Microsoft Security Response Center

8,900 results · Clear filters · Feed

• High max 8.8
  MSRC-CVE-2026-70007 1 CVE rev. 3

  .NET Framework Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 27, 2026

  first Oct 13, 2026
• High max 7.3
  MSRC-CVE-2026-70161 1 CVE rev. 3

  .NET Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 27, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-69284 1 CVE rev. 2

  Windows DCOM Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 27, 2026

  first Sep 8, 2026
• High max 7.0
  MSRC-CVE-2026-69473 1 CVE rev. 2

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 27, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-70338 1 CVE rev. 5

  Microsoft PowerShell Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Aug 11, 2026
• High max 7.8
  MSRC-CVE-2026-68877 1 CVE rev. 3

  Windows Storage Spaces Controller Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Sep 8, 2026
• High max 8.1
  MSRC-CVE-2026-88097 1 CVE rev. 2

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Sep 18, 2026
• High max 8.0
  MSRC-CVE-2026-68894 1 CVE rev. 6

  Windows Error Reporting Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-88077 1 CVE

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026
• High max 7.4
  MSRC-CVE-2026-96187 1 CVE

  Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited. Customer action: Required.

  Microsoft
  Oct 26, 2026
• High max 8.1
  MSRC-CVE-2026-85899 1 CVE

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 26, 2026
• High max 8.8
  MSRC-CVE-2026-96203 1 CVE

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026
• High max 8.8
  MSRC-CVE-2026-96192 1 CVE

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited. Customer action: Required.

  Microsoft
  Oct 26, 2026
• High max 8.8
  MSRC-CVE-2026-96951 1 CVE 1 exploited rev. 2

  Windows Shell Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 13, 2026
• High max 8.1
  MSRC-CVE-2026-88094 1 CVE rev. 2

  Azure Storage Library Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 13, 2026
• High max 8.0
  MSRC-CVE-2026-96844 1 CVE rev. 2

  Microsoft Bluetooth Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-83840 1 CVE rev. 2

  Windows Error Reporting Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-83716 1 CVE rev. 2

  Windows Hyper-V Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-96244 1 CVE rev. 2

  Windows Internal System User Profile Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 13, 2026
• High max 7.2
  MSRC-CVE-2026-85798 1 CVE rev. 2

  Windows Distributed File System (DFS) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 13, 2026
• High max 6.5
  MSRC-CVE-2026-84007 1 CVE rev. 2

  Remote Desktop Gateway Service Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 13, 2026
• High max 6.8
  MSRC-CVE-2026-83776 1 CVE rev. 2

  Windows Bluetooth Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-70177 1 CVE rev. 2

  Microsoft Windows Search Component Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-105728 1 CVE rev. 2

  Dynamics Business Central Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-96199 1 CVE rev. 2

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 16, 2026
• High max 8.8
  MSRC-CVE-2026-96198 1 CVE rev. 2

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 16, 2026
• High max 8.8
  MSRC-CVE-2026-85898 1 CVE rev. 2

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 16, 2026
• High max 8.8
  MSRC-CVE-2026-85897 1 CVE rev. 2

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 16, 2026
• High max 8.8
  MSRC-CVE-2026-85890 1 CVE rev. 2

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 16, 2026
• High max 8.8
  MSRC-CVE-2026-83831 1 CVE rev. 2

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 16, 2026
• High max 7.8
  MSRC-CVE-2026-69926 1 CVE rev. 2

  Desktop Window Manager Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-69923 1 CVE rev. 2

  Windows AI Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-70054 1 CVE rev. 2

  Windows NetBIOS Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 13, 2026
• High max 9.8
  MSRC-CVE-2026-83519 1 CVE rev. 2

  Windows Error Reporting Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-102870 1 CVE rev. 2

  ASP.NET Core Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 25, 2026

  first Oct 13, 2026
• High max 8.1
  MSRC-CVE-2026-70197 1 CVE rev. 5

  .NET and Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 25, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-114148 1 CVE

  ASP.NET Core Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 25, 2026
• High max 8.8
  MSRC-CVE-2026-83862 1 CVE rev. 2

  Windows Network Load Balancing Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 23, 2026

  first Oct 13, 2026
• High max 6.5
  MSRC-CVE-2026-96303 1 CVE rev. 2

  Microsoft PowerShell Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 22, 2026

  first Oct 13, 2026
• High max 7.0
  MSRC-CVE-2026-85870 1 CVE rev. 3

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 21, 2026

  first Oct 13, 2026