Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

8,900 results · Clear filters · Feed

  • High max 6.5
    MSRC-CVE-2026-63512 1 CVE

    Microsoft SharePoint Server Tampering Vulnerability

    Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2026-63514 1 CVE

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2026-62837 1 CVE

    Microsoft SharePoint Server Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 4.6
    MSRC-CVE-2026-62829 1 CVE

    Microsoft SharePoint Server Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.0
    MSRC-CVE-2026-57105 1 CVE

    Microsoft Office SharePoint Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-56174 1 CVE

    Windows Narrator Braille Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2026-50472 1 CVE

    Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-40417 1 CVE rev. 2

    Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first May 12, 2026
  • High max 5.5
    MSRC-CVE-2025-29821 1 CVE rev. 2

    Microsoft Dynamics Business Central Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 8.8
    MSRC-CVE-2024-35249 1 CVE rev. 2

    Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 11, 2024
  • High max 7.2
    MSRC-CVE-2023-38167 1 CVE rev. 3

    Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Aug 8, 2023
  • High max 4.4
    MSRC-CVE-2022-41066 1 CVE rev. 3

    Microsoft Dynamics Business Central Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 8, 2022
  • High max 5.4
    MSRC-CVE-2021-40440 1 CVE rev. 2

    Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 14, 2021
  • High max 8.8
    MSRC-CVE-2024-38225 1 CVE rev. 2

    Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 10, 2024
  • High max 5.4
    MSRC-CVE-2021-36946 1 CVE rev. 2

    Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Aug 10, 2021
  • High max 8.8
    MSRC-CVE-2026-47303 1 CVE rev. 2

    ASP.NET Core Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 14, 2026
  • High max 6.5
    MSRC-CVE-2026-50659 1 CVE rev. 4

    .NET Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 14, 2026
  • High max 5.5
    MSRC-CVE-2026-55050 1 CVE rev. 2

    Microsoft Word Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited. Customer action: Required.

    Microsoft
    first Jul 14, 2026
  • High max 7.8
    MSRC-CVE-2026-50493 1 CVE rev. 2

    DirectX Graphics Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 14, 2026
  • High max 5.5
    MSRC-CVE-2026-50341 1 CVE rev. 3

    Windows NTFS Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 14, 2026
  • High max 3.3
    MSRC-CVE-2026-50416 1 CVE rev. 2

    Win32k Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 14, 2026
  • High max 8.8
    MSRC-CVE-2026-62870 1 CVE

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2026-66326 1 CVE

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 6.1
    MSRC-CVE-2026-66325 1 CVE

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 7.1
    MSRC-CVE-2026-66322 1 CVE

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 5.4
    MSRC-CVE-2026-66317 1 CVE

    Microsoft Edge (Chromium-based) Tampering Vulnerability

    Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 6.2
    MSRC-CVE-2026-66311 1 CVE

    Microsoft Edge (Chromium-based) Tampering Vulnerability

    Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 6.1
    MSRC-CVE-2026-65804 1 CVE

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 7.4
    MSRC-CVE-2026-65802 1 CVE

    Microsoft Edge for Android Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 5.4
    MSRC-CVE-2026-66316 1 CVE

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2026-66315 1 CVE

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2026-66314 1 CVE

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 6.8
    MSRC-CVE-2026-66313 1 CVE

    Microsoft Edge (Chromium-based) Tampering Vulnerability

    Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2026-66312 1 CVE

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 7.7
    MSRC-CVE-2026-66310 1 CVE

    Microsoft Edge for Android Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 7.4
    MSRC-CVE-2026-66321 1 CVE

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 8.1
    MSRC-CVE-2026-66318 1 CVE

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2026-56197 1 CVE rev. 2

    Windows Admin Center (WAC) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 14, 2026
  • High max 8.8
    MSRC-CVE-2026-47301 1 CVE rev. 2

    Configuration Manager Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited. Customer action: Required.

    Microsoft
    first Jul 14, 2026
  • High max 7.5
    MSRC-CVE-2026-59117 1 CVE rev. 2

    Windows Terminal Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 16, 2026