Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

8,900 results · Clear filters · Feed

  • High max 8.8
    MSRC-CVE-2023-21706 1 CVE

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-21704 1 CVE

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2023-21529 1 CVE 1 exploited

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2023-21684 1 CVE

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.7
    MSRC-CVE-2023-21777 1 CVE

    Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2023-21553 1 CVE

    Azure DevOps Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2022-44666 1 CVE rev. 2

    Windows Contacts Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Dec 13, 2022
  • High max 6.3
    MSRC-CVE-2023-21725 1 CVE rev. 2

    Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 5.8
    MSRC-CVE-2022-41064 1 CVE rev. 6

    .NET Framework Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 8, 2022
  • High max 7.5
    MSRC-CVE-2021-42291 1 CVE rev. 2

    Active Directory Domain Services Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 9, 2021
  • High max 7.5
    MSRC-CVE-2023-21538 1 CVE rev. 2

    .NET Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 7.8
    MSRC-CVE-2022-44689 1 CVE rev. 2

    Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Dec 13, 2022
  • High max 7.0
    MSRC-CVE-2022-38014 1 CVE rev. 2

    Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 8, 2022
  • High max 8.8
    MSRC-CVE-2023-21549 1 CVE rev. 3

    Windows SMB Witness Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 7.8
    MSRC-CVE-2023-21524 1 CVE rev. 3

    Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 8.3
    MSRC-CVE-2023-21795 1 CVE

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 8.3
    MSRC-CVE-2023-21796 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 7.5
    MSRC-CVE-2023-21547 1 CVE rev. 2

    Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 7.5
    MSRC-CVE-2023-21683 1 CVE rev. 2

    Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 7.8
    MSRC-CVE-2023-21790 1 CVE rev. 2

    3D Builder Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 7.8
    MSRC-CVE-2023-21789 1 CVE rev. 2

    3D Builder Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 7.8
    MSRC-CVE-2023-21788 1 CVE rev. 2

    3D Builder Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 7.8
    MSRC-CVE-2023-21787 1 CVE rev. 2

    3D Builder Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 7.8
    MSRC-CVE-2023-21785 1 CVE rev. 2

    3D Builder Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 7.8
    MSRC-CVE-2023-21783 1 CVE rev. 2

    3D Builder Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 7.8
    MSRC-CVE-2023-21793 1 CVE rev. 2

    3D Builder Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 7.8
    MSRC-CVE-2023-21791 1 CVE rev. 2

    3D Builder Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 7.8
    MSRC-CVE-2023-21786 1 CVE rev. 2

    3D Builder Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 7.8
    MSRC-CVE-2023-21784 1 CVE rev. 2

    3D Builder Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 7.8
    MSRC-CVE-2023-21782 1 CVE rev. 2

    3D Builder Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 7.8
    MSRC-CVE-2023-21781 1 CVE rev. 2

    3D Builder Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 7.8
    MSRC-CVE-2023-21792 1 CVE

    3D Builder Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.0
    MSRC-CVE-2023-21745 1 CVE

    Microsoft Exchange Server Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-21675 1 CVE

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 4.7
    MSRC-CVE-2023-21536 1 CVE

    Event Tracing for Windows Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2023-21532 1 CVE

    Windows GDI Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2023-21527 1 CVE

    Windows iSCSI Service Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.3
    MSRC-CVE-2023-21525 1 CVE

    Remote Procedure Call Runtime Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2023-21776 1 CVE

    Windows Kernel Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-21774 1 CVE

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft