Microsoft Security Response Center

8,900 results · Clear filters · Feed

• High max 5.5
  MSRC-CVE-2026-49177 1 CVE rev. 3

  Windows TCP/IP Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 31, 2026

  first Jul 14, 2026
• High max 7.3
  MSRC-CVE-2026-68821 1 CVE rev. 3

  Windows Package Manager Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 29, 2026

  first Aug 11, 2026
• High max 6.5
  MSRC-CVE-2026-65813 1 CVE rev. 2

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 28, 2026

  first Aug 11, 2026
• High max 8.8
  MSRC-CVE-2026-72984 1 CVE

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Aug 28, 2026
• High max 8.5
  MSRC-CVE-2026-70341 1 CVE

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Aug 28, 2026
• High max 4.3
  MSRC-CVE-2026-66798 1 CVE

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Aug 28, 2026
• High max 6.5
  MSRC-CVE-2026-66324 1 CVE

  Microsoft Edge (Chromium-based) Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Aug 28, 2026
• High max 5.4
  MSRC-CVE-2026-66323 1 CVE

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Aug 28, 2026
• High max 7.5
  MSRC-CVE-2026-42993 1 CVE rev. 2

  Remote Desktop Client Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 27, 2026

  first Jun 9, 2026
• High max 7.8
  MSRC-CVE-2026-50435 1 CVE rev. 2

  Windows Overlay Filter Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 27, 2026

  first Jul 14, 2026
• High max 8.8
  MSRC-CVE-2026-59133 1 CVE rev. 2

  Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Aug 27, 2026

  first Aug 11, 2026
• High max 7.8
  MSRC-CVE-2026-68817 1 CVE rev. 2

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 27, 2026

  first Aug 11, 2026
• High max 7.0
  MSRC-CVE-2026-65779 1 CVE rev. 2

  Windows Autopilot Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Aug 27, 2026

  first Aug 11, 2026
• High max 8.8
  MSRC-CVE-2026-70329 1 CVE rev. 2

  Microsoft Outlook Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Aug 27, 2026

  first Aug 11, 2026
• High max 6.5
  MSRC-CVE-2026-69550 1 CVE rev. 2

  Windows App for Mac Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 27, 2026

  first Aug 11, 2026
• High max 5.9
  MSRC-CVE-2026-68819 1 CVE rev. 2

  Windows Network File System Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Aug 26, 2026

  first Aug 11, 2026
• High max 7.8
  MSRC-CVE-2026-55137 1 CVE rev. 2

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 25, 2026

  first Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-50333 1 CVE rev. 4

  Windows Spaceport.sys Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 25, 2026

  first Jul 14, 2026
• High max 7.0
  MSRC-CVE-2026-49183 1 CVE rev. 3

  Windows Clipboard Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 25, 2026

  first Jul 14, 2026
• High max 7.5
  MSRC-CVE-2026-45639 1 CVE rev. 2

  Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 25, 2026

  first Jun 9, 2026
• High max 5.6
  MSRC-CVE-2026-59131 1 CVE rev. 2

  AMD Zen Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 25, 2026

  first Aug 11, 2026
• High max 5.6
  MSRC-CVE-2026-59130 1 CVE rev. 2

  AMD Zen Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 25, 2026

  first Aug 11, 2026
• High max 7.0
  MSRC-CVE-2026-61939 1 CVE rev. 2

  Winlogon Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 25, 2026

  first Aug 11, 2026
• High max 7.0
  MSRC-CVE-2026-62728 1 CVE rev. 3

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Aug 25, 2026

  first Aug 11, 2026
• High max 6.1
  MSRC-CVE-2026-50661 1 CVE rev. 2

  Windows BitLocker Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 24, 2026

  first Jul 14, 2026
• High max 4.3
  MSRC-CVE-2026-32202 1 CVE 1 exploited rev. 4

  Windows Shell Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  Microsoft
  Aug 21, 2026

  first Apr 14, 2026
• High max 5.5
  MSRC-CVE-2026-58547 1 CVE rev. 2

  Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 21, 2026

  first Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-50466 1 CVE rev. 3

  Microsoft Brokering File System Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Aug 21, 2026

  first Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-68801 1 CVE rev. 2

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 21, 2026

  first Aug 11, 2026
• High max 7.8
  MSRC-CVE-2026-56650 1 CVE rev. 2

  Windows Network File System Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 20, 2026

  first Jul 14, 2026
• High max 8.8
  MSRC-CVE-2026-50692 1 CVE rev. 2

  Desktop Window Manager Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited. Customer action: Required.

  Microsoft
  Aug 20, 2026

  first Jul 14, 2026
• High max 9.3
  MSRC-CVE-2026-49798 1 CVE rev. 5

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Aug 20, 2026

  first Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-45637 1 CVE rev. 7

  Microsoft DWM Core Library Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 20, 2026

  first Jun 9, 2026
• High max 6.7
  MSRC-CVE-2026-65795 1 CVE rev. 2

  Windows DNS Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Aug 20, 2026

  first Aug 11, 2026
• High max 6.5
  MSRC-CVE-2026-70105 1 CVE rev. 2

  Microsoft Word Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 20, 2026
• High max 7.1
  MSRC-CVE-2026-55013 1 CVE

  Windows Remote Help Defense Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 20, 2026
• High max 5.5
  MSRC-CVE-2026-55015 1 CVE

  Microsoft Remote Help Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 20, 2026
• High max 5.5
  MSRC-CVE-2026-62703 1 CVE rev. 2

  Windows DWM Core Library Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 20, 2026

  first Aug 11, 2026
• High max 7.8
  MSRC-CVE-2026-62754 1 CVE rev. 2

  Windows Kerberos Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Aug 20, 2026

  first Aug 11, 2026
• High max 7.0
  MSRC-CVE-2026-42912 1 CVE rev. 2

  Windows Telephony Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Aug 19, 2026

  first Jun 9, 2026