Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

10,146 results · Feed

  • High max 7.8
    MSRC-CVE-2025-32706 1 CVE 1 exploited

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2025-32703 1 CVE

    Visual Studio Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-32701 1 CVE 1 exploited

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-30400 1 CVE 1 exploited

    Microsoft DWM Core Library Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.3
    MSRC-CVE-2025-29826 1 CVE

    Microsoft Dataverse Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2025-27468 1 CVE

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 9.8
    MSRC-CVE-2025-30387 1 CVE

    Document Intelligence Studio On-Prem Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 7.4
    MSRC-CVE-2025-30384 1 CVE

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-30382 1 CVE

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2025-30378 1 CVE

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-29978 1 CVE

    Microsoft PowerPoint Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-29976 1 CVE

    Microsoft SharePoint Server Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2025-29973 1 CVE

    Microsoft Azure File Sync Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-29970 1 CVE

    Microsoft Brokering File System Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2025-29969 1 CVE

    MS-EVEN RPC Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2025-29968 1 CVE

    Active Directory Certificate Services (AD CS) Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • Critical max 8.8
    MSRC-CVE-2025-29967 1 CVE

    Remote Desktop Client Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.8
    MSRC-CVE-2025-29966 1 CVE

    Remote Desktop Client Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2025-29964 1 CVE

    Windows Media Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2025-29960 1 CVE

    Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2025-29959 1 CVE

    Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • Critical max 8.1
    MSRC-CVE-2024-49128 1 CVE rev. 3

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Dec 10, 2024
  • High max 7.8
    MSRC-CVE-2025-29823 1 CVE rev. 2

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.5
    MSRC-CVE-2025-26673 1 CVE rev. 3

    Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • Critical max 8.7
    MSRC-CVE-2025-47732 1 CVE

    Microsoft Dataverse Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
    first May 13, 2025
  • Critical max 9.1
    MSRC-CVE-2025-47733 1 CVE

    Microsoft Power Apps Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
    first May 13, 2025
  • Critical max 10.0
    MSRC-CVE-2025-29813 1 CVE

    Azure DevOps Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
    first May 13, 2025
  • Critical max 9.9
    MSRC-CVE-2025-29827 1 CVE

    Azure Automation Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
    first May 13, 2025
  • Critical max 9.9
    MSRC-CVE-2025-29972 1 CVE

    Azure Storage Resource Provider Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
    first May 13, 2025
  • Critical max 8.1
    MSRC-CVE-2025-33072 1 CVE

    Microsoft msagsfeedback.azurewebsites.net Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    Microsoft
    first May 13, 2025
  • Low max 6.5
    MSRC-CVE-2025-29825 1 CVE

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Low. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first May 13, 2025
  • Critical max 8.5
    MSRC-CVE-2025-21416 1 CVE

    Azure Virtual Desktop Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2025-30392 1 CVE

    Azure AI Bot Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 9.9
    MSRC-CVE-2025-30390 1 CVE

    Azure ML Compute Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Not required.

    Microsoft
  • Critical max 7.5
    MSRC-CVE-2025-33074 1 CVE

    Azure Functions Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 8.7
    MSRC-CVE-2025-30389 1 CVE

    Azure Bot Framework SDK Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 8.1
    MSRC-CVE-2025-30391 1 CVE

    Microsoft Dynamics Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • High max 6.7
    MSRC-CVE-2025-21199 1 CVE rev. 2

    Azure Agent Installer for Backup and Site Recovery Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Mar 11, 2025
  • High max 6.5
    MSRC-CVE-2025-24054 1 CVE 1 exploited rev. 3

    NTLM Hash Disclosure Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Mar 11, 2025
  • High max 8.8
    MSRC-CVE-2025-29794 1 CVE rev. 4

    Microsoft SharePoint Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025