Microsoft Security Response Center

8,900 results · Clear filters · Feed

• High max 7.8
  MSRC-CVE-2021-38656 1 CVE

  Microsoft Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38655 1 CVE

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38654 1 CVE

  Microsoft Office Visio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38653 1 CVE

  Microsoft Office Visio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• High max 7.6
  MSRC-CVE-2021-38652 1 CVE

  Microsoft SharePoint Server Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• High max 7.6
  MSRC-CVE-2021-38651 1 CVE

  Microsoft SharePoint Server Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• High max 7.6
  MSRC-CVE-2021-38650 1 CVE

  Microsoft Office Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38646 1 CVE 1 exploited

  Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38644 1 CVE

  Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-26434 1 CVE

  Visual Studio Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• High max 5.5
  MSRC-CVE-2021-26437 1 CVE

  Visual Studio Code Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38626 1 CVE

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38625 1 CVE

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-36968 1 CVE

  Windows DNS Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-36952 1 CVE

  Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-36958 1 CVE rev. 2

  Windows Print Spooler Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 14, 2021

  first Aug 11, 2021
• High max 6.4
  MSRC-CVE-2021-38669 1 CVE

  Microsoft Edge (Chromium-based) Tampering Vulnerability

  Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 9, 2021
• High max 6.1
  MSRC-CVE-2021-38642 1 CVE

  Microsoft Edge for iOS Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 2, 2021
• High max 6.1
  MSRC-CVE-2021-38641 1 CVE

  Microsoft Edge for Android Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 2, 2021
• High max 6.1
  MSRC-CVE-2021-26436 1 CVE

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 2, 2021
• High max 5.3
  MSRC-CVE-2021-36930 1 CVE

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 2, 2021
• High max 7.8
  MSRC-CVE-2021-34478 1 CVE rev. 3

  Microsoft Office Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 25, 2021

  first Aug 10, 2021
• High max 5.0
  MSRC-CVE-2021-34485 1 CVE rev. 4

  .NET Core and Visual Studio Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 19, 2021

  first Aug 10, 2021
• High max 7.5
  MSRC-CVE-2021-26423 1 CVE rev. 4

  .NET Core and Visual Studio Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 19, 2021

  first Aug 10, 2021
• High max 7.7
  MSRC-CVE-2021-26429 1 CVE rev. 3

  Azure Sphere Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 13, 2021

  first Aug 10, 2021
• High max 7.8
  MSRC-CVE-2021-36934 1 CVE 1 exploited rev. 7

  Windows Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

  Microsoft
  Aug 12, 2021

  first Jul 20, 2021
• High max 7.8
  MSRC-CVE-2021-34486 1 CVE 1 exploited rev. 2

  Windows Event Tracing Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 12, 2021

  first Aug 10, 2021
• High max 8.1
  MSRC-CVE-2021-34524 1 CVE rev. 3

  Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 11, 2021

  first Aug 10, 2021
• High max 8.8
  MSRC-CVE-2021-34481 1 CVE rev. 2

  Windows Print Spooler Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

  Microsoft
  Aug 10, 2021

  first Jul 15, 2021
• High max 4.0
  MSRC-CVE-2021-36943 1 CVE

  Azure CycleCloud Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 10, 2021
• High max 7.5
  MSRC-CVE-2021-36933 1 CVE

  Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 10, 2021
• High max 7.5
  MSRC-CVE-2021-36932 1 CVE

  Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 10, 2021
• High max 7.5
  MSRC-CVE-2021-36926 1 CVE

  Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 10, 2021
• High max 7.5
  MSRC-CVE-2021-26433 1 CVE

  Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 10, 2021
• High max 7.8
  MSRC-CVE-2021-26431 1 CVE

  Windows Recovery Environment Agent Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 10, 2021
• High max 7.8
  MSRC-CVE-2021-34484 1 CVE 1 exploited

  Windows User Profile Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 10, 2021
• High max 7.8
  MSRC-CVE-2021-34483 1 CVE

  Windows Print Spooler Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 10, 2021
• High max 7.8
  MSRC-CVE-2021-34533 1 CVE

  Windows Graphics Component Font Parsing Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 10, 2021
• High max 5.5
  MSRC-CVE-2021-34532 1 CVE rev. 2

  ASP.NET Core and Visual Studio Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 10, 2021
• High max 7.8
  MSRC-CVE-2021-34471 1 CVE

  Microsoft Defender Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 10, 2021