Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

8,900 results · Clear filters · Feed

  • High max 7.8
    MSRC-CVE-2026-69612 1 CVE rev. 2

    Windows Error Reporting Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.0
    MSRC-CVE-2026-68840 1 CVE rev. 3

    Windows USB Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.5
    MSRC-CVE-2026-70065 1 CVE rev. 2

    Windows DHCP Server Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 8.0
    MSRC-CVE-2026-69689 1 CVE rev. 2

    Windows Win32k Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.0
    MSRC-CVE-2026-69470 1 CVE rev. 2

    Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 5.5
    MSRC-CVE-2026-69457 1 CVE rev. 2

    Windows USB Driver Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-81963 1 CVE 1 exploited rev. 5

    Windows Update Stack Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Sep 8, 2026
  • High max 7.1
    MSRC-CVE-2026-69314 1 CVE rev. 5

    Windows Device Association Broker Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-62741 1 CVE rev. 3

    Windows HTTP.sys Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 7.8
    MSRC-CVE-2026-66804 1 CVE rev. 8

    Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 6.5
    MSRC-CVE-2026-78502 1 CVE rev. 3

    Microsoft Office Word Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 5.5
    MSRC-CVE-2026-70310 1 CVE rev. 2

    Microsoft Word Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 7.8
    MSRC-CVE-2026-68796 1 CVE rev. 2

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 7.8
    MSRC-CVE-2026-69436 1 CVE rev. 3

    Windows State Repository Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.1
    MSRC-CVE-2026-69536 1 CVE rev. 2

    Remote Desktop Services Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-69348 1 CVE rev. 2

    Windows Win32k Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 8.8
    MSRC-CVE-2026-69266 1 CVE rev. 2

    Windows DHCP Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.0
    MSRC-CVE-2026-69401 1 CVE rev. 2

    Audio Video Control Transport Protocol Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.0
    MSRC-CVE-2026-69498 1 CVE rev. 3

    Windows Win32k Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-62739 1 CVE rev. 2

    Windows HTTP.sys Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Aug 11, 2026
  • High max 6.5
    MSRC-CVE-2026-63516 1 CVE rev. 3

    Microsoft SharePoint Server Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 7.8
    MSRC-CVE-2026-50353 1 CVE rev. 2

    DirectX Graphics Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 6.8
    MSRC-CVE-2026-72999 1 CVE rev. 2

    Windows USB Hub Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-69844 1 CVE rev. 2

    Windows Win32k Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-69265 1 CVE rev. 2

    Windows NTFS Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-71343 1 CVE rev. 2

    Windows Remote Access Connection Manager Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-62698 1 CVE rev. 2

    Microsoft Digest Authentication Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 7.0
    MSRC-CVE-2026-61927 1 CVE rev. 2

    Windows Bind Filter Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 7.8
    MSRC-CVE-2026-50387 1 CVE rev. 4

    Windows GDI Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.5
    MSRC-CVE-2026-78446 1 CVE rev. 2

    Windows Distributed File System (DFS) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 8.1
    MSRC-CVE-2026-72936 1 CVE rev. 2

    Windows SMB Client Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 6.5
    MSRC-CVE-2026-69267 1 CVE rev. 2

    Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 8.8

    Microsoft Exchange Server Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  • High max 7.0
    MSRC-CVE-2026-70562 1 CVE rev. 2

    Windows Audio Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.0
    MSRC-CVE-2026-69605 1 CVE rev. 3

    Microsoft Install Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-62758 1 CVE rev. 2

    Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Aug 11, 2026
  • High max 6.8
    MSRC-CVE-2026-62699 1 CVE rev. 2

    Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 9.8
    MSRC-CVE-2026-69586 1 CVE rev. 2

    Microsoft Windows PDF Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-69328 1 CVE rev. 2

    Windows Storage Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 5.5
    MSRC-CVE-2026-69288 1 CVE rev. 2

    Windows GDI+ Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026