Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

8,900 results · Clear filters · Feed

  • High max 7.6
    MSRC-CVE-2023-38164 1 CVE rev. 2

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 12, 2023
  • High max 7.6
    MSRC-CVE-2023-36886 1 CVE rev. 2

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 12, 2023
  • High max 7.5
    MSRC-CVE-2023-36884 1 CVE 1 exploited rev. 5

    Windows Search Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Jul 11, 2023
  • High max 7.8
    MSRC-CVE-2023-21537 1 CVE rev. 2

    Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 8.3
    MSRC-CVE-2023-36741 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Aug 25, 2023
  • High max 6.2
    MSRC-CVE-2023-35391 1 CVE rev. 2

    ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Aug 8, 2023
  • High max 8.8
    MSRC-CVE-2023-38186 1 CVE rev. 2

    Windows Mobile Device Management Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Aug 8, 2023
  • High max 7.5
    MSRC-CVE-2023-35383 1 CVE rev. 2

    Microsoft Message Queuing Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Aug 8, 2023
  • High max 6.5
    MSRC-CVE-2023-36913 1 CVE rev. 2

    Microsoft Message Queuing Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Aug 8, 2023
  • High max 6.5
    MSRC-CVE-2023-36908 1 CVE rev. 2

    Windows Hyper-V Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Aug 8, 2023
  • High max 5.5
    MSRC-CVE-2023-36905 1 CVE rev. 2

    Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Aug 8, 2023
  • High max 7.8
    MSRC-CVE-2023-36417 1 CVE rev. 2

    Microsoft SQL OLE DB Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Oct 10, 2023
  • High max 8.8
    MSRC-CVE-2023-36414 1 CVE rev. 2

    Azure Identity SDK Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Oct 10, 2023
  • High max 8.8
    MSRC-CVE-2023-36415 1 CVE rev. 2

    Azure Identity SDK Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Oct 10, 2023
  • High max 7.8
    MSRC-CVE-2023-29343 1 CVE rev. 2

    SysInternals Sysmon for Windows Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first May 9, 2023
  • High max 7.8
    MSRC-CVE-2022-41113 1 CVE rev. 5

    Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Nov 8, 2022
  • High max 7.8
    MSRC-CVE-2023-36785 1 CVE rev. 2

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Oct 10, 2023
  • High max 6.5
    MSRC-CVE-2023-36563 1 CVE 1 exploited rev. 2

    Microsoft WordPad Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    Microsoft
    first Oct 10, 2023
  • High max 7.8
    MSRC-CVE-2023-36730 1 CVE rev. 2

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Oct 10, 2023
  • High max 7.8
    MSRC-CVE-2023-28304 1 CVE rev. 3

    Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 11, 2023
  • High max 7.8
    MSRC-CVE-2023-23375 1 CVE rev. 3

    Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 11, 2023
  • High max 6.1
    MSRC-CVE-2023-36416 1 CVE

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-36418 1 CVE

    Azure RTOS GUIX Studio Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2023-36565 1 CVE

    Microsoft Office Graphics Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-36743 1 CVE

    Win32k Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-36790 1 CVE

    Windows RDP Encoder Mirror Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2023-36776 1 CVE

    Win32k Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 8.0
    MSRC-CVE-2023-36778 1 CVE

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.2
    MSRC-CVE-2023-36780 1 CVE

    Skype for Business Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2023-38159 1 CVE

    Windows Graphics Component Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2023-36429 1 CVE

    Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2023-36431 1 CVE

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2023-36433 1 CVE

    Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 9.8
    MSRC-CVE-2023-36434 1 CVE

    Windows IIS Server Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2023-36438 1 CVE

    Windows TCP/IP Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-36557 1 CVE

    PrintHTML API Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.3
    MSRC-CVE-2023-36561 1 CVE

    Azure DevOps Server Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2023-36564 1 CVE

    Windows Search Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2023-36567 1 CVE

    Windows Deployment Services Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2023-36568 1 CVE

    Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft