Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

122 results · Clear filters · Feed

  • Medium max 6.5
    MSRC-CVE-2026-124194 1 CVE 1 exploited

    Microsoft Outlook Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  • Medium max 6.5

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Medium max 4.4
    MSRC-CVE-2026-69446 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Moderate. Not known to be exploited. Customer action: Required.

    first Aug 28, 2026
  • Medium max 4.3
    MSRC-CVE-2026-88078 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 27, 2026
  • Medium max 4.3

    Microsoft Edge for Android Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Moderate. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • Medium max 5.4
    MSRC-CVE-2026-88090 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Medium

    ADV260001 Hardening changes for ReFS volumes on removable media

    Impact: Not a Vulnerability. Microsoft rating: Moderate. Not known to be exploited. Customer action: Required.

  • Medium max 6.1

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Medium max 5.4

    Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Moderate. Not known to be exploited. Customer action: Required.

  • Medium max 5.4

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Medium max 4.4

    Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Moderate. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • Medium max 5.4

    Microsoft Edge for iOS Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Medium max 8.3

    Windows Network Address Translation (NAT) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Medium max 5.4

    Microsoft Edge for Android (Chromium-based) Tampering Vulnerability

    Impact: Tampering. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Medium max 8.3

    Windows Network Address Translation (NAT) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Medium max 6.3

    Outlook Copilot Tampering Vulnerability

    Impact: Tampering. Microsoft rating: Moderate. Not known to be exploited. Customer action: Required.

  • Medium max 5.3
    MSRC-CVE-2026-56164 1 CVE 1 exploited

    Microsoft SharePoint Server Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Moderate. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  • Medium max 6.5
    MSRC-CVE-2026-45489 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Jul 3, 2026
  • Medium max 5.4

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited. Customer action: Required.

  • Medium max 4.2

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Moderate. Not known to be exploited. Customer action: Required.

  • Medium max 4.3
    MSRC-CVE-2026-35429 1 CVE rev. 2

    Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first May 11, 2026
  • Medium max 5.4
    MSRC-CVE-2026-45494 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first May 15, 2026
  • Medium max 5.4

    Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Moderate. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  • Medium max 5.4

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Medium max 6.5

    Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • Medium max 7.4

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Medium max 4.3

    Windows Snipping Tool Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • Medium max 5.5

    Windows Redirected Drive Buffering System Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Medium max 5.4

    Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • Medium max 6.2
    MSRC-CVE-2026-21525 1 CVE 1 exploited

    Windows Remote Access Connection Manager Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Moderate. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

  • Medium max 6.5

    Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Medium max 7.5

    Remote Procedure Call Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Moderate. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  • Medium max 5.3

    Playwright Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Medium max 4.7

    Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Medium max 4.3

    Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • Medium max 7.2

    Windows Kerberos Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Moderate. Not known to be exploited, publicly disclosed before the fix — Exploitation Less Likely. Customer action: Required.

  • Medium max 3.5

    Windows Storage Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Medium max 5.6

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Moderate. Not known to be exploited. Customer action: Required.

    first Jun 10, 2025
  • Medium max 5.3

    Microsoft Edge for IOS and Android Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Feb 11, 2025
  • Medium max 6.5

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.