Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

10,146 results · Feed

  • High max 7.5
    MSRC-CVE-2023-38172 1 CVE

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2023-38184 1 CVE

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 4.5
    MSRC-CVE-2023-38188 1 CVE

    Azure Apache Hadoop Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 4.6
    MSRC-CVE-2023-35394 1 CVE

    Azure HDInsight Jupyter Notebook Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 4.5
    MSRC-CVE-2023-35393 1 CVE

    Azure Apache Hive Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-35386 1 CVE

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2023-35385 1 CVE

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.4
    MSRC-CVE-2023-35384 1 CVE

    Windows HTML Platforms Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-35382 1 CVE

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2023-35381 1 CVE

    Windows Fax Service Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-35380 1 CVE

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-35379 1 CVE

    Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2023-35378 1 CVE

    Windows Projected File System Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2023-35377 1 CVE

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2023-38254 1 CVE

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2023-35376 1 CVE

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2023-36914 1 CVE

    Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2023-36912 1 CVE

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2023-36911 1 CVE

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2023-36910 1 CVE

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2023-36909 1 CVE

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-36904 1 CVE

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-36903 1 CVE

    Windows System Assessment Tool Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2023-36889 1 CVE

    Windows Group Policy Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2023-36882 1 CVE

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-36865 1 CVE

    Microsoft Office Visio Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Medium max 6.5
    MSRC-CVE-2023-38157 1 CVE

    Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2022-29144 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 12, 2022
  • High max 6.5
    MSRC-CVE-2023-33140 1 CVE rev. 2

    Microsoft OneNote Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jun 13, 2023
  • Low max 5.7
    MSRC-CVE-2023-28261 1 CVE rev. 3

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Low. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Mar 14, 2023
  • High max 8.8
    MSRC-CVE-2023-35311 1 CVE 1 exploited rev. 2

    Microsoft Outlook Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Jul 11, 2023
  • Medium max 6.5
    MSRC-CVE-2023-38187 1 CVE

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 11, 2023
  • Low max 4.7
    MSRC-CVE-2023-35392 1 CVE

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Low. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 11, 2023
  • Medium max 4.3
    MSRC-CVE-2023-38173 1 CVE

    Microsoft Edge for Android Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 11, 2023
  • High max 6.5
    MSRC-CVE-2023-33151 1 CVE rev. 2

    Microsoft Outlook Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 11, 2023
  • High max 6.5
    MSRC-CVE-2023-24881 1 CVE rev. 2

    Microsoft Teams Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first May 9, 2023
  • High max 7.0
    MSRC-CVE-2023-21531 1 CVE rev. 2

    Azure Service Fabric Container Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 8.1
    MSRC-CVE-2022-38023 1 CVE rev. 5

    Netlogon RPC Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
    first Nov 8, 2022
  • High max 8.1
    MSRC-CVE-2023-33127 1 CVE rev. 2

    .NET and Visual Studio Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 11, 2023
  • High max 7.8
    MSRC-CVE-2023-36887 1 CVE

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jul 11, 2023