Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

10,146 results · Feed

  • High max 8.8
    MSRC-CVE-2024-21350 1 CVE

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2024-21349 1 CVE

    Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 4.6
    MSRC-CVE-2024-21340 1 CVE

    Windows Kernel Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 6.5
    MSRC-CVE-2024-20684 1 CVE

    Windows Hyper-V Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.6
    MSRC-CVE-2024-21327 1 CVE

    Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-20673 1 CVE

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Medium max 8.3
    MSRC-CVE-2024-21399 1 CVE

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2024-21388 1 CVE

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 9, 2024
  • High max 7.6
    MSRC-CVE-2023-36049 1 CVE rev. 4

    .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 14, 2023
  • Low max 2.5
    MSRC-CVE-2024-21336 1 CVE

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Low. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 9, 2024
  • Medium max 5.3
    MSRC-CVE-2024-21387 1 CVE

    Microsoft Edge for Android Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 9, 2024
  • High max 8.3
    MSRC-CVE-2024-21385 1 CVE

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 9, 2024
  • Low max 3.3
    MSRC-CVE-2024-21383 1 CVE

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Low. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 9, 2024
  • Medium max 4.3
    MSRC-CVE-2024-21382 1 CVE

    Microsoft Edge for Android Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 9, 2024
  • High max 9.6
    MSRC-CVE-2024-21326 1 CVE

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 9, 2024
  • High max 7.8
    MSRC-CVE-2023-36018 1 CVE rev. 2

    Visual Studio Code Jupyter Extension Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 14, 2023
  • Low max 6.3
    MSRC-CVE-2024-20675 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Low. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 9, 2024
  • Critical max 8.8
    MSRC-CVE-2024-20674 1 CVE rev. 3

    Windows Kerberos Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Jan 9, 2024
  • Medium max 5.2
    MSRC-CVE-2024-21337 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 9, 2024
  • High max 6.6
    MSRC-CVE-2024-20666 1 CVE rev. 3

    BitLocker Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 9, 2024
  • High max 7.8
    MSRC-CVE-2024-20658 1 CVE rev. 2

    Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 9, 2024
  • High max 6.2
    MSRC-CVE-2023-36042 1 CVE rev. 2

    Visual Studio Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 14, 2023
  • High max 7.8
    MSRC-CVE-2023-32028 1 CVE rev. 4

    Microsoft SQL OLE DB Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 13, 2023
  • High max 7.8
    MSRC-CVE-2023-29349 1 CVE rev. 4

    Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 13, 2023
  • High max 7.8
    MSRC-CVE-2023-32027 1 CVE rev. 5

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 13, 2023
  • High max 7.8
    MSRC-CVE-2023-32026 1 CVE rev. 5

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 13, 2023
  • High max 7.8
    MSRC-CVE-2023-32025 1 CVE rev. 5

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 13, 2023
  • High max 7.8
    MSRC-CVE-2023-29356 1 CVE rev. 4

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 13, 2023
  • High max 6.8
    MSRC-CVE-2024-21319 1 CVE

    Microsoft Identity Denial of service vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2024-20672 1 CVE

    .NET Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2024-21320 1 CVE

    Windows Themes Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2024-21318 1 CVE

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2024-21314 1 CVE

    Microsoft Message Queuing Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2024-21311 1 CVE

    Windows Cryptographic Services Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-21310 1 CVE

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-21309 1 CVE

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.7
    MSRC-CVE-2024-21306 1 CVE

    Microsoft Bluetooth Driver Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.7
    MSRC-CVE-2024-20692 1 CVE

    Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2024-20687 1 CVE

    Microsoft AllJoyn API Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2024-20686 1 CVE

    Win32k Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft