Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

10,146 results · Feed

  • Medium max 6.1
    MSRC-CVE-2023-28286 1 CVE

    Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Mar 14, 2023
  • High max 7.0
    MSRC-CVE-2023-21739 1 CVE rev. 2

    Windows Bluetooth Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Jan 10, 2023
  • High max 7.8
    MSRC-CVE-2022-47211 1 CVE rev. 3

    Microsoft Office Graphics Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Dec 13, 2022
  • Critical max 8.1
    MSRC-CVE-2022-37958 1 CVE rev. 3

    SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Sep 13, 2022
  • Critical max 9.8
    MSRC-CVE-2023-23397 1 CVE 1 exploited rev. 4

    Microsoft Outlook Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Mar 14, 2023
  • High max 6.3
    MSRC-CVE-2023-23389 1 CVE rev. 2

    Microsoft Defender Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Mar 14, 2023
  • High max 4.6
    MSRC-CVE-2022-41099 1 CVE rev. 6

    BitLocker Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 8, 2022
  • Critical max 8.8
    MSRC-CVE-2022-23257 1 CVE rev. 2

    Windows Hyper-V Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Apr 12, 2022
  • High max 6.5
    MSRC-CVE-2023-24890 1 CVE

    Microsoft OneDrive for iOS Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2023-24913 1 CVE

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2023-24871 1 CVE

    Windows Bluetooth Service Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2023-24870 1 CVE

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-24910 1 CVE

    Windows Graphics Component Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.1
    MSRC-CVE-2023-24869 1 CVE

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.1
    MSRC-CVE-2023-24908 1 CVE

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2023-24868 1 CVE

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2023-24906 1 CVE

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2023-24866 1 CVE

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2023-24865 1 CVE

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2023-24864 1 CVE

    Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2023-24863 1 CVE

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2023-24862 1 CVE

    Windows Secure Channel Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2023-24861 1 CVE

    Windows Graphics Component Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2023-24859 1 CVE

    Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2023-24857 1 CVE

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-23423 1 CVE

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-23422 1 CVE

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-23421 1 CVE

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-23420 1 CVE

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-23419 1 CVE

    Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-23418 1 CVE

    Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-23417 1 CVE

    Windows Partition Management Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 9.8
    MSRC-CVE-2023-23415 1 CVE

    Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.1
    MSRC-CVE-2023-23414 1 CVE

    Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-23412 1 CVE

    Windows Accounts Picture Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 6.5
    MSRC-CVE-2023-23411 1 CVE

    Windows Hyper-V Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2023-23410 1 CVE

    Windows HTTP.sys Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2023-23409 1 CVE

    Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.1
    MSRC-CVE-2023-23407 1 CVE

    Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2023-23406 1 CVE

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft