Microsoft Security Response Center

10,146 results · Feed

• High max 7.8
  MSRC-CVE-2023-33148 1 CVE

  Microsoft Office Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 11, 2023
• High max 7.8
  MSRC-CVE-2023-21756 1 CVE

  Windows Win32k Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 11, 2023
• High max 5.4
  MSRC-CVE-2023-24896 1 CVE rev. 2

  Dynamics 365 Finance Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jul 11, 2023

  first Jun 13, 2023
• High max 7.8
  MSRC-CVE-2022-41089 1 CVE rev. 4

  .NET Framework Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 30, 2023

  first Dec 13, 2022
• High max 7.8
  MSRC-CVE-2023-21772 1 CVE rev. 2

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 30, 2023

  first Jan 10, 2023
• High max 7.8
  MSRC-CVE-2023-21808 1 CVE rev. 5

  .NET and Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 30, 2023

  first Feb 14, 2023
• High max 7.3
  MSRC-CVE-2023-33128 1 CVE rev. 2

  .NET and Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 29, 2023

  first Jun 13, 2023
• High max 7.3
  MSRC-CVE-2023-33126 1 CVE rev. 2

  .NET and Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 29, 2023

  first Jun 13, 2023
• High max 6.5
  MSRC-CVE-2023-32032 1 CVE rev. 2

  .NET and Visual Studio Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 29, 2023

  first Jun 13, 2023
• High max 7.5
  MSRC-CVE-2023-29331 1 CVE rev. 2

  .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 29, 2023

  first Jun 13, 2023
• High max 7.8
  MSRC-CVE-2023-24895 1 CVE rev. 2

  .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 29, 2023

  first Jun 13, 2023
• High max 7.8
  MSRC-CVE-2023-24897 1 CVE rev. 2

  .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 29, 2023

  first Jun 13, 2023
• High max 8.2
  MSRC-CVE-2023-23383 1 CVE rev. 4

  Service Fabric Explorer Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 29, 2023

  first Mar 14, 2023
• High max 7.5
  MSRC-CVE-2023-33141 1 CVE rev. 3

  Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 22, 2023

  first Jun 13, 2023
• High max 6.5
  MSRC-CVE-2023-33142 1 CVE rev. 2

  Microsoft SharePoint Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2023

  first Jun 13, 2023
• High max 6.3
  MSRC-CVE-2023-33132 1 CVE rev. 2

  Microsoft SharePoint Server Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2023

  first Jun 13, 2023
• High max 7.3
  MSRC-CVE-2023-33130 1 CVE rev. 2

  Microsoft SharePoint Server Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2023

  first Jun 13, 2023
• High max 6.5
  MSRC-CVE-2023-33129 1 CVE rev. 2

  Microsoft SharePoint Server Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2023

  first Jun 13, 2023
• Critical max 9.8
  MSRC-CVE-2023-29357 1 CVE 1 exploited rev. 2

  Microsoft SharePoint Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jun 19, 2023

  first Jun 13, 2023
• Critical max 7.8
  MSRC-CVE-2023-23416 1 CVE rev. 2

  Windows Cryptographic Services Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jun 19, 2023

  first Mar 14, 2023
• High max 7.5
  MSRC-CVE-2023-24856 1 CVE rev. 2

  Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 19, 2023

  first Mar 14, 2023
• Low max 3.7
  MSRC-CVE-2023-28301 1 CVE rev. 2

  Microsoft Edge (Chromium-based) Tampering Vulnerability

  Impact: Tampering. Microsoft rating: Low. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 16, 2023

  first Apr 11, 2023
• High max 4.5
  MSRC-CVE-2023-23408 1 CVE rev. 2

  Azure Apache Ambari Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 16, 2023

  first Mar 14, 2023
• High max 5.4
  MSRC-CVE-2023-24921 1 CVE rev. 2

  Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 16, 2023

  first Mar 14, 2023
• High max 7.8
  MSRC-CVE-2023-29370 1 CVE rev. 2

  Windows Media Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 15, 2023

  first Jun 13, 2023
• Critical max 9.8
  MSRC-CVE-2023-29363 1 CVE rev. 2

  Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 15, 2023

  first Jun 13, 2023
• High max 8.1
  MSRC-CVE-2023-28288 1 CVE rev. 2

  Microsoft SharePoint Server Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 15, 2023

  first Apr 11, 2023
• Critical max 8.8
  MSRC-CVE-2021-34527 1 CVE 1 exploited rev. 11

  Windows Print Spooler Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  Jun 13, 2023

  first Jul 1, 2021
• High max 6.5
  MSRC-CVE-2023-33145 1 CVE

  Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• High max 6.6
  MSRC-CVE-2023-33144 1 CVE

  Visual Studio Code Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• High max 7.3
  MSRC-CVE-2023-33135 1 CVE

  .NET and Visual Studio Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• High max 7.8
  MSRC-CVE-2023-33133 1 CVE

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• High max 7.5
  MSRC-CVE-2023-32030 1 CVE

  .NET and Visual Studio Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• High max 7.6
  MSRC-CVE-2023-32022 1 CVE

  Windows Server Service Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• High max 7.1
  MSRC-CVE-2023-32021 1 CVE

  Windows SMB Witness Service Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• High max 5.6
  MSRC-CVE-2023-32020 1 CVE

  Windows DNS Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• High max 4.7
  MSRC-CVE-2023-32019 1 CVE

  Windows Kernel Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• High max 7.8
  MSRC-CVE-2023-32018 1 CVE

  Windows Hello Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• High max 7.8
  MSRC-CVE-2023-32017 1 CVE

  Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023
• High max 5.5
  MSRC-CVE-2023-32016 1 CVE

  Windows Installer Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 13, 2023