10,146 results · Feed
-
High max 7.8MSRC-CVE-2026-27927 1 CVE
Windows Projected File System Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.0MSRC-CVE-2026-27926 1 CVE
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.8MSRC-CVE-2026-27924 1 CVE
Desktop Window Manager Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.0MSRC-CVE-2026-27921 1 CVE
Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.
-
High max 7.8MSRC-CVE-2026-27919 1 CVE
Windows UPnP Device Host Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.8MSRC-CVE-2026-27918 1 CVE
Windows Shell Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.0MSRC-CVE-2026-27917 1 CVE
Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.8MSRC-CVE-2026-27915 1 CVE
Windows UPnP Device Host Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.0MSRC-CVE-2026-27908 1 CVE
Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.
-
High max 7.8MSRC-CVE-2026-27907 1 CVE
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 4.4MSRC-CVE-2026-27906 1 CVE
Windows Hello Security Feature Bypass Vulnerability
Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.
-
High max 7.8MSRC-CVE-2026-26183 1 CVE
Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.8MSRC-CVE-2026-26181 1 CVE
Microsoft Brokering File System Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.8MSRC-CVE-2026-26180 1 CVE
Windows Kernel Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.8MSRC-CVE-2026-26179 1 CVE
Windows Kernel Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 4.6MSRC-CVE-2026-26175 1 CVE
Windows Boot Manager Security Feature Bypass Vulnerability
Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 8.8MSRC-CVE-2026-26167 1 CVE
Windows Push Notifications Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.0MSRC-CVE-2026-26166 1 CVE
Windows Shell Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.0MSRC-CVE-2026-26165 1 CVE
Windows Shell Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.8MSRC-CVE-2026-26162 1 CVE
Windows OLE Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.8MSRC-CVE-2026-26161 1 CVE
Windows Sensor Data Service Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.8MSRC-CVE-2026-26160 1 CVE
Remote Desktop Licensing Service Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 6.5MSRC-CVE-2026-26155 1 CVE
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.5MSRC-CVE-2026-26154 1 CVE
Windows Server Update Service (WSUS) Tampering Vulnerability
Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.1MSRC-CVE-2026-26151 1 CVE
Remote Desktop Spoofing Vulnerability
Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.
-
High max 5.7MSRC-CVE-2026-23670 1 CVE
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 4.6MSRC-CVE-2026-20945 1 CVE
Microsoft SharePoint Server Spoofing Vulnerability
Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.0MSRC-CVE-2026-25184 1 CVE
Applocker Filter Driver (applockerfltr.sys) Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 5.7MSRC-CVE-2026-23653 1 CVE
GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.8MSRC-CVE-2026-20930 1 CVE
Windows Management Services Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
Low max 4.2
Microsoft Edge (Chromium-based) Defense in Depth Vulnerability - Rejected
Impact: Defense in Depth. Microsoft rating: Low. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
first Mar 27, 2026 -
Critical max 8.6
Azure Arc Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
first Feb 5, 2026 -
Medium max 5.4MSRC-CVE-2026-33119 1 CVE
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
-
Low max 5.0
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
Impact: Spoofing. Microsoft rating: Low. Not known to be exploited. Customer action: Required.
first Mar 13, 2026 -
High max 7.1
M365 Copilot Information Disclosure Vulnerability
Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
first Mar 12, 2026 -
Critical max 10.0
Microsoft Bing Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
first Apr 2, 2026 -
Critical max 9.1MSRC-CVE-2026-32211 1 CVE
Azure MCP Server Information Disclosure Vulnerability
Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 8.6MSRC-CVE-2026-32173 1 CVE
Azure SRE Agent Information Disclosure Vulnerability
Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 10.0MSRC-CVE-2026-33105 1 CVE
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 9.6MSRC-CVE-2026-26135 1 CVE
Azure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.