Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

10,146 results · Feed

  • High max 7.3
    MSRC-CVE-2026-58640 1 CVE rev. 2

    Windows NTFS Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 14, 2026
  • High max 7.5
    MSRC-CVE-2026-50648 1 CVE rev. 2

    .NET Framework Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 14, 2026
  • High max 7.8
    MSRC-CVE-2026-50646 1 CVE rev. 2

    .NET Framework Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 14, 2026
  • High max 7.5
    MSRC-CVE-2026-50527 1 CVE rev. 2

    .NET Framework Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 14, 2026
  • High max 7.5
    MSRC-CVE-2026-47302 1 CVE rev. 2

    .NET Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 14, 2026
  • High max 7.8
    MSRC-CVE-2026-50650 1 CVE rev. 2

    .NET Framework Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 14, 2026
  • High max 7.3
    MSRC-CVE-2024-35248 1 CVE rev. 2

    Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 11, 2024
  • Medium max 5.4
    MSRC-CVE-2026-62828 1 CVE

    Microsoft Edge for Android (Chromium-based) Tampering Vulnerability

    Impact: Tampering. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.4
    MSRC-CVE-2026-57980 1 CVE

    Microsoft Edge (Chromium-based) Tampering Vulnerability

    Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 7.1
    MSRC-CVE-2026-56171 1 CVE

    Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2026-58598 1 CVE

    Windows Backup Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 4.6
    MSRC-CVE-2026-62826 1 CVE rev. 2

    Microsoft SharePoint Server Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-56182 1 CVE rev. 2

    Windows NTFS Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
    first Jul 14, 2026
  • Critical max 9.8
    MSRC-CVE-2026-58644 1 CVE 1 exploited rev. 3

    Microsoft SharePoint Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Jul 14, 2026
  • High max 8.8
    MSRC-CVE-2026-41109 1 CVE

    GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.1
    MSRC-CVE-2026-42897 1 CVE 1 exploited rev. 4

    Microsoft Exchange Server Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first May 14, 2026
  • High max 7.1
    MSRC-CVE-2026-58529 1 CVE

    Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Medium max 8.3
    MSRC-CVE-2026-56181 1 CVE

    Windows Network Address Translation (NAT) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.0
    MSRC-CVE-2026-58638 1 CVE

    Windows Boot Loader Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2026-58637 1 CVE

    Windows Client-Side Caching Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-58634 1 CVE

    Desktop Window Manager Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-58633 1 CVE

    Desktop Window Manager Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-58632 1 CVE

    Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2026-58629 1 CVE

    DirectX Graphics Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-58628 1 CVE

    Windows Wireless Network Manager Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2026-58627 1 CVE

    Windows DHCP Server Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2026-58626 1 CVE

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2026-58619 1 CVE

    Windows Sensor Data Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.1
    MSRC-CVE-2026-58617 1 CVE

    M365 Copilot for iOS Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-58613 1 CVE

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-47305 1 CVE

    Visual Studio Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2026-58594 1 CVE

    Remote Desktop Client Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-58541 1 CVE

    Microsoft DWM Core Library Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.3
    MSRC-CVE-2026-58543 1 CVE

    Universal Print Management Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.8
    MSRC-CVE-2026-58542 1 CVE

    Windows Media Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2026-58544 1 CVE

    Windows Management Services Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2026-58545 1 CVE

    Windows Kernel Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-58536 1 CVE

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2026-58534 1 CVE

    Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2026-58537 1 CVE

    Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft