Microsoft Security Response Center

8,900 results · Clear filters · Feed

• High max 6.5
  MSRC-CVE-2023-33167 1 CVE

  Remote Procedure Call Runtime Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 11, 2023
• High max 6.5
  MSRC-CVE-2023-33166 1 CVE

  Remote Procedure Call Runtime Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 11, 2023
• High max 4.3
  MSRC-CVE-2023-33165 1 CVE

  Microsoft SharePoint Server Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 11, 2023
• High max 6.8
  MSRC-CVE-2023-33153 1 CVE

  Microsoft Outlook Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 11, 2023
• High max 7.0
  MSRC-CVE-2023-33152 1 CVE

  Microsoft ActiveX Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 11, 2023
• High max 9.6
  MSRC-CVE-2023-33150 1 CVE

  Microsoft Office Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 11, 2023
• High max 7.8
  MSRC-CVE-2023-33149 1 CVE

  Microsoft Office Graphics Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 11, 2023
• High max 7.8
  MSRC-CVE-2023-33148 1 CVE

  Microsoft Office Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 11, 2023
• High max 7.8
  MSRC-CVE-2023-21756 1 CVE

  Windows Win32k Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 11, 2023
• High max 5.4
  MSRC-CVE-2023-24896 1 CVE rev. 2

  Dynamics 365 Finance Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 11, 2023

  first Jun 13, 2023
• High max 7.8
  MSRC-CVE-2022-41089 1 CVE rev. 4

  .NET Framework Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 30, 2023

  first Dec 13, 2022
• High max 7.8
  MSRC-CVE-2023-21772 1 CVE rev. 2

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 30, 2023

  first Jan 10, 2023
• High max 7.8
  MSRC-CVE-2023-21808 1 CVE rev. 5

  .NET and Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 30, 2023

  first Feb 14, 2023
• High max 7.3
  MSRC-CVE-2023-33128 1 CVE rev. 2

  .NET and Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 29, 2023

  first Jun 13, 2023
• High max 7.3
  MSRC-CVE-2023-33126 1 CVE rev. 2

  .NET and Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 29, 2023

  first Jun 13, 2023
• High max 6.5
  MSRC-CVE-2023-32032 1 CVE rev. 2

  .NET and Visual Studio Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 29, 2023

  first Jun 13, 2023
• High max 7.5
  MSRC-CVE-2023-29331 1 CVE rev. 2

  .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 29, 2023

  first Jun 13, 2023
• High max 7.8
  MSRC-CVE-2023-24895 1 CVE rev. 2

  .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 29, 2023

  first Jun 13, 2023
• High max 7.8
  MSRC-CVE-2023-24897 1 CVE rev. 2

  .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 29, 2023

  first Jun 13, 2023
• High max 8.2
  MSRC-CVE-2023-23383 1 CVE rev. 4

  Service Fabric Explorer Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 29, 2023

  first Mar 14, 2023
• High max 7.5
  MSRC-CVE-2023-33141 1 CVE rev. 3

  Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 22, 2023

  first Jun 13, 2023
• High max 6.5
  MSRC-CVE-2023-33142 1 CVE rev. 2

  Microsoft SharePoint Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2023

  first Jun 13, 2023
• High max 6.3
  MSRC-CVE-2023-33132 1 CVE rev. 2

  Microsoft SharePoint Server Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2023

  first Jun 13, 2023
• High max 7.3
  MSRC-CVE-2023-33130 1 CVE rev. 2

  Microsoft SharePoint Server Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2023

  first Jun 13, 2023
• High max 6.5
  MSRC-CVE-2023-33129 1 CVE rev. 2

  Microsoft SharePoint Server Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2023

  first Jun 13, 2023
• High max 7.5
  MSRC-CVE-2023-24856 1 CVE rev. 2

  Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2023

  first Mar 14, 2023
• High max 4.5
  MSRC-CVE-2023-23408 1 CVE rev. 2

  Azure Apache Ambari Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 16, 2023

  first Mar 14, 2023
• High max 5.4
  MSRC-CVE-2023-24921 1 CVE rev. 2

  Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 16, 2023

  first Mar 14, 2023
• High max 7.8
  MSRC-CVE-2023-29370 1 CVE rev. 2

  Windows Media Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 15, 2023

  first Jun 13, 2023
• High max 8.1
  MSRC-CVE-2023-28288 1 CVE rev. 2

  Microsoft SharePoint Server Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 15, 2023

  first Apr 11, 2023
• High max 6.5
  MSRC-CVE-2023-33145 1 CVE

  Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• High max 6.6
  MSRC-CVE-2023-33144 1 CVE

  Visual Studio Code Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• High max 7.3
  MSRC-CVE-2023-33135 1 CVE

  .NET and Visual Studio Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• High max 7.8
  MSRC-CVE-2023-33133 1 CVE

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• High max 7.5
  MSRC-CVE-2023-32030 1 CVE

  .NET and Visual Studio Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• High max 7.6
  MSRC-CVE-2023-32022 1 CVE

  Windows Server Service Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• High max 7.1
  MSRC-CVE-2023-32021 1 CVE

  Windows SMB Witness Service Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• High max 5.6
  MSRC-CVE-2023-32020 1 CVE

  Windows DNS Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• High max 4.7
  MSRC-CVE-2023-32019 1 CVE

  Windows Kernel Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• High max 7.8
  MSRC-CVE-2023-32018 1 CVE

  Windows Hello Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023