Microsoft Security Response Center

8,900 results · Clear filters · Feed

• High max 7.8
  MSRC-CVE-2022-41034 1 CVE

  Visual Studio Code Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• High max 7.8
  MSRC-CVE-2022-41032 1 CVE

  NuGet Client Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• High max 6.5
  MSRC-CVE-2022-38001 1 CVE

  Microsoft Office Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• High max 7.8
  MSRC-CVE-2022-38049 1 CVE

  Microsoft Office Graphics Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• High max 7.7
  MSRC-CVE-2022-37998 1 CVE

  Windows Local Session Manager (LSM) Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• High max 7.5
  MSRC-CVE-2022-38036 1 CVE

  Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• High max 7.8
  MSRC-CVE-2022-37987 1 CVE

  Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• High max 7.8
  MSRC-CVE-2022-37986 1 CVE

  Windows Win32k Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• High max 6.2
  MSRC-CVE-2022-35829 1 CVE

  Service Fabric Explorer Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• High max 7.8
  MSRC-CVE-2022-37970 1 CVE

  Windows DWM Core Library Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• High max 6.5
  MSRC-CVE-2022-35770 1 CVE

  Windows NTLM Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• High max 7.5
  MSRC-CVE-2022-33645 1 CVE

  Windows TCP/IP Driver Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• High max 7.8
  MSRC-CVE-2022-33635 1 CVE

  Windows GDI+ Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022
• High max 6.5
  MSRC-CVE-2022-30134 1 CVE rev. 3

  Microsoft Exchange Server Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 11, 2022

  first Aug 9, 2022
• High max 4.8
  MSRC-CVE-2022-21979 1 CVE rev. 4

  Microsoft Exchange Server Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 11, 2022

  first Aug 9, 2022
• High max 7.8
  MSRC-CVE-2022-37955 1 CVE rev. 2

  Windows Group Policy Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 20, 2022

  first Sep 13, 2022
• High max 7.5
  MSRC-CVE-2022-34701 1 CVE rev. 2

  Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 20, 2022

  first Aug 9, 2022
• High max 7.8
  MSRC-CVE-2022-35761 1 CVE rev. 2

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 20, 2022

  first Aug 9, 2022
• High max 6.8
  MSRC-CVE-2022-22041 1 CVE rev. 2

  Windows Print Spooler Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 20, 2022

  first Jul 12, 2022
• High max 4.9
  MSRC-CVE-2022-33642 1 CVE rev. 2

  Azure Site Recovery Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 20, 2022

  first Jul 12, 2022
• High max 5.7
  MSRC-CVE-2022-22711 1 CVE rev. 2

  Windows BitLocker Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 20, 2022

  first Jul 12, 2022
• High max 8.3
  MSRC-CVE-2022-33639 1 CVE rev. 2

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 20, 2022

  first Jun 14, 2022
• High max 7.5
  MSRC-CVE-2022-30139 1 CVE rev. 2

  Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 20, 2022

  first Jun 14, 2022
• High max 7.8
  MSRC-CVE-2022-30174 1 CVE rev. 3

  Microsoft Office Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 20, 2022

  first Jun 14, 2022
• High max 7.8
  MSRC-CVE-2022-30164 1 CVE rev. 2

  Kerberos AppContainer Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 20, 2022

  first Jun 14, 2022
• High max 7.5
  MSRC-CVE-2022-30150 1 CVE rev. 2

  Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 20, 2022

  first Jun 14, 2022
• High max 7.5
  MSRC-CVE-2022-30145 1 CVE rev. 2

  Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 20, 2022

  first Jun 14, 2022
• High max 7.5
  MSRC-CVE-2022-30142 1 CVE rev. 2

  Windows File History Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 20, 2022

  first Jun 14, 2022
• High max 7.5
  MSRC-CVE-2022-30140 1 CVE rev. 2

  Windows iSCSI Discovery Service Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 20, 2022

  first Jun 14, 2022
• High max 7.8
  MSRC-CVE-2022-37963 1 CVE rev. 2

  Microsoft Office Visio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2022

  first Sep 13, 2022
• High max 7.8
  MSRC-CVE-2022-37962 1 CVE rev. 2

  Microsoft PowerPoint Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2022

  first Sep 13, 2022
• High max 7.8
  MSRC-CVE-2022-38010 1 CVE rev. 2

  Microsoft Office Visio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2022

  first Sep 13, 2022
• High max 8.8
  MSRC-CVE-2022-34733 1 CVE rev. 2

  Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2022

  first Sep 13, 2022
• High max 8.8
  MSRC-CVE-2022-34731 1 CVE rev. 2

  Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2022

  first Sep 13, 2022
• High max 8.8
  MSRC-CVE-2022-35840 1 CVE rev. 2

  Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2022

  first Sep 13, 2022
• High max 8.8
  MSRC-CVE-2022-35836 1 CVE rev. 2

  Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2022

  first Sep 13, 2022
• High max 8.8
  MSRC-CVE-2022-35835 1 CVE rev. 2

  Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2022

  first Sep 13, 2022
• High max 8.8
  MSRC-CVE-2022-35834 1 CVE rev. 2

  Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2022

  first Sep 13, 2022
• High max 7.3
  MSRC-CVE-2022-38020 1 CVE

  Visual Studio Code Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 13, 2022
• High max 7.8
  MSRC-CVE-2022-38019 1 CVE

  AV1 Video Extension Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 13, 2022