Microsoft Security Response Center

10,146 results · Feed

• High max 8.0
  MSRC-CVE-2023-35634 1 CVE

  Windows Bluetooth Driver Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 7.8
  MSRC-CVE-2023-35633 1 CVE

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 7.8
  MSRC-CVE-2023-35632 1 CVE

  Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 7.8
  MSRC-CVE-2023-35631 1 CVE

  Win32k Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• Critical max 8.8
  MSRC-CVE-2023-35630 1 CVE

  Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 6.8
  MSRC-CVE-2023-35629 1 CVE

  Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• Critical max 8.1
  MSRC-CVE-2023-35628 1 CVE

  Windows MSHTML Platform Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 7.8
  MSRC-CVE-2023-35644 1 CVE

  Windows Sysmain Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 7.5
  MSRC-CVE-2023-35643 1 CVE

  DHCP Server Service Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 6.5
  MSRC-CVE-2023-35642 1 CVE

  Internet Connection Sharing (ICS) Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 8.8
  MSRC-CVE-2023-35639 1 CVE

  Microsoft ODBC Driver Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 7.5
  MSRC-CVE-2023-35638 1 CVE

  DHCP Server Service Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 8.8
  MSRC-CVE-2023-36006 1 CVE

  Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 7.5
  MSRC-CVE-2023-36005 1 CVE

  Windows Telephony Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 7.5
  MSRC-CVE-2023-36004 1 CVE

  Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 6.7
  MSRC-CVE-2023-36003 1 CVE

  XAML Diagnostics Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 5.3
  MSRC-CVE-2023-36012 1 CVE

  DHCP Server Service Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 7.5
  MSRC-CVE-2023-36010 1 CVE

  Microsoft Defender Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 7.8
  MSRC-CVE-2023-36391 1 CVE

  Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 7.8
  MSRC-CVE-2023-21740 1 CVE

  Windows Media Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 4.7
  MSRC-CVE-2023-35625 1 CVE

  Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 7.8
  MSRC-CVE-2023-36011 1 CVE

  Win32k Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 5.5
  MSRC-CVE-2023-36009 1 CVE

  Microsoft Word Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 7.6
  MSRC-CVE-2023-36020 1 CVE

  Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• High max 7.8
  MSRC-CVE-2023-36696 1 CVE

  Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023
• Critical max 7.8
  MSRC-CVE-2023-36792 1 CVE rev. 9

  Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023

  first Sep 12, 2023
• Critical max 7.8
  MSRC-CVE-2023-36793 1 CVE rev. 9

  Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023

  first Sep 12, 2023
• High max 7.8
  MSRC-CVE-2023-36794 1 CVE rev. 9

  Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited. Customer action: Required.

  Microsoft
  Dec 12, 2023

  first Sep 12, 2023
• Critical max 7.8
  MSRC-CVE-2023-36796 1 CVE rev. 10

  Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Dec 12, 2023

  first Sep 12, 2023
• Critical max 8.0
  MSRC-CVE-2022-24477 1 CVE rev. 4

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Dec 4, 2023

  first Aug 9, 2022
• High max 8.0
  MSRC-CVE-2023-36035 1 CVE rev. 2

  Microsoft Exchange Server Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Dec 4, 2023

  first Nov 14, 2023
• High max 8.8
  MSRC-CVE-2023-36419 1 CVE rev. 2

  Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 30, 2023

  first Oct 10, 2023
• High max 7.2
  MSRC-CVE-2023-38156 1 CVE rev. 3

  Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 30, 2023

  first Sep 12, 2023
• High max 7.8
  MSRC-CVE-2023-38175 1 CVE rev. 2

  Microsoft Windows Defender Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 28, 2023

  first Aug 8, 2023
• High max 8.8
  MSRC-CVE-2023-36025 1 CVE 1 exploited rev. 2

  Windows SmartScreen Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  Nov 22, 2023

  first Nov 14, 2023
• High max 6.5
  MSRC-CVE-2023-36013 1 CVE

  PowerShell Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 17, 2023

  first Nov 14, 2023
• High max 8.8
  MSRC-CVE-2023-36560 1 CVE rev. 2

  ASP.NET Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 17, 2023

  first Nov 14, 2023
• High max 8.8
  MSRC-CVE-2023-36423 1 CVE rev. 2

  Microsoft Remote Registry Service Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 16, 2023

  first Nov 14, 2023
• High max 7.8
  MSRC-CVE-2023-36719 1 CVE

  Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 14, 2023
• High max 6.2
  MSRC-CVE-2023-36016 1 CVE

  Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 14, 2023