC-CVE-2025-59184 1 CVE rev. 2

    Storage Spaces Direct Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Oct 14, 2025
  • High max 7.8
    MSRC-CVE-2025-60710 1 CVE 1 exploited rev. 4

    Host Process for Windows Tasks Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 11, 2025
  • High max 7.8
    MSRC-CVE-2025-64680 1 CVE rev. 2

    Windows DWM Core Library Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Dec 9, 2025
  • High max 7.8
    MSRC-CVE-2025-54100 1 CVE rev. 2

    PowerShell Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Dec 9, 2025
  • High max 7.0
    MSRC-CVE-2024-30099 1 CVE rev. 2

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Jun 11, 2024
  • High max 7.8
    MSRC-CVE-2025-21367 1 CVE rev. 2

    Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Feb 11, 2025
  • High max 7.8
    MSRC-CVE-2025-24044 1 CVE rev. 2

    Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Mar 11, 2025
  • High max 7.8
    MSRC-CVE-2025-62560 1 CVE rev. 2

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
    first Dec 9, 2025
  • High max 7.8
    MSRC-CVE-2025-62559 1 CVE rev. 2

    Microsoft Word Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Dec 9, 2025
  • High max 7.8
    MSRC-CVE-2025-62558 1 CVE rev. 2

    Microsoft Word Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Dec 9, 2025
  • High max 7.8
    MSRC-CVE-2025-62556 1 CVE rev. 2

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Dec 9, 2025
  • High max 7.0
    MSRC-CVE-2025-62555 1 CVE rev. 2

    Microsoft Word Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Dec 9, 2025
  • High max 7.8
    MSRC-CVE-2025-62564 1 CVE rev. 2

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Dec 9, 2025
  • High max 7.8
    MSRC-CVE-2025-62562 1 CVE rev. 3

    Microsoft Outlook Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
    first Dec 9, 2025
  • High max 7.8
    MSRC-CVE-2025-62561 1 CVE rev. 2

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Dec 9, 2025
  • High max 5.5
    MSRC-CVE-2025-62468 1 CVE rev. 2

    Windows Defender Firewall Service Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Dec 9, 2025
  • High max 7.8
    MSRC-CVE-2025-62221 1 CVE 1 exploited

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft