Microsoft Security Response Center

8,900 results · Clear filters · Feed

• High max 7.8
  MSRC-CVE-2022-24521 1 CVE 1 exploited

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 6.5
  MSRC-CVE-2022-23268 1 CVE

  Windows Hyper-V Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 7.8
  MSRC-CVE-2022-26903 1 CVE

  Windows Graphics Component Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 7.8
  MSRC-CVE-2022-24532 1 CVE

  HEVC Video Extensions Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 7.8
  MSRC-CVE-2022-24473 1 CVE

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 7.8
  MSRC-CVE-2022-26901 1 CVE

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 6.5
  MSRC-CVE-2022-26783 1 CVE

  Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 6.5
  MSRC-CVE-2022-26785 1 CVE

  Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 6.5
  MSRC-CVE-2022-26784 1 CVE

  Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 7.8
  MSRC-CVE-2022-24499 1 CVE

  Windows Installer Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 7.8
  MSRC-CVE-2022-24550 1 CVE

  Windows Telephony Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 8.8
  MSRC-CVE-2022-24528 1 CVE

  Remote Procedure Call Runtime Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 5.5
  MSRC-CVE-2022-24483 1 CVE

  Windows Kernel Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 7.8
  MSRC-CVE-2022-24547 1 CVE

  Windows Digital Media Receiver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 6.5
  MSRC-CVE-2022-24498 1 CVE

  Windows iSCSI Target Service Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 7.8
  MSRC-CVE-2022-24546 1 CVE

  Windows DWM Core Library Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 7.0
  MSRC-CVE-2022-24495 1 CVE

  Windows Direct Show Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 7.8
  MSRC-CVE-2022-24494 1 CVE

  Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 7.8
  MSRC-CVE-2022-24542 1 CVE

  Windows Win32k Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 7.8
  MSRC-CVE-2022-24530 1 CVE

  Windows Installer Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 7.8
  MSRC-CVE-2022-22009 1 CVE

  Windows Hyper-V Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 7.5
  MSRC-CVE-2022-21983 1 CVE

  Win32 Stream Enumeration Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 12, 2022
• High max 7.0
  MSRC-CVE-2022-24482 1 CVE

  Windows ALPC Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 5, 2022

  first Apr 12, 2022
• High max 8.3
  MSRC-CVE-2022-26908 1 CVE

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 1, 2022

  first Apr 12, 2022
• High max 8.3
  MSRC-CVE-2022-26900 1 CVE

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 1, 2022

  first Apr 12, 2022
• High max 8.3
  MSRC-CVE-2022-26895 1 CVE

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 1, 2022

  first Apr 12, 2022
• High max 8.3
  MSRC-CVE-2022-26894 1 CVE

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 1, 2022

  first Apr 12, 2022
• High max 8.3
  MSRC-CVE-2022-26891 1 CVE

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 1, 2022

  first Apr 12, 2022
• High max 8.3
  MSRC-CVE-2022-24475 1 CVE

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Apr 1, 2022

  first Apr 12, 2022
• High max 7.8
  MSRC-CVE-2022-23295 1 CVE rev. 2

  Raw Image Extension Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Mar 31, 2022

  first Mar 8, 2022
• High max 7.8
  MSRC-CVE-2021-36927 1 CVE rev. 3

  Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Mar 25, 2022

  first Aug 10, 2021
• High max 7.8
  MSRC-CVE-2022-23300 1 CVE rev. 2

  Raw Image Extension Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Mar 24, 2022

  first Mar 8, 2022
• High max 7.8
  MSRC-CVE-2022-23282 1 CVE rev. 2

  Paint 3D Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Mar 23, 2022

  first Mar 8, 2022
• High max 7.2
  MSRC-CVE-2022-21957 1 CVE rev. 3

  Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Mar 23, 2022

  first Feb 8, 2022
• High max 6.3
  MSRC-CVE-2022-26899 1 CVE

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Mar 17, 2022

  first Mar 8, 2022
• High max 4.4
  MSRC-CVE-2022-22010 1 CVE rev. 2

  Media Foundation Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Mar 17, 2022

  first Mar 8, 2022
• High max 7.8
  MSRC-CVE-2022-23299 1 CVE rev. 2

  Windows PDEV Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Mar 17, 2022

  first Mar 8, 2022
• High max 5.5
  MSRC-CVE-2022-24511 1 CVE rev. 2

  Microsoft Office Word Tampering Vulnerability

  Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Mar 16, 2022

  first Mar 8, 2022
• High max 8.8
  MSRC-CVE-2022-23285 1 CVE rev. 2

  Remote Desktop Client Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Mar 16, 2022

  first Mar 8, 2022
• High max 7.0
  MSRC-CVE-2022-23283 1 CVE rev. 2

  Windows ALPC Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Mar 16, 2022

  first Mar 8, 2022