Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

10,146 results · Feed

  • High max 8.8
    MSRC-CVE-2025-25000 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 3, 2025
  • High max 7.8
    MSRC-CVE-2025-27729 1 CVE rev. 2

    Windows Shell Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.8
    MSRC-CVE-2025-27747 1 CVE rev. 5

    Microsoft Word Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.2
    MSRC-CVE-2025-29793 1 CVE rev. 3

    Microsoft SharePoint Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 5.7
    MSRC-CVE-2025-29817 1 CVE

    Microsoft Power Automate Desktop Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2025-29816 1 CVE rev. 2

    Microsoft Word Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.8
    MSRC-CVE-2025-26642 1 CVE rev. 2

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.8
    MSRC-CVE-2025-29822 1 CVE rev. 2

    Microsoft OneNote Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.8
    MSRC-CVE-2025-27750 1 CVE rev. 2

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.8
    MSRC-CVE-2025-27751 1 CVE rev. 2

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.8
    MSRC-CVE-2025-27746 1 CVE rev. 2

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.8
    MSRC-CVE-2025-29820 1 CVE rev. 4

    Microsoft Word Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • Critical max 7.8
    MSRC-CVE-2025-29791 1 CVE rev. 3

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • Critical max 7.8
    MSRC-CVE-2025-27752 1 CVE rev. 3

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • Critical max 7.8
    MSRC-CVE-2025-27749 1 CVE rev. 3

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • Critical max 7.8
    MSRC-CVE-2025-27748 1 CVE rev. 3

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • Critical max 7.8
    MSRC-CVE-2025-27745 1 CVE rev. 3

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.5
    MSRC-CVE-2025-29834 1 CVE

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2025-27467 1 CVE rev. 2

    Windows Digital Media Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.0
    MSRC-CVE-2025-27732 1 CVE rev. 2

    Windows Graphics Component Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.8
    MSRC-CVE-2025-27730 1 CVE rev. 2

    Windows Digital Media Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 8.8
    MSRC-CVE-2025-26647 1 CVE rev. 2

    Windows Kerberos Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.3
    MSRC-CVE-2025-29792 1 CVE rev. 2

    Microsoft Office Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 8.8
    MSRC-CVE-2025-27740 1 CVE rev. 2

    Active Directory Certificate Services Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.8
    MSRC-CVE-2025-27476 1 CVE rev. 2

    Windows Digital Media Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.5
    MSRC-CVE-2025-29810 1 CVE rev. 2

    Active Directory Domain Services Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.1
    MSRC-CVE-2025-29809 1 CVE rev. 2

    Windows Kerberos Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 6.5
    MSRC-CVE-2025-27738 1 CVE rev. 2

    Windows Resilient File System (ReFS) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 8.6
    MSRC-CVE-2025-27737 1 CVE rev. 2

    Windows Security Zone Mapping Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 6.0
    MSRC-CVE-2025-27735 1 CVE rev. 2

    Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.8
    MSRC-CVE-2025-27733 1 CVE rev. 2

    NTFS Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.8
    MSRC-CVE-2025-27727 1 CVE rev. 2

    Windows Installer Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • Critical max 7.1
    MSRC-CVE-2025-27491 1 CVE rev. 2

    Windows Hyper-V Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.8
    MSRC-CVE-2025-27489 1 CVE rev. 2

    Azure Local Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 8.0
    MSRC-CVE-2025-27487 1 CVE rev. 2

    Remote Desktop Client Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.8
    MSRC-CVE-2025-27483 1 CVE rev. 2

    NTFS Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 8.8
    MSRC-CVE-2025-27481 1 CVE rev. 2

    Windows Telephony Service Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.5
    MSRC-CVE-2025-27484 1 CVE rev. 2

    Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 7.5
    MSRC-CVE-2025-27469 1 CVE rev. 2

    Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025
  • High max 6.5
    MSRC-CVE-2025-26672 1 CVE rev. 2

    Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 8, 2025