10,146 results · Feed
-
Critical max 10.0MSRC-CVE-2026-33107 1 CVE
Azure Databricks Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 10.0MSRC-CVE-2026-32213 1 CVE
Azure AI Foundry Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
High max 7.8
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
first Jan 14, 2025 -
High max 8.8
GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
first Feb 10, 2026 -
Critical max 9.9
Microsoft Exchange Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
first Mar 19, 2026 -
High max 8.8
RPC Runtime Library Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
first Mar 10, 2026 -
High max 8.8
Azure MCP Server Tools Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
first Mar 10, 2026 -
Critical max 9.8MSRC-CVE-2026-32194 1 CVE
Microsoft Bing Images Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 6.5MSRC-CVE-2026-26136 1 CVE
Microsoft Copilot Information Disclosure Vulnerability
Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 5.3MSRC-CVE-2026-24299 1 CVE
M365 Copilot Information Disclosure Vulnerability
Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 8.6MSRC-CVE-2026-23659 1 CVE
Azure Data Factory Information Disclosure Vulnerability
Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 6.5MSRC-CVE-2026-26120 1 CVE
Microsoft Bing Tampering Vulnerability
Impact: Tampering. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 8.6MSRC-CVE-2026-23658 1 CVE
Azure DevOps: msazure Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 9.8MSRC-CVE-2026-32191 1 CVE
Microsoft Bing Images Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 8.6MSRC-CVE-2026-26138 1 CVE
Microsoft Purview Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 8.6MSRC-CVE-2026-26139 1 CVE
Microsoft Purview Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
Critical max 10.0MSRC-CVE-2026-32169 1 CVE
Azure Cloud Shell Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.
-
High max 9.8
Microsoft SharePoint Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
first Jan 13, 2026 -
High max 8.0
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
first Mar 10, 2026 -
High max 8.0
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
first Mar 10, 2026 -
High max 8.0
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
first Mar 10, 2026 -
High max 8.8
GitHub Copilot and Visual Studio Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
first Feb 10, 2026 -
High max 8.0
GitHub Copilot and Visual Studio Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
first Feb 10, 2026 -
High max 8.1
Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
first Mar 10, 2026 -
Critical max 7.5MSRC-CVE-2026-26144 1 CVE
Microsoft Excel Information Disclosure Vulnerability
Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
-
High max 7.8MSRC-CVE-2026-26141 1 CVE
Hybrid Worker Extension (Arc‑enabled Windows VMs) Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
-
High max 7.5MSRC-CVE-2026-26130 1 CVE
ASP.NET Core Denial of Service Vulnerability
Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 5.5MSRC-CVE-2026-26123 1 CVE
Microsoft Authenticator Information Disclosure Vulnerability
Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.8MSRC-CVE-2026-26117 1 CVE
Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
-
Critical max 8.4MSRC-CVE-2026-26110 1 CVE
Microsoft Office Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 8.4MSRC-CVE-2026-26109 1 CVE
Microsoft Excel Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
-
High max 7.8MSRC-CVE-2026-26108 1 CVE
Microsoft Excel Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.8MSRC-CVE-2026-26107 1 CVE
Microsoft Excel Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 8.8MSRC-CVE-2026-26106 1 CVE
Microsoft SharePoint Server Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.8MSRC-CVE-2026-23665 1 CVE
Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.5MSRC-CVE-2026-23662 1 CVE
Azure IoT Explorer Information Disclosure Vulnerability
Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 7.5MSRC-CVE-2026-23661 1 CVE
Azure IoT Explorer Information Disclosure Vulnerability
Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
-
High max 8.8MSRC-CVE-2026-23654 1 CVE
GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
-
High max 7.5MSRC-CVE-2026-23674 1 CVE
MapUrlToZone Security Feature Bypass Vulnerability
Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
-
High max 7.5MSRC-CVE-2026-26127 1 CVE
.NET Denial of Service Vulnerability
Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation Unlikely. Customer action: Required.