Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

10,146 results · Feed

  • High max 7.8
    MSRC-CVE-2024-38172 1 CVE

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2024-38168 1 CVE

    .NET and Visual Studio Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.8
    MSRC-CVE-2024-38161 1 CVE

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 9.1
    MSRC-CVE-2024-38160 1 CVE

    Windows Network Virtualization Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 9.1
    MSRC-CVE-2024-38159 1 CVE

    Windows Network Virtualization Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 4.4
    MSRC-CVE-2024-38123 1 CVE

    Windows Bluetooth Driver Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 9.3
    MSRC-CVE-2024-38108 1 CVE

    Azure Stack Hub Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.3
    MSRC-CVE-2024-38081 1 CVE rev. 3

    .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 9, 2024
  • High max 6.8
    MSRC-CVE-2024-38058 1 CVE rev. 2

    BitLocker Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 9, 2024
  • Medium max 6.5
    MSRC-CVE-2024-38219 1 CVE

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Aug 13, 2024
  • High max 8.4
    MSRC-CVE-2024-38218 1 CVE

    Microsoft Edge (HTML-based) Memory Corruption Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Aug 13, 2024
  • Critical max 8.5
    MSRC-CVE-2024-38206 1 CVE

    Microsoft Copilot Studio Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    Microsoft
    first Aug 13, 2024
  • Critical max 8.2
    MSRC-CVE-2024-38166 1 CVE

    Microsoft Dynamics 365 Cross-site Scripting Vulnerability

    Impact: Spoofing. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    Microsoft
    first Aug 13, 2024
  • High max 8.8
    MSRC-CVE-2024-37973 1 CVE rev. 2

    Secure Boot Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 9, 2024
  • Critical max 9.0
    MSRC-CVE-2024-38182 1 CVE

    Microsoft Dynamics 365 Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Not required.

    Microsoft
    first Jul 9, 2024
  • Medium max 5.9
    MSRC-CVE-2024-38103 1 CVE

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 9, 2024
  • High max 7.5
    MSRC-CVE-2024-30105 1 CVE rev. 2

    .NET and Visual Studio Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 9, 2024
  • Critical max 9.6
    MSRC-CVE-2024-38164 1 CVE

    GroupMe Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
    first Jul 9, 2024
  • Critical max 8.1
    MSRC-CVE-2024-38176 1 CVE

    GroupMe Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    Microsoft
    first Jul 9, 2024
  • High max 7.5
    MSRC-CVE-2023-29348 1 CVE rev. 4

    Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Oct 10, 2023
  • High max 8.1
    MSRC-CVE-2024-37325 1 CVE rev. 2

    Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 11, 2024
  • High max 8.1
    MSRC-CVE-2024-20652 1 CVE rev. 2

    Windows HTML Platforms Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Jan 9, 2024
  • High max 5.5
    MSRC-CVE-2024-21377 1 CVE rev. 2

    Windows DNS Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Feb 13, 2024
  • High max 7.5
    MSRC-CVE-2024-38061 1 CVE rev. 2

    DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 9, 2024
  • Medium max 6.1
    MSRC-CVE-2024-38156 1 CVE

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 9, 2024
  • High max 7.5
    MSRC-CVE-2024-32987 1 CVE rev. 2

    Microsoft SharePoint Server Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 9, 2024
  • High max 7.5
    MSRC-CVE-2024-38112 1 CVE 1 exploited rev. 2

    Windows MSHTML Platform Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Jul 9, 2024
  • High max 7.5
    MSRC-CVE-2024-38015 1 CVE rev. 2

    Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 9, 2024
  • High max 8.8
    MSRC-CVE-2024-38021 1 CVE rev. 2

    Microsoft Outlook Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Jul 9, 2024
  • High max 6.5
    MSRC-CVE-2024-38105 1 CVE

    Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2024-38101 1 CVE

    Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.9
    MSRC-CVE-2024-38099 1 CVE

    Windows Remote Desktop Licensing Service Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.2
    MSRC-CVE-2024-38094 1 CVE 1 exploited

    Microsoft SharePoint Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2024-38092 1 CVE

    Azure CycleCloud Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 9.1
    MSRC-CVE-2024-38089 1 CVE

    Microsoft Defender for IoT Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-38079 1 CVE

    Windows Graphics Component Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2024-38078 1 CVE

    Xbox Wireless Adapter Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2024-38076 1 CVE

    Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2024-38074 1 CVE

    Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2024-38073 1 CVE

    Windows Remote Desktop Licensing Service Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft