Microsoft Security Response Center

8,900 results · Clear filters · Feed

• High max 6.5
  MSRC-CVE-2026-88175 1 CVE rev. 2

  Microsoft Office Excel Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-88145 1 CVE rev. 2

  Microsoft Office Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-88150 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-83891 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-70301 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-70302 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-70287 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 6.5
  MSRC-CVE-2026-70263 1 CVE rev. 2

  Microsoft Office Word Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 6.5
  MSRC-CVE-2026-70206 1 CVE rev. 2

  Microsoft Office Word Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-70220 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-70268 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 9.1
  MSRC-CVE-2026-70188 1 CVE rev. 2

  ASP.NET Core Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 7.3
  MSRC-CVE-2026-70190 1 CVE rev. 2

  .NET Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-70179 1 CVE rev. 2

  ASP.NET Core Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 6.7
  MSRC-CVE-2026-70165 1 CVE rev. 2

  .NET Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-70159 1 CVE rev. 2

  ASP.NET Core Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-70174 1 CVE rev. 2

  .NET Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-87697 1 CVE rev. 2

  .NET Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-69651 1 CVE rev. 2

  .NET Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 5.9
  MSRC-CVE-2026-66822 1 CVE rev. 2

  .NET Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 9.8
  MSRC-CVE-2026-70096 1 CVE rev. 2

  Windows Rich Text Edit Control Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-105715 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-105599 1 CVE rev. 2

  Microsoft Office PowerPoint Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-102858 1 CVE rev. 2

  Microsoft Office OneNote Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 5.9
  MSRC-CVE-2026-109461 1 CVE

  Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• High max 6.7
  MSRC-CVE-2026-32176 1 CVE rev. 2

  SQL Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 14, 2026

  first Apr 14, 2026
• High max 6.8
  MSRC-CVE-2026-102188 1 CVE rev. 2

  Windows Storage Port Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 14, 2026

  first Oct 13, 2026
• High max 7.0
  MSRC-CVE-2026-84019 1 CVE rev. 2

  Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 14, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-70245 1 CVE rev. 2

  Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 14, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-70095 1 CVE rev. 2

  Windows iSCSI Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 14, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-105723 1 CVE rev. 2

  Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 14, 2026

  first Oct 13, 2026
• High max 5.5
  MSRC-CVE-2026-69351 1 CVE rev. 2

  Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 14, 2026

  first Sep 8, 2026
• High max 5.5
  MSRC-CVE-2026-72937 1 CVE rev. 2

  Windows Storage Port Driver Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 14, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-70584 1 CVE rev. 2

  Windows Core Messaging Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 14, 2026

  first Sep 8, 2026
• High max 7.1
  MSRC-CVE-2026-69366 1 CVE rev. 2

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 14, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-69334 1 CVE rev. 3

  Windows Volume Manager Extension Driver Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 14, 2026

  first Sep 8, 2026
• High max 7.5
  MSRC-CVE-2026-77499 1 CVE rev. 3

  Windows DHCP Server Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 14, 2026

  first Sep 8, 2026
• High max 7.0
  MSRC-CVE-2026-68825 1 CVE rev. 3

  Windows Bind Filter Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 14, 2026

  first Sep 8, 2026
• High max 8.1
  MSRC-CVE-2026-69620 1 CVE rev. 3

  Windows DHCP Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 14, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-62697 1 CVE rev. 5

  Windows Push Notifications Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 14, 2026

  first Sep 8, 2026