Microsoft Security Response Center

8,900 results · Clear filters · Feed

• High max 7.8
  MSRC-CVE-2026-50422 1 CVE rev. 2

  Windows NTFS Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 28, 2026

  first Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-50343 1 CVE rev. 2

  Microsoft Install Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jul 27, 2026

  first Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-50697 1 CVE rev. 2

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jul 27, 2026

  first Jul 14, 2026
• High max 7.4
  MSRC-CVE-2026-57989 1 CVE

  Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jul 24, 2026
• High max 7.4
  MSRC-CVE-2026-57990 1 CVE

  Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jul 24, 2026
• High max 5.4
  MSRC-CVE-2026-57978 1 CVE

  Microsoft Edge (Chromium-based) Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jul 24, 2026
• High max 5.5
  MSRC-CVE-2026-50377 1 CVE rev. 2

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 22, 2026

  first Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-50407 1 CVE rev. 2

  Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 22, 2026

  first Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-50458 1 CVE rev. 2

  Microsoft Brokering File System Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 22, 2026

  first Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-50649 1 CVE rev. 3

  .NET Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 21, 2026

  first Jul 14, 2026
• High max 7.5
  MSRC-CVE-2026-50525 1 CVE rev. 3

  .NET Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 21, 2026

  first Jul 14, 2026
• High max 8.1
  MSRC-CVE-2026-47304 1 CVE rev. 3

  .NET Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 21, 2026

  first Jul 14, 2026
• High max 7.5
  MSRC-CVE-2026-50647 1 CVE rev. 4

  Active Directory Federation Server Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 21, 2026

  first Jul 14, 2026
• High max 7.5
  MSRC-CVE-2026-50411 1 CVE rev. 4

  Windows Active Directory Federation Services Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 21, 2026

  first Jul 14, 2026
• High max 7.5
  MSRC-CVE-2026-50355 1 CVE rev. 4

  Windows Active Directory Federation Services Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 21, 2026

  first Jul 14, 2026
• High max 5.9
  MSRC-CVE-2026-50324 1 CVE rev. 4

  Windows Active Directory Federation Services Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 21, 2026

  first Jul 14, 2026
• High max 7.5
  MSRC-CVE-2026-50368 1 CVE rev. 4

  Windows Active Directory Federation Services Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jul 21, 2026

  first Jul 14, 2026
• High max 7.5
  MSRC-CVE-2026-50304 1 CVE rev. 4

  Windows Active Directory Federation Services Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jul 21, 2026

  first Jul 14, 2026
• High max 7.5
  MSRC-CVE-2026-50653 1 CVE rev. 4

  Azure Active Directory Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 21, 2026

  first Jul 14, 2026
• High max 7.5
  MSRC-CVE-2026-50652 1 CVE rev. 4

  Azure Active Directory Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 21, 2026

  first Jul 14, 2026
• High max 7.3
  MSRC-CVE-2026-58640 1 CVE rev. 2

  Windows NTFS Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 21, 2026

  first Jul 14, 2026
• High max 7.5
  MSRC-CVE-2026-50648 1 CVE rev. 2

  .NET Framework Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 20, 2026

  first Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-50646 1 CVE rev. 2

  .NET Framework Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 20, 2026

  first Jul 14, 2026
• High max 7.5
  MSRC-CVE-2026-50527 1 CVE rev. 2

  .NET Framework Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 20, 2026

  first Jul 14, 2026
• High max 7.5
  MSRC-CVE-2026-47302 1 CVE rev. 2

  .NET Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 20, 2026

  first Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-50650 1 CVE rev. 2

  .NET Framework Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 20, 2026

  first Jul 14, 2026
• High max 7.3
  MSRC-CVE-2024-35248 1 CVE rev. 2

  Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 20, 2026

  first Jun 11, 2024
• High max 5.4
  MSRC-CVE-2026-57980 1 CVE

  Microsoft Edge (Chromium-based) Tampering Vulnerability

  Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jul 16, 2026
• High max 7.1
  MSRC-CVE-2026-56171 1 CVE

  Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 16, 2026
• High max 7.0
  MSRC-CVE-2026-58598 1 CVE

  Windows Backup Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 16, 2026
• High max 4.6
  MSRC-CVE-2026-62826 1 CVE rev. 2

  Microsoft SharePoint Server Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 16, 2026
• High max 7.8
  MSRC-CVE-2026-56182 1 CVE rev. 2

  Windows NTFS Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jul 15, 2026

  first Jul 14, 2026
• High max 8.8
  MSRC-CVE-2026-41109 1 CVE

  GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 14, 2026
• High max 7.1
  MSRC-CVE-2026-58529 1 CVE

  Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 14, 2026
• High max 6.0
  MSRC-CVE-2026-58638 1 CVE

  Windows Boot Loader Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jul 14, 2026
• High max 7.0
  MSRC-CVE-2026-58637 1 CVE

  Windows Client-Side Caching Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-58634 1 CVE

  Desktop Window Manager Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-58633 1 CVE

  Desktop Window Manager Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-58632 1 CVE

  Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 14, 2026
• High max 7.0
  MSRC-CVE-2026-58629 1 CVE

  DirectX Graphics Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jul 14, 2026