Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

10,146 results · Feed

  • High max 8.8
    MSRC-CVE-2024-49086 1 CVE

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2024-49085 1 CVE

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2024-49084 1 CVE

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-49074 1 CVE

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.8
    MSRC-CVE-2024-49073 1 CVE

    Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.4
    MSRC-CVE-2024-49070 1 CVE

    Microsoft SharePoint Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 8.2
    MSRC-CVE-2024-49068 1 CVE

    Microsoft SharePoint Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2024-49064 1 CVE

    Microsoft SharePoint Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2024-49059 1 CVE

    Microsoft Office Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.1
    MSRC-CVE-2024-49057 1 CVE

    Microsoft Defender for Endpoint on Android Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Medium max 4.3
    MSRC-CVE-2024-49041 1 CVE

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Dec 10, 2024
  • High max 9.8
    MSRC-CVE-2024-38199 1 CVE rev. 2

    Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Aug 13, 2024
  • Critical max 8.7
    MSRC-CVE-2024-49035 1 CVE 1 exploited rev. 2

    Partner.Microsoft.Com Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Not required.

    Microsoft
    first Nov 12, 2024
  • High max 7.5
    MSRC-CVE-2024-49040 1 CVE rev. 3

    Microsoft Exchange Server Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Nov 12, 2024
  • High max 7.6
    MSRC-CVE-2024-49053 1 CVE

    Microsoft Dynamics 365 Sales Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 12, 2024
  • Critical max 8.2
    MSRC-CVE-2024-49052 1 CVE

    Microsoft Azure PolicyWatch Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    Microsoft
    first Nov 12, 2024
  • Critical max 9.3
    MSRC-CVE-2024-49038 1 CVE

    Microsoft Copilot Studio Elevation Of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    Microsoft
    first Nov 12, 2024
  • Low max 4.3
    MSRC-CVE-2024-49054 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Low. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 12, 2024
  • High max 8.8
    MSRC-CVE-2024-49050 1 CVE rev. 2

    Visual Studio Code Python Extension Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 12, 2024
  • High max 7.5
    MSRC-CVE-2024-30022 1 CVE rev. 2

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first May 14, 2024
  • High max 6.8
    MSRC-CVE-2024-43637 1 CVE rev. 2

    Windows USB Video Class System Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 12, 2024
  • Critical max 9.8
    MSRC-CVE-2024-43639 1 CVE rev. 3

    Windows KDC Proxy Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 12, 2024
  • High max 8.8
    MSRC-CVE-2024-49039 1 CVE 1 exploited rev. 2

    Windows Task Scheduler Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Nov 12, 2024
  • High max 8.1
    MSRC-CVE-2024-43598 1 CVE rev. 2

    LightGBM Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 12, 2024
  • Medium max 5.4
    MSRC-CVE-2024-49025 1 CVE

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 12, 2024
  • High max 7.2
    MSRC-CVE-2024-43613 1 CVE

    Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.2
    MSRC-CVE-2024-49042 1 CVE

    Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.1
    MSRC-CVE-2024-49048 1 CVE

    TorchGeo Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2024-49033 1 CVE

    Microsoft Word Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-49032 1 CVE

    Microsoft Office Graphics Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-49031 1 CVE

    Microsoft Office Graphics Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-49030 1 CVE

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-49029 1 CVE

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-49028 1 CVE

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-49027 1 CVE

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-49026 1 CVE

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-49021 1 CVE

    Microsoft SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-49019 1 CVE

    Active Directory Certificate Services Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2024-49018 1 CVE

    SQL Server Native Client Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2024-49017 1 CVE

    SQL Server Native Client Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft