Microsoft Security Response Center

8,900 results · Clear filters · Feed

• High max 7.0
  MSRC-CVE-2026-85868 1 CVE rev. 3

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 21, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-61359 1 CVE rev. 4

  Windows Storage Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 21, 2026

  first Aug 11, 2026
• High max 6.7
  MSRC-CVE-2026-69902 1 CVE rev. 2

  Windows NTFS Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 21, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-83709 1 CVE rev. 2

  Windows NTLM Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 21, 2026

  first Oct 13, 2026
• High max 8.1
  MSRC-CVE-2026-97783 1 CVE rev. 2

  Microsoft Office SharePoint Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 21, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-102204 1 CVE rev. 2

  Windows Subsystem for Linux Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 20, 2026

  first Oct 13, 2026
• High max 9.8
  MSRC-CVE-2026-83782 1 CVE rev. 2

  Windows Shell Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 20, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-62913 1 CVE rev. 4

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 20, 2026

  first Aug 11, 2026
• High max 7.0
  MSRC-CVE-2026-83839 1 CVE rev. 2

  Windows Hyper-V Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 20, 2026

  first Oct 13, 2026
• High max 5.5
  MSRC-CVE-2026-70074 1 CVE rev. 2

  Windows DNS Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 20, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-70337 1 CVE rev. 6

  Microsoft PowerShell Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 20, 2026

  first Aug 11, 2026
• High max 5.3
  MSRC-CVE-2026-80092 1 CVE rev. 2

  Microsoft Identity Web Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 19, 2026

  first Oct 15, 2026
• High max 7.5
  MSRC-CVE-2026-96237 1 CVE rev. 2

  .NET Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-70181 1 CVE rev. 2

  ASP.NET Core Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-70186 1 CVE rev. 2

  ASP.NET Core Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-103572 1 CVE rev. 2

  Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-109468 1 CVE rev. 2

  ASP.NET Core Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 15, 2026
• High max 5.9
  MSRC-CVE-2026-70162 1 CVE rev. 3

  .NET Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 5.9
  MSRC-CVE-2026-85790 1 CVE rev. 3

  Microsoft QUIC Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 8.1
  MSRC-CVE-2026-70013 1 CVE rev. 2

  Windows iSCSI Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-70031 1 CVE rev. 2

  Windows iSCSI Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-87716 1 CVE rev. 2

  Windows Storage Spaces Controller Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 8.0
  MSRC-CVE-2026-70213 1 CVE rev. 2

  Microsoft Power Apps Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 6.5
  MSRC-CVE-2026-70170 1 CVE rev. 2

  Windows Kernel Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-85822 1 CVE rev. 2

  Windows exFAT File System Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-85377 1 CVE rev. 2

  Windows CD-ROM Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.0
  MSRC-CVE-2026-83708 1 CVE rev. 2

  Windows Installer Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-83654 1 CVE rev. 2

  Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.0
  MSRC-CVE-2026-70056 1 CVE rev. 2

  Windows Update Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.0
  MSRC-CVE-2026-108465 1 CVE rev. 2

  Windows Update Delivery Optimization Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-69283 1 CVE rev. 2

  Windows CD-ROM Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-81396 1 CVE rev. 3

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-78524 1 CVE rev. 4

  Microsoft Office Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-65775 1 CVE rev. 5

  Windows Win32k Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Aug 11, 2026
• High max 7.8
  MSRC-CVE-2026-68798 1 CVE rev. 3

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Aug 11, 2026
• High max 7.8
  MSRC-CVE-2026-59127 1 CVE rev. 4

  Windows Installer Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Aug 11, 2026
• High max 7.5
  MSRC-CVE-2026-50696 1 CVE rev. 6

  Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-83518 1 CVE rev. 2

  RPC Runtime Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-96044 1 CVE rev. 2

  Microsoft Office SharePoint Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 6.5
  MSRC-CVE-2026-108455 1 CVE rev. 2

  Microsoft Office PowerPoint Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026