10,146 results · Feed
-
Critical max 8.1
Microsoft Defender Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited. Customer action: Required.
first May 19, 2026 -
High max 7.8
Microsoft Defender Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.
first May 19, 2026 -
Low max 4.0
Microsoft Defender Denial of Service Vulnerability
Impact: Denial of Service. Microsoft rating: Low. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.
first May 19, 2026 -
High max 9.1
Azure SDK for Java Security Feature Bypass Vulnerability
Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
first May 12, 2026 -
High max 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability
Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
first May 12, 2026 -
Critical max 7.5MSRC-CVE-2026-23663 1 CVE
Microsoft Global Secure Access (GSA) Information Disclosure Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 10.0MSRC-CVE-2026-42901 1 CVE
Microsoft Entra ID Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 10.0MSRC-CVE-2026-41104 1 CVE
Microsoft Planetary Computer Pro Information Disclosure Vulnerability
Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 9.1MSRC-CVE-2026-33843 1 CVE
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 7.7MSRC-CVE-2026-26147 1 CVE
Azure Stack HCI Information Disclosure Vulnerability
Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 9.3MSRC-CVE-2026-41090 1 CVE
Microsoft Copilot Tampering Vulnerability
Impact: Tampering. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 6.5MSRC-CVE-2026-42827 1 CVE
M365 Copilot Information Disclosure Vulnerability
Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 10.0MSRC-CVE-2026-47280 1 CVE
Azure Resource Manager Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 9.9MSRC-CVE-2026-40411 1 CVE
Azure Virtual Network Gateway Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 8.8MSRC-CVE-2026-35430 1 CVE
Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 10.0MSRC-CVE-2026-23652 1 CVE
Microsoft Power Pages Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 10.0MSRC-CVE-2026-40412 1 CVE
Azure Orbital Spatio Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
High max 5.5
Microsoft Teams Spoofing Vulnerability
Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
first May 12, 2026 -
Critical max 8.4
Microsoft Word Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
first May 12, 2026 -
High max 7.8MSRC-CVE-2026-42834 1 CVE
Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 4.3
.NET Core Tampering Vulnerability
Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
first May 12, 2026 -
Critical max 10.0MSRC-CVE-2026-42822 1 CVE
Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.
-
Medium max 5.4MSRC-CVE-2026-45492 1 CVE
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Impact: Security Feature Bypass. Microsoft rating: Moderate. Not known to be exploited — Exploitation More Likely. Customer action: Required.
-
High max 6.7
Windows Rich Text Edit Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
first May 12, 2026 -
Critical max 9.3
Azure Entra ID Spoofing Vulnerability
Impact: Spoofing. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
first May 7, 2026 -
Critical max 7.5
Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
first May 12, 2026 -
Critical max 9.6MSRC-CVE-2026-41615 1 CVE
Microsoft Authenticator Information Disclosure Vulnerability
Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 9.1
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
first May 12, 2026 -
High max 5.5
Windows File Explorer Information Disclosure Vulnerability
Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
first Jan 13, 2026 -
High max 7.4MSRC-CVE-2026-42893 1 CVE
Microsoft Outlook for iOS Tampering Vulnerability
Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.7MSRC-CVE-2026-42832 1 CVE
Microsoft Office Spoofing Vulnerability
Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
-
High max 6.5MSRC-CVE-2026-42830 1 CVE
Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 9.9MSRC-CVE-2026-42823 1 CVE
Azure Logic Apps Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 8.8MSRC-CVE-2026-41613 1 CVE
Visual Studio Code Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
Critical max 9.1MSRC-CVE-2026-41103 1 CVE
Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.
-
High max 7.8MSRC-CVE-2026-40381 1 CVE
Azure Connected Machine Agent Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 6.7MSRC-CVE-2026-41097 1 CVE
Secure Boot Security Feature Bypass Vulnerability
Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 8.8MSRC-CVE-2026-40420 1 CVE
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 8.8MSRC-CVE-2026-35436 1 CVE
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.8MSRC-CVE-2026-40418 1 CVE
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.