Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

10,146 results · Feed

  • Critical max 7.5
    MSRC-CVE-2024-38204 1 CVE

    Imagine Cup site Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
  • Critical max 8.7
    MSRC-CVE-2024-38139 1 CVE

    Microsoft Dataverse Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Not required.

    Microsoft
  • High max 7.6
    MSRC-CVE-2024-35266 1 CVE rev. 2

    Azure DevOps Server Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 9, 2024
  • High max 6.5
    MSRC-CVE-2024-38167 1 CVE rev. 3

    .NET and Visual Studio Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Aug 13, 2024
  • High max 7.3
    MSRC-CVE-2024-43529 1 CVE rev. 2

    Windows Print Spooler Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Oct 8, 2024
  • Medium max 4.3
    MSRC-CVE-2023-36026 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 14, 2023
  • Medium max 6.6
    MSRC-CVE-2023-36008 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 14, 2023
  • Critical max 9.6
    MSRC-CVE-2024-38175 1 CVE rev. 2

    Azure Managed Instance for Apache Cassandra Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    Microsoft
    first Aug 13, 2024
  • High max 7.5
    MSRC-CVE-2024-38138 1 CVE rev. 3

    Windows Deployment Services Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Aug 13, 2024
  • High max 8.8
    MSRC-CVE-2024-43599 1 CVE rev. 2

    Remote Desktop Client Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Oct 8, 2024
  • High max 7.8
    MSRC-CVE-2024-43590 1 CVE rev. 2

    Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Oct 8, 2024
  • High max 8.1
    MSRC-CVE-2024-38229 1 CVE rev. 2

    .NET and Visual Studio Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Oct 8, 2024
  • High max 7.5
    MSRC-CVE-2024-38095 1 CVE rev. 3

    .NET and Visual Studio Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 9, 2024
  • High max 8.8
    MSRC-CVE-2024-43611 1 CVE

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.4
    MSRC-CVE-2024-43610 1 CVE

    Copilot Studio Information Disclosure Vulnerability

    Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Not required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2024-43603 1 CVE

    Visual Studio Collector Service Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2024-43593 1 CVE

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2024-43592 1 CVE

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.7
    MSRC-CVE-2024-43591 1 CVE

    Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2024-43589 1 CVE

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2024-43585 1 CVE

    Code Integrity Guard Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.7
    MSRC-CVE-2024-43584 1 CVE

    Windows Scripting Engine Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2024-43575 1 CVE

    Windows Hyper-V Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.3
    MSRC-CVE-2024-43574 1 CVE

    Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-43572 1 CVE 1 exploited

    Microsoft Management Console Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 5.6
    MSRC-CVE-2024-43571 1 CVE

    Sudo for Windows Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.4
    MSRC-CVE-2024-43570 1 CVE

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2024-43567 1 CVE

    Windows Hyper-V Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2024-43565 1 CVE

    Windows Network Address Translation (NAT) Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2024-43564 1 CVE

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-43563 1 CVE

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2024-43562 1 CVE

    Windows Network Address Translation (NAT) Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2024-43561 1 CVE

    Windows Mobile Broadband Driver Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-43560 1 CVE

    Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2024-43559 1 CVE

    Windows Mobile Broadband Driver Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2024-43558 1 CVE

    Windows Mobile Broadband Driver Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2024-43557 1 CVE

    Windows Mobile Broadband Driver Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-43556 1 CVE

    Windows Graphics Component Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2024-43555 1 CVE

    Windows Mobile Broadband Driver Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.4
    MSRC-CVE-2024-43553 1 CVE

    NT OS Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft