Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

8,900 results · Clear filters · Feed

  • High max 8.8
    MSRC-CVE-2024-28941 1 CVE rev. 2

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28940 1 CVE rev. 2

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28938 1 CVE rev. 2

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28937 1 CVE rev. 2

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28935 1 CVE rev. 2

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28934 1 CVE rev. 2

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28933 1 CVE rev. 2

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28930 1 CVE rev. 2

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28927 1 CVE rev. 2

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28926 1 CVE rev. 2

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-29047 1 CVE rev. 2

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 7.5
    MSRC-CVE-2024-29045 1 CVE rev. 2

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-29043 1 CVE rev. 2

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28945 1 CVE rev. 2

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28942 1 CVE rev. 2

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28939 1 CVE rev. 2

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28936 1 CVE rev. 2

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28932 1 CVE rev. 2

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28931 1 CVE rev. 2

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28929 1 CVE rev. 2

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28915 1 CVE rev. 2

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28914 1 CVE rev. 2

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28913 1 CVE rev. 2

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28912 1 CVE rev. 2

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28911 1 CVE rev. 2

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28910 1 CVE rev. 2

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28909 1 CVE rev. 2

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28908 1 CVE rev. 2

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-28906 1 CVE rev. 2

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 7.3
    MSRC-CVE-2024-21409 1 CVE rev. 3

    .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 7.8
    MSRC-CVE-2024-26257 1 CVE rev. 2

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 7.5
    MSRC-CVE-2024-26190 1 CVE rev. 2

    Microsoft QUIC Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Mar 12, 2024
  • High max 7.5
    MSRC-CVE-2024-21392 1 CVE rev. 2

    .NET and Visual Studio Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Mar 12, 2024
  • High max 9.1
    MSRC-CVE-2024-0057 1 CVE rev. 7

    NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 9, 2024
  • High max 7.2
    MSRC-CVE-2024-29054 1 CVE rev. 2

    Microsoft Defender for IoT Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 7.2
    MSRC-CVE-2024-29055 1 CVE rev. 2

    Microsoft Defender for IoT Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 6.7
    MSRC-CVE-2024-26234 1 CVE rev. 3

    Proxy Driver Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 7.2
    MSRC-CVE-2024-21324 1 CVE rev. 2

    Microsoft Defender for IoT Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 9, 2024
  • High max 8.8
    MSRC-CVE-2024-29993 1 CVE

    Azure CycleCloud Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.4
    MSRC-CVE-2024-29989 1 CVE

    Azure Monitor Agent Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft