Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

10,146 results · Feed

  • High max 7.8
    MSRC-CVE-2023-36731 1 CVE

    Win32k Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-36732 1 CVE

    Win32k Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • Critical max 8.1
    MSRC-CVE-2023-41774 1 CVE

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.1
    MSRC-CVE-2023-41773 1 CVE

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-41772 1 CVE

    Win32k Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • Critical max 8.1
    MSRC-CVE-2023-41769 1 CVE

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.1
    MSRC-CVE-2023-41771 1 CVE

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.1
    MSRC-CVE-2023-41767 1 CVE

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.1
    MSRC-CVE-2023-41768 1 CVE

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.1
    MSRC-CVE-2023-41770 1 CVE

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-41766 1 CVE

    Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.3
    MSRC-CVE-2023-41763 1 CVE 1 exploited

    Skype for Business Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.2
    MSRC-CVE-2023-36789 1 CVE

    Skype for Business Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.2
    MSRC-CVE-2023-36786 1 CVE

    Skype for Business Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-36737 1 CVE

    Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2023-36902 1 CVE

    Windows Runtime Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2023-35349 1 CVE

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.2
    MSRC-CVE-2022-37967 1 CVE rev. 6

    Windows Kerberos Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Nov 8, 2022
  • High max 9.8
    MSRC-CVE-2023-21709 1 CVE rev. 5

    Microsoft Exchange Server Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Aug 8, 2023
  • Critical max 8.8
    MSRC-CVE-2023-38148 1 CVE rev. 2

    Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Sep 12, 2023
  • Low max 6.1
    MSRC-CVE-2023-29345 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Low. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 13, 2023
  • High max 8.8
    MSRC-CVE-2022-35825 1 CVE rev. 2

    Visual Studio Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Aug 9, 2022
  • High max 7.0
    MSRC-CVE-2023-36805 1 CVE rev. 2

    Windows MSHTML Platform Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 12, 2023
  • High max 7.8
    MSRC-CVE-2023-36802 1 CVE 1 exploited rev. 2

    Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Sep 12, 2023
  • High max 7.8
    MSRC-CVE-2023-36898 1 CVE rev. 3

    Tablet Windows User Interface Application Core Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Aug 8, 2023
  • High max 7.1
    MSRC-CVE-2023-36876 1 CVE rev. 2

    Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Aug 8, 2023
  • High max 6.1
    MSRC-CVE-2023-36727 1 CVE

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 12, 2023
  • Medium max 9.6
    MSRC-CVE-2023-36735 1 CVE

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 12, 2023
  • Medium max 7.1
    MSRC-CVE-2023-36562 1 CVE

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 12, 2023
  • High max 4.4
    MSRC-CVE-2023-36736 1 CVE rev. 2

    Microsoft Identity Linux Broker Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 12, 2023
  • Critical max 7.5
    MSRC-CVE-2023-29332 1 CVE rev. 4

    Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 12, 2023
  • High max 7.8
    MSRC-CVE-2023-38163 1 CVE

    Windows Defender Attack Surface Reduction Security Feature Bypass

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-36739 1 CVE

    3D Viewer Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-36740 1 CVE

    3D Viewer Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 5.7
    MSRC-CVE-2023-36777 1 CVE

    Microsoft Exchange Server Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-36760 1 CVE

    3D Viewer Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.3
    MSRC-CVE-2023-36762 1 CVE

    Microsoft Word Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2023-36763 1 CVE

    Microsoft Outlook Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2023-36764 1 CVE

    Microsoft SharePoint Server Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-36770 1 CVE

    3D Builder Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft