Microsoft Security Response Center

8,900 results · Clear filters · Feed

• High max 7.8
  MSRC-CVE-2021-41367 1 CVE

  NTFS Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021
• High max 7.8
  MSRC-CVE-2021-41366 1 CVE

  Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021
• High max 7.8
  MSRC-CVE-2021-36957 1 CVE

  Windows Desktop Bridge Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021
• High max 8.1
  MSRC-CVE-2021-33781 1 CVE rev. 3

  Azure AD Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 12, 2021

  first Jul 13, 2021
• High max 6.5
  MSRC-CVE-2021-38624 1 CVE rev. 3

  Windows Key Storage Provider Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 12, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38671 1 CVE rev. 2

  Windows Print Spooler Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38667 1 CVE rev. 2

  Windows Print Spooler Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 6.1
  MSRC-CVE-2021-38657 1 CVE rev. 2

  Microsoft Office Graphics Component Information Disclosure Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38639 1 CVE rev. 2

  Win32k Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38638 1 CVE rev. 2

  Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 5.5
  MSRC-CVE-2021-38637 1 CVE rev. 2

  Windows Storage Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 5.5
  MSRC-CVE-2021-38636 1 CVE rev. 2

  Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 5.5
  MSRC-CVE-2021-38635 1 CVE rev. 2

  Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.1
  MSRC-CVE-2021-38634 1 CVE rev. 2

  Microsoft Windows Update Client Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38633 1 CVE rev. 2

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 5.7
  MSRC-CVE-2021-38632 1 CVE rev. 2

  Windows BitLocker Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38630 1 CVE rev. 2

  Windows Event Tracing Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 6.5
  MSRC-CVE-2021-38629 1 CVE rev. 2

  Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38628 1 CVE rev. 2

  Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-36975 1 CVE rev. 2

  Win32k Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-36974 1 CVE rev. 2

  Windows SMB Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-36973 1 CVE rev. 2

  Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 5.5
  MSRC-CVE-2021-36972 1 CVE rev. 2

  Windows SMB Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 5.5
  MSRC-CVE-2021-36969 1 CVE rev. 2

  Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 8.0
  MSRC-CVE-2021-36967 1 CVE rev. 2

  Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-36966 1 CVE rev. 2

  Windows Subsystem for Linux Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-36964 1 CVE rev. 2

  Windows Event Tracing Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-36963 1 CVE rev. 2

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 5.5
  MSRC-CVE-2021-36962 1 CVE rev. 2

  Windows Installer Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 5.5
  MSRC-CVE-2021-36961 1 CVE rev. 2

  Windows Installer Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.5
  MSRC-CVE-2021-36960 1 CVE rev. 2

  Windows SMB Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 5.5
  MSRC-CVE-2021-36959 1 CVE rev. 2

  Windows Authenticode Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-36955 1 CVE 1 exploited rev. 2

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 8.8
  MSRC-CVE-2021-36954 1 CVE rev. 2

  Windows Bind Filter Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 8.8
  MSRC-CVE-2021-34442 1 CVE rev. 2

  Windows DNS Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021

  first Jul 13, 2021
• High max 6.3
  MSRC-CVE-2021-40448 1 CVE

  Microsoft Accessibility Insights for Android Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38661 1 CVE

  HEVC Video Extensions Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38660 1 CVE

  Microsoft Office Graphics Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38659 1 CVE

  Microsoft Office Graphics Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38658 1 CVE

  Microsoft Office Graphics Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021