Microsoft Security Response Center

8,900 results · Clear filters · Feed

• High max 5.0
  MSRC-CVE-2026-72976 1 CVE rev. 2

  Microsoft Office Word Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 6.5
  MSRC-CVE-2026-72975 1 CVE rev. 2

  Microsoft Office PowerPoint Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 6.5
  MSRC-CVE-2026-72977 1 CVE rev. 2

  Microsoft Office PowerPoint Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-72973 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 6.5
  MSRC-CVE-2026-72938 1 CVE rev. 2

  Microsoft Office PowerPoint Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-72972 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 6.5
  MSRC-CVE-2026-69626 1 CVE rev. 2

  Microsoft Office Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-78518 1 CVE rev. 2

  Microsoft Office Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-78504 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 5.5
  MSRC-CVE-2026-78513 1 CVE rev. 2

  Microsoft Office PowerPoint Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 6.5
  MSRC-CVE-2026-78515 1 CVE rev. 2

  Microsoft Office Excel Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-78511 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-69759 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 6.5
  MSRC-CVE-2026-69739 1 CVE rev. 2

  Microsoft Office Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 6.5
  MSRC-CVE-2026-69719 1 CVE rev. 2

  Microsoft Office Word Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 6.5
  MSRC-CVE-2026-69734 1 CVE rev. 2

  Microsoft Office Word Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-69722 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-69686 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-69671 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-80080 1 CVE rev. 3

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-69724 1 CVE rev. 2

  Microsoft Office SharePoint Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-50311 1 CVE rev. 2

  Windows Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Jul 14, 2026
• High max 5.5
  MSRC-CVE-2026-66809 1 CVE rev. 2

  Microsoft Office Graphics Component Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Aug 11, 2026
• High max 7.8
  MSRC-CVE-2026-33835 1 CVE rev. 2

  Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first May 12, 2026
• High max 7.8
  MSRC-CVE-2026-85880 1 CVE 1 exploited rev. 2

  Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Sep 16, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-85893 1 CVE

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 15, 2026
• High max 8.8
  MSRC-CVE-2026-69486 1 CVE

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 15, 2026
• High max 6.8
  MSRC-CVE-2026-65812 1 CVE rev. 2

  Microsoft Teams for Android Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 15, 2026

  first Sep 8, 2026
• High max 5.8
  MSRC-CVE-2026-69559 1 CVE rev. 2

  Microsoft Teams for Android Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 15, 2026

  first Sep 8, 2026
• High max 8.6
  MSRC-CVE-2026-80097 1 CVE rev. 2

  Microsoft Authenticator Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 15, 2026

  first Sep 8, 2026
• High max 8.0
  MSRC-CVE-2026-69714 1 CVE rev. 2

  Windows Device Association Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 15, 2026

  first Sep 8, 2026
• High max 8.0
  MSRC-CVE-2026-69619 1 CVE rev. 2

  Windows exFAT File System Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 15, 2026

  first Sep 8, 2026
• High max 5.7
  MSRC-CVE-2026-69416 1 CVE rev. 2

  Windows DHCP Server Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 15, 2026

  first Sep 8, 2026
• High max 5.5
  MSRC-CVE-2026-69321 1 CVE rev. 2

  Windows Power Dependency Coordinator Tampering Vulnerability

  Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 15, 2026

  first Sep 8, 2026
• High max 5.5
  MSRC-CVE-2026-69286 1 CVE rev. 2

  Windows USB Audio Class Driver Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 15, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-80075 1 CVE rev. 2

  Windows Work Folders Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 15, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-69608 1 CVE rev. 2

  Microsoft Windows Search Component Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 15, 2026

  first Sep 8, 2026
• High max 7.0
  MSRC-CVE-2026-68847 1 CVE rev. 2

  Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 15, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-68841 1 CVE rev. 2

  Windows NTFS Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 15, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-68812 1 CVE rev. 2

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 15, 2026

  first Aug 11, 2026