Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

8,900 results · Clear filters · Feed

  • High max 7.8
    MSRC-CVE-2025-24083 1 CVE

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-24082 1 CVE

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-24081 1 CVE

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-24080 1 CVE

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-24079 1 CVE

    Microsoft Word Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2025-24078 1 CVE

    Microsoft Word Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-24077 1 CVE

    Microsoft Word Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2025-24070 1 CVE

    ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2025-24043 1 CVE

    WinDbg Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.3
    MSRC-CVE-2022-30170 1 CVE rev. 2

    Windows Credential Roaming Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 13, 2022
  • High max 7.8
    MSRC-CVE-2025-21325 1 CVE rev. 2

    Windows Secure Kernel Mode Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 16, 2025
  • High max 8.8
    MSRC-CVE-2025-21178 1 CVE rev. 3

    Visual Studio Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 14, 2025
  • High max 7.8
    MSRC-CVE-2025-21359 1 CVE rev. 2

    Windows Kernel Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Feb 11, 2025
  • High max 7.8
    MSRC-CVE-2025-21395 1 CVE rev. 3

    Microsoft Access Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 14, 2025
  • High max 7.5
    MSRC-CVE-2025-21172 1 CVE rev. 2

    .NET and Visual Studio Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 14, 2025
  • High max 8.8
    MSRC-CVE-2025-21176 1 CVE rev. 2

    .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 14, 2025
  • High max 7.3
    MSRC-CVE-2025-24042 1 CVE

    Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-21373 1 CVE

    Windows Installer Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2025-21414 1 CVE

    Windows Core Messaging Elevation of Privileges Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-21322 1 CVE

    Microsoft PC Manager Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2025-21254 1 CVE

    Internet Connection Sharing (ICS) Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2025-21216 1 CVE

    Internet Connection Sharing (ICS) Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2025-21212 1 CVE

    Internet Connection Sharing (ICS) Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2025-21184 1 CVE

    Windows Core Messaging Elevation of Privileges Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2025-21181 1 CVE

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 4.8
    MSRC-CVE-2025-21179 1 CVE

    DHCP Client Service Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.0
    MSRC-CVE-2025-21400 1 CVE

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-21397 1 CVE

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-21394 1 CVE

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-21392 1 CVE

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-21390 1 CVE

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-21387 1 CVE

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-21386 1 CVE

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2025-21377 1 CVE

    NTLM Hash Disclosure Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2025-21371 1 CVE

    Windows Telephony Service Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-21358 1 CVE

    Windows Core Messaging Elevation of Privileges Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 5.9
    MSRC-CVE-2025-21350 1 CVE

    Windows Kerberos Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.8
    MSRC-CVE-2025-21349 1 CVE

    Windows Remote Desktop Configuration Service Tampering Vulnerability

    Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.0
    MSRC-CVE-2025-21347 1 CVE

    Windows Deployment Services Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 3.3
    MSRC-CVE-2025-21337 1 CVE

    Windows NTFS Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft