Microsoft Security Response Center

8,900 results · Clear filters · Feed

• High max 7.0
  MSRC-CVE-2026-69280 1 CVE rev. 2

  Windows Push Notifications Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 9.8
  MSRC-CVE-2026-68839 1 CVE rev. 2

  Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-83952 1 CVE rev. 2

  Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 4.6
  MSRC-CVE-2026-69548 1 CVE rev. 2

  Windows RNDIS Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 6.8
  MSRC-CVE-2026-68833 1 CVE rev. 2

  Windows NTFS Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 7.0
  MSRC-CVE-2026-85360 1 CVE rev. 2

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 7.0
  MSRC-CVE-2026-69492 1 CVE rev. 3

  Windows Partition Management Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-73016 1 CVE rev. 3

  DirectWrite Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 5.5
  MSRC-CVE-2026-81394 1 CVE rev. 4

  Microsoft Excel Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-81954 1 CVE rev. 4

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-81398 1 CVE rev. 4

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 6.5
  MSRC-CVE-2026-72974 1 CVE rev. 3

  Microsoft Office Excel Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-81957 1 CVE rev. 5

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 6.5
  MSRC-CVE-2026-69409 1 CVE rev. 4

  Microsoft Office SharePoint Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-56172 1 CVE rev. 4

  Windows VHD miniport driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 7.0
  MSRC-CVE-2026-62694 1 CVE rev. 3

  Windows Installer Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 8.0
  MSRC-CVE-2026-68880 1 CVE rev. 5

  Windows Win32k Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-69277 1 CVE rev. 3

  Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-70583 1 CVE rev. 4

  Windows Core Messaging Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 6.7
  MSRC-CVE-2026-71339 1 CVE rev. 3

  Windows Installer Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-69467 1 CVE rev. 4

  Microsoft Graphics Component Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 7.0
  MSRC-CVE-2026-68884 1 CVE rev. 3

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Sep 8, 2026
• High max 7.5
  MSRC-CVE-2026-70202 1 CVE rev. 2

  Microsoft Office SharePoint Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-88152 1 CVE rev. 2

  Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-88128 1 CVE rev. 2

  Windows DWM Core Library Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-88072 1 CVE rev. 2

  Windows Host Guardian Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Oct 13, 2026
• High max 7.0
  MSRC-CVE-2026-83676 1 CVE rev. 2

  Windows Installer Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Oct 13, 2026
• High max 5.5
  MSRC-CVE-2026-70199 1 CVE rev. 3

  Windows Kernel Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-69880 1 CVE rev. 2

  Desktop Window Manager Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Oct 13, 2026
• High max 5.5
  MSRC-CVE-2026-96314 1 CVE rev. 3

  Windows Audio Service Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-96223 1 CVE rev. 2

  Windows Hyper-V Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Oct 13, 2026
• High max 6.5
  MSRC-CVE-2026-88151 1 CVE rev. 2

  Microsoft Office Excel Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Oct 13, 2026
• High max 6.5
  MSRC-CVE-2026-69940 1 CVE rev. 2

  Windows Client for NFS Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-85927 1 CVE rev. 2

  Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Oct 13, 2026
• High max 7.0
  MSRC-CVE-2026-84018 1 CVE rev. 2

  Windows Print Spooler Components Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-83919 1 CVE rev. 2

  Microsoft Internet Messaging API Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-83902 1 CVE rev. 2

  Windows Direct Composition Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Oct 13, 2026
• High max 7.0
  MSRC-CVE-2026-83846 1 CVE rev. 2

  Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Oct 13, 2026
• High max 7.0
  MSRC-CVE-2026-83775 1 CVE rev. 3

  Windows Installer Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-83768 1 CVE rev. 2

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Nov 10, 2026

  first Oct 13, 2026