Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

8,900 results · Clear filters · Feed

  • High max 7.8
    MSRC-CVE-2026-56156 1 CVE rev. 2

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 5.5
    MSRC-CVE-2026-55124 1 CVE rev. 2

    Microsoft Word Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.8
    MSRC-CVE-2026-50351 1 CVE rev. 4

    Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 5.5
    MSRC-CVE-2026-69406 1 CVE rev. 3

    Windows Kernel Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.4

    Visual Studio Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.8
    MSRC-CVE-2026-97798 1 CVE rev. 2

    Windows Error Reporting Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 5.5
    MSRC-CVE-2026-96860 1 CVE rev. 2

    Windows USB Print Driver Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.8
    MSRC-CVE-2026-85373 1 CVE rev. 2

    Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.8
    MSRC-CVE-2026-85366 1 CVE rev. 2

    Windows Installer Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 9.0
    MSRC-CVE-2026-105008 1 CVE rev. 3

    Windows Schannel Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 5.3
    MSRC-CVE-2026-96234 1 CVE rev. 4

    .NET Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 8.8
    MSRC-CVE-2026-83851 1 CVE rev. 3

    Windows Partition Management Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.8
    MSRC-CVE-2026-70125 1 CVE rev. 4

    Microsoft Office Outlook Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 23, 2026
  • High max 6.8
    MSRC-CVE-2026-97782 1 CVE rev. 2

    Microsoft Office SharePoint Tampering Vulnerability

    Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 6.7
    MSRC-CVE-2026-96938 1 CVE rev. 2

    Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.0
    MSRC-CVE-2026-87715 1 CVE rev. 2

    Windows Installer Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 5.5
    MSRC-CVE-2026-85935 1 CVE rev. 2

    Windows USB Driver Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.8
    MSRC-CVE-2026-85368 1 CVE rev. 2

    Windows TCP/IP Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.0
    MSRC-CVE-2026-85355 1 CVE rev. 2

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 8.8
    MSRC-CVE-2026-69521 1 CVE rev. 2

    Windows iSCSI Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.8
    MSRC-CVE-2026-83983 1 CVE rev. 2

    Windows Biometric Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-83980 1 CVE rev. 2

    Windows Biometric Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 5.5
    MSRC-CVE-2026-77491 1 CVE rev. 2

    Windows GDI Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-69576 1 CVE rev. 2

    Graphic Fonts Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 5.5
    MSRC-CVE-2026-69609 1 CVE rev. 2

    Win32k Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 6.8
    MSRC-CVE-2026-69566 1 CVE rev. 3

    Windows NTFS Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.1
    MSRC-CVE-2026-69451 1 CVE rev. 4

    Windows Management Instrumentation Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 8.0
    MSRC-CVE-2026-40400 1 CVE rev. 6

    Windows PowerShell Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.8
    MSRC-CVE-2026-62877 1 CVE rev. 2

    Windows Win32k Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 5.5
    MSRC-CVE-2026-62740 1 CVE rev. 2

    Windows Imaging Component Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 5.5
    MSRC-CVE-2026-57084 1 CVE rev. 2

    Windows File Explorer Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 5.5
    MSRC-CVE-2026-57083 1 CVE rev. 2

    Windows Media Photo Codec Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.8
    MSRC-CVE-2026-96912 1 CVE rev. 2

    Windows Client License Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.8
    MSRC-CVE-2026-88147 1 CVE rev. 2

    Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 8.8
    MSRC-CVE-2026-70068 1 CVE rev. 2

    Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 9.8
    MSRC-CVE-2026-85806 1 CVE rev. 3

    Network Policy Server (NPS) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.5

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 8.8

    Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited. Customer action: Required.

  • High max 5.5
    MSRC-CVE-2026-70277 1 CVE rev. 2

    Windows Fast FAT File System Driver Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.8
    MSRC-CVE-2026-96225 1 CVE rev. 3

    .NET Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026