Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

10,146 results · Feed

  • Critical max 7.8

    Windows Hyper-V Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 4.3

    MapUrlToZone Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 6.7

    Windows Defender Firewall Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • High max 7.8

    Windows BitLocker Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.3

    Windows BitLocker Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.3

    Windows MultiPoint Services Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • High max 7.0

    Windows Hyper-V Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 8.8

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • High max 6.7

    Windows Defender Firewall Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.0

    Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • High max 4.3

    MapUrlToZone Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.0

    Microsoft Brokering File System Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 6.7

    Windows Defender Firewall Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.4

    Windows Management Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.8

    Windows Hyper-V Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  • High max 6.7

    Windows Defender Firewall Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • High max 7.0

    Windows TCP/IP Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  • High max 7.8

    Windows Hyper-V Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.8

    Windows Hyper-V Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 6.7

    Windows Defender Firewall Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 6.5

    Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 6.7

    Windows Defender Firewall Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.0

    Windows Graphics Component Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 6.5

    Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • High max 7.5

    HTTP.sys Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • High max 5.5

    Windows Kernel-Mode Driver Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  • High max 5.5

    Windows Kernel Memory Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  • High max 7.0

    Windows Bluetooth Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.8

    Microsoft DWM Core Library Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Critical max 7.8

    Windows Graphics Component Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Critical max 5.5

    Windows Imaging Component Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • High max 6.5

    Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • High max 6.5

    Microsoft SQL Server Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.8

    Azure Connected Machine Agent Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • High max 7.8

    Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • High max 7.8
    MSRC-CVE-2025-55316 1 CVE rev. 2

    Azure Connected Machine Agent Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • High max 7.5

    Microsoft OfficePlus Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.8

    Xbox Gaming Services Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Critical max 7.3

    Graphics Kernel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Critical max 7.8

    Windows Graphics Component Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.