Microsoft Security Response Center

8,900 results · Clear filters · Feed

• High max 5.5
  MSRC-CVE-2026-69504 1 CVE rev. 2

  Windows NTFS Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 30, 2026

  first Sep 8, 2026
• High max 7.0
  MSRC-CVE-2026-61938 1 CVE rev. 3

  Windows Installer Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 30, 2026

  first Aug 11, 2026
• High max 7.8
  MSRC-CVE-2026-62722 1 CVE rev. 3

  Microsoft Brokering File System Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 30, 2026

  first Aug 11, 2026
• High max 7.8
  MSRC-CVE-2026-65787 1 CVE rev. 3

  Desktop Window Manager Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 30, 2026

  first Aug 11, 2026
• High max 7.8
  MSRC-CVE-2026-49800 1 CVE rev. 2

  Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 30, 2026

  first Jul 14, 2026
• High max 8.8
  MSRC-CVE-2026-69522 1 CVE rev. 3

  .NET and Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 29, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-69307 1 CVE rev. 2

  Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 29, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-61930 1 CVE rev. 2

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 29, 2026

  first Aug 11, 2026
• High max 6.2
  MSRC-CVE-2026-57095 1 CVE rev. 2

  Win32k Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 29, 2026

  first Jul 14, 2026
• High max 7.5
  MSRC-CVE-2026-50414 1 CVE rev. 2

  Windows Media Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 29, 2026

  first Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-50400 1 CVE rev. 2

  Windows App Package Installer Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 29, 2026

  first Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-50332 1 CVE rev. 2

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 29, 2026

  first Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-50357 1 CVE rev. 3

  Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 29, 2026

  first Jul 14, 2026
• High max 7.5
  MSRC-CVE-2026-100208 1 CVE rev. 2

  Microsoft Office Outlook Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 25, 2026
• High max 7.0
  MSRC-CVE-2026-69806 1 CVE rev. 2

  .NET Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 25, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-71328 1 CVE rev. 2

  .NET and Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 25, 2026

  first Sep 8, 2026
• High max 5.9
  MSRC-CVE-2026-69304 1 CVE rev. 2

  ASP.NET Core Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 25, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-69439 1 CVE rev. 2

  .NET and Visual Studio Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 25, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-65660 1 CVE 1 exploited rev. 3

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 25, 2026

  first Aug 11, 2026
• High max 6.5
  MSRC-CVE-2026-69636 1 CVE rev. 2

  Microsoft Office SharePoint Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-70324 1 CVE rev. 2

  Microsoft SharePoint Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Aug 11, 2026
• High max 5.5
  MSRC-CVE-2026-63521 1 CVE rev. 2

  Microsoft Office Word Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Aug 11, 2026
• High max 6.5
  MSRC-CVE-2026-80073 1 CVE rev. 2

  Microsoft Office Outlook Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-69282 1 CVE rev. 2

  Microsoft Office SharePoint Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Sep 8, 2026
• High max 5.9
  MSRC-CVE-2026-69803 1 CVE rev. 2

  Windows DHCP Server Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Sep 8, 2026
• High max 5.7
  MSRC-CVE-2026-69637 1 CVE rev. 2

  Windows DHCP Server Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Sep 8, 2026
• High max 8.2
  MSRC-CVE-2026-81357 1 CVE rev. 2

  Visual Studio Code Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-71337 1 CVE rev. 2

  Windows Storage Management Provider Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Sep 8, 2026
• High max 8.0
  MSRC-CVE-2026-69681 1 CVE rev. 2

  Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-59113 1 CVE rev. 3

  Visual Studio Code Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Aug 11, 2026
• High max 7.8
  MSRC-CVE-2026-54981 1 CVE rev. 3

  Visual Studio Code Python Extension Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Aug 11, 2026
• High max 7.8
  MSRC-CVE-2026-47292 1 CVE rev. 3

  Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Jun 9, 2026
• High max 7.1
  MSRC-CVE-2026-65675 1 CVE rev. 4

  CoPilot Chat Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Aug 11, 2026
• High max 5.7
  MSRC-CVE-2026-69572 1 CVE rev. 2

  Windows SMB Client Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 22, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-57091 1 CVE rev. 2

  Windows File History Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 22, 2026

  first Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-55134 1 CVE rev. 4

  Microsoft Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 22, 2026

  first Jul 14, 2026
• High max 7.0
  MSRC-CVE-2026-68824 1 CVE rev. 3

  Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 22, 2026

  first Sep 8, 2026
• High max 7.5
  MSRC-CVE-2026-77886 1 CVE rev. 2

  Windows DHCP Server Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 22, 2026

  first Sep 8, 2026
• High max 7.5
  MSRC-CVE-2026-57099 1 CVE rev. 2

  ASP.NET Core Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 22, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-78526 1 CVE rev. 3

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 21, 2026

  first Sep 8, 2026