Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

10,146 results · Feed

  • Critical max 10.0

    Azure Cosmos DB Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

  • Critical max 9.9
    MSRC-CVE-2026-24304 1 CVE rev. 2

    Azure Resource Manager Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    first Jan 22, 2026
  • High max 8.8
    MSRC-CVE-2026-56197 1 CVE rev. 2

    Windows Admin Center (WAC) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 8.8
    MSRC-CVE-2026-47301 1 CVE rev. 2

    Configuration Manager Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited. Customer action: Required.

    first Jul 14, 2026
  • High max 7.5
    MSRC-CVE-2026-59117 1 CVE rev. 2

    Windows Terminal Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 16, 2026
  • High max 7.8
    MSRC-CVE-2026-50422 1 CVE rev. 2

    Windows NTFS Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • Critical max 9.8
    MSRC-CVE-2026-56159 1 CVE rev. 3

    DHCP Server Service Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.8
    MSRC-CVE-2026-50343 1 CVE rev. 2

    Microsoft Install Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.8
    MSRC-CVE-2026-50697 1 CVE rev. 2

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.4

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • High max 7.4

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • High max 5.4

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • Critical max 9.3
    MSRC-CVE-2026-62835 1 CVE rev. 2

    Azure Portal Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    first Jul 23, 2026
  • Critical max 10.0

    Data Quality Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  • Critical max 10.0

    Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  • Critical max 10.0

    Azure DNS Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  • Critical max 10.0

    Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  • Critical max 10.0

    Azure Key Vault Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  • Critical max 10.0

    Microsoft Exchange Online Tampering Vulnerability

    Impact: Tampering. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  • Critical max 9.9

    Microsoft M365 Copilot Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  • Critical max 6.5

    Microsoft Graph Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  • Critical max 8.0

    Azure API Management (APIM) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  • Critical max 9.1

    Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  • Critical max 9.9

    Microsoft Surface Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  • Critical max 9.8

    Microsoft Account Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

  • Critical max 8.5

    Azure AI Search Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  • High max 5.5
    MSRC-CVE-2026-50377 1 CVE rev. 2

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.8
    MSRC-CVE-2026-50407 1 CVE rev. 2

    Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.8
    MSRC-CVE-2026-50458 1 CVE rev. 2

    Microsoft Brokering File System Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.8
    MSRC-CVE-2026-50649 1 CVE rev. 3

    .NET Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.5
    MSRC-CVE-2026-50525 1 CVE rev. 3

    .NET Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 8.1
    MSRC-CVE-2026-47304 1 CVE rev. 3

    .NET Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.5
    MSRC-CVE-2026-50647 1 CVE rev. 4

    Active Directory Federation Server Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.5
    MSRC-CVE-2026-50411 1 CVE rev. 4

    Windows Active Directory Federation Services Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.5
    MSRC-CVE-2026-50355 1 CVE rev. 4

    Windows Active Directory Federation Services Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 5.9
    MSRC-CVE-2026-50324 1 CVE rev. 4

    Windows Active Directory Federation Services Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.5
    MSRC-CVE-2026-50368 1 CVE rev. 4

    Windows Active Directory Federation Services Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.5
    MSRC-CVE-2026-50304 1 CVE rev. 4

    Windows Active Directory Federation Services Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.5
    MSRC-CVE-2026-50653 1 CVE rev. 4

    Azure Active Directory Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.5
    MSRC-CVE-2026-50652 1 CVE rev. 4

    Azure Active Directory Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026