Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

10,146 results · Feed

  • High max 5.5
    MSRC-CVE-2025-55325 1 CVE

    Windows Storage Management Provider Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-24052 1 CVE

    Windows Agere Modem Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-24990 1 CVE 1 exploited

    Windows Agere Modem Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.3
    MSRC-CVE-2025-55247 1 CVE

    .NET Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.4
    MSRC-CVE-2025-53782 1 CVE

    Microsoft Exchange Server Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2025-50174 1 CVE

    Windows Device Association Broker Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.4
    MSRC-CVE-2025-48004 1 CVE

    Microsoft Brokering File System Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 6.1
    MSRC-CVE-2025-55338 1 CVE

    Windows BitLocker Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-50173 1 CVE rev. 2

    Windows Installer Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Aug 12, 2025
  • High max 7.0
    MSRC-CVE-2025-59220 1 CVE rev. 2

    Windows Bluetooth Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 18, 2025
  • Critical max 8.7
    MSRC-CVE-2025-59271 1 CVE

    Redis Enterprise Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    Microsoft
  • Critical max 9.3
    MSRC-CVE-2025-55321 1 CVE

    Azure Monitor Log Analytics Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    Microsoft
  • Critical max 8.8
    MSRC-CVE-2025-59247 1 CVE

    Azure PlayFab Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2025-59246 1 CVE

    Azure Entra ID Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Not required.

    Microsoft
  • Critical max 9.6
    MSRC-CVE-2025-59218 1 CVE

    Azure Entra ID Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    Microsoft
  • High max 8.2
    MSRC-CVE-2023-36038 1 CVE rev. 2

    ASP.NET Core Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 14, 2023
  • High max 7.8
    MSRC-CVE-2025-53132 1 CVE rev. 2

    Win32k Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Aug 12, 2025
  • High max 9.8
    MSRC-CVE-2025-55232 1 CVE rev. 2

    Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 9, 2025
  • High max 7.6
    MSRC-CVE-2025-59251 1 CVE

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Customer action: Required.

    Microsoft
  • High max 7.3
    MSRC-CVE-2025-55322 1 CVE

    OmniParser Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2025-59216 1 CVE

    Windows Graphics Component Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2025-59215 1 CVE

    Windows Graphics Component Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 10.0
    MSRC-CVE-2025-55241 1 CVE rev. 2

    Azure Entra ID Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
    first Sep 4, 2025
  • High max 4.0
    MSRC-CVE-2025-49728 1 CVE

    Microsoft PC Manager Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • Low max 4.7
    MSRC-CVE-2025-47967 1 CVE

    Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Low. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • Critical max 8.4
    MSRC-CVE-2025-54910 1 CVE rev. 2

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 9, 2025
  • High max 5.5
    MSRC-CVE-2025-54901 1 CVE rev. 2

    Microsoft Excel Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 9, 2025
  • High max 7.8
    MSRC-CVE-2025-54900 1 CVE rev. 2

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
    first Sep 9, 2025
  • High max 7.8
    MSRC-CVE-2025-54906 1 CVE rev. 2

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 9, 2025
  • High max 7.1
    MSRC-CVE-2025-54905 1 CVE rev. 2

    Microsoft Word Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 9, 2025
  • High max 7.8
    MSRC-CVE-2025-54904 1 CVE rev. 2

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 9, 2025
  • High max 7.8
    MSRC-CVE-2025-54903 1 CVE rev. 2

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 9, 2025
  • High max 7.8
    MSRC-CVE-2025-54902 1 CVE rev. 2

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 9, 2025
  • High max 7.8
    MSRC-CVE-2025-54899 1 CVE rev. 2

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
    first Sep 9, 2025
  • High max 7.8
    MSRC-CVE-2025-54898 1 CVE rev. 2

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 9, 2025
  • High max 7.8
    MSRC-CVE-2025-54896 1 CVE rev. 2

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
    first Sep 9, 2025
  • High max 7.0
    MSRC-CVE-2025-49734 1 CVE rev. 2

    PowerShell Direct Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 9, 2025
  • High max 8.8
    MSRC-CVE-2025-21293 1 CVE rev. 2

    Active Directory Domain Services Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 14, 2025
  • High max 8.8
    MSRC-CVE-2025-55234 1 CVE

    Windows SMB Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2025-55227 1 CVE

    Microsoft SQL Server Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft