Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

10,146 results · Feed

  • High max 7.8
    MSRC-CVE-2026-45471 1 CVE rev. 2

    Microsoft Word Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 9, 2026
  • Critical max 8.4
    MSRC-CVE-2026-45472 1 CVE rev. 3

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 9, 2026
  • High max 7.8
    MSRC-CVE-2026-45469 1 CVE rev. 2

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 9, 2026
  • High max 6.5
    MSRC-CVE-2026-42903 1 CVE rev. 3

    Windows Kerberos Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
    first Jun 9, 2026
  • High max 7.8
    MSRC-CVE-2026-45475 1 CVE rev. 3

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 9, 2026
  • High max 7.8
    MSRC-CVE-2026-24289 1 CVE rev. 2

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Mar 10, 2026
  • High max 7.3
    MSRC-CVE-2026-32177 1 CVE rev. 5

    .NET Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first May 12, 2026
  • Critical max 9.3
    MSRC-CVE-2026-47646 1 CVE

    Dynamics 365 Customer Voice Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 8.8
    MSRC-CVE-2026-47645 1 CVE

    Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 9.6
    MSRC-CVE-2026-48582 1 CVE

    Microsoft Exchange Online Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 9.9
    MSRC-CVE-2026-48584 1 CVE

    Microsoft Azure Synapse Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 9.9
    MSRC-CVE-2026-47647 1 CVE

    Dynamics 365 Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2026-54130 1 CVE

    M365 Copilot Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 6.5
    MSRC-CVE-2026-42895 1 CVE

    Microsoft Copilot Tampering Vulnerability

    Impact: Tampering. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 10.0
    MSRC-CVE-2026-45480 1 CVE

    Azure Active Directory Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 7.7
    MSRC-CVE-2026-32174 1 CVE

    Azure Bot Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 7.5
    MSRC-CVE-2026-47633 1 CVE

    Microsoft Cost Management Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • High max 7.3
    MSRC-CVE-2026-35433 1 CVE rev. 4

    .NET Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
    first May 12, 2026
  • High max 7.8
    MSRC-CVE-2026-42828 1 CVE rev. 2

    Windows Projected File System Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 9, 2026
  • High max 5.4
    MSRC-CVE-2026-47636 1 CVE rev. 2

    Microsoft SharePoint Server Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 9, 2026
  • High max 9.1
    MSRC-CVE-2026-45602 1 CVE rev. 2

    Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability

    Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 9, 2026
  • High max 8.8
    MSRC-CVE-2026-40371 1 CVE rev. 3

    Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 9, 2026
  • Low max 4.3
    MSRC-CVE-2026-33118 1 CVE rev. 3

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Low. Not known to be exploited. Customer action: Required.

    Microsoft
    first Apr 10, 2026
  • High max 7.5
    MSRC-CVE-2026-20846 1 CVE rev. 2

    GDI+ Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Feb 10, 2026
  • High max 8.0
    MSRC-CVE-2026-47294 1 CVE rev. 3

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first May 29, 2026
  • High max 8.0
    MSRC-CVE-2026-47298 1 CVE rev. 2

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 9, 2026
  • High max 8.4
    MSRC-CVE-2026-45482 1 CVE rev. 2

    Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 9, 2026
  • High max 7.5
    MSRC-CVE-2026-40376 1 CVE rev. 2

    Visual Studio Code Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 9, 2026
  • High max 7.1
    MSRC-CVE-2026-48569 1 CVE rev. 2

    Visual Studio Code Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 9, 2026
  • High max 6.5
    MSRC-CVE-2026-50519 1 CVE

    Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 4.4
    MSRC-CVE-2026-41100 1 CVE rev. 2

    Microsoft 365 Copilot for Android Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
    first May 12, 2026
  • Critical max 8.1
    MSRC-CVE-2024-49132 1 CVE rev. 2

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Dec 10, 2024
  • Critical max 8.1
    MSRC-CVE-2024-49123 1 CVE rev. 2

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Dec 10, 2024
  • High max 7.5
    MSRC-CVE-2024-49075 1 CVE rev. 2

    Windows Remote Desktop Services Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Dec 10, 2024
  • High max 7.5
    MSRC-CVE-2025-21330 1 CVE rev. 2

    Windows Remote Desktop Services Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 14, 2025
  • Critical max 8.1
    MSRC-CVE-2024-43582 1 CVE rev. 3

    Remote Desktop Protocol Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Oct 8, 2024
  • High max 6.7
    MSRC-CVE-2026-21530 1 CVE rev. 3

    Windows Rich Text Edit Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first May 12, 2026
  • High max 6.8
    MSRC-CVE-2026-45585 1 CVE rev. 7

    Windows BitLocker Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

    Microsoft
    first May 19, 2026
  • High max 7.0
    MSRC-CVE-2020-17103 1 CVE rev. 2

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Dec 8, 2020
  • High max 7.8
    MSRC-CVE-2026-50511 1 CVE

    Microsoft PC Manager Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft