Microsoft Security Response Center

10,146 results · Feed

• High max 7.8
  MSRC-CVE-2023-21566 1 CVE

  Visual Studio Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Feb 14, 2023
• High max 8.8
  MSRC-CVE-2023-21706 1 CVE

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Feb 14, 2023
• High max 7.8
  MSRC-CVE-2023-21704 1 CVE

  Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Feb 14, 2023
• High max 8.8
  MSRC-CVE-2023-21529 1 CVE 1 exploited

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Feb 14, 2023
• High max 8.8
  MSRC-CVE-2023-21684 1 CVE

  Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Feb 14, 2023
• High max 8.7
  MSRC-CVE-2023-21777 1 CVE

  Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Feb 14, 2023
• High max 7.5
  MSRC-CVE-2023-21553 1 CVE

  Azure DevOps Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Feb 14, 2023
• Medium max 8.3
  MSRC-CVE-2023-23374 1 CVE

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Feb 9, 2023
• Low max 4.3
  MSRC-CVE-2023-21794 1 CVE

  Microsoft Edge (Chromium-based) Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Low. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Feb 9, 2023
• High max 7.8
  MSRC-CVE-2022-44666 1 CVE rev. 2

  Windows Contacts Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Feb 7, 2023

  first Dec 13, 2022
• High max 6.3
  MSRC-CVE-2023-21725 1 CVE rev. 2

  Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Feb 6, 2023

  first Jan 10, 2023
• Low max 5.3
  MSRC-CVE-2023-21720 1 CVE

  Microsoft Edge (Chromium-based) Tampering Vulnerability

  Impact: Tampering. Microsoft rating: Low. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Feb 3, 2023
• High max 5.8
  MSRC-CVE-2022-41064 1 CVE rev. 6

  .NET Framework Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Feb 1, 2023

  first Nov 8, 2022
• Critical max 8.1
  MSRC-CVE-2023-21712 1 CVE rev. 2

  Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jan 27, 2023

  first Jan 10, 2023
• High max 7.5
  MSRC-CVE-2021-42291 1 CVE rev. 2

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 26, 2023

  first Nov 9, 2021
• High max 7.5
  MSRC-CVE-2023-21538 1 CVE rev. 2

  .NET Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited. Customer action: Required.

  Microsoft
  Jan 25, 2023

  first Jan 10, 2023
• High max 7.8
  MSRC-CVE-2022-44689 1 CVE rev. 2

  Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 24, 2023

  first Dec 13, 2022
• High max 7.0
  MSRC-CVE-2022-38014 1 CVE rev. 2

  Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 23, 2023

  first Nov 8, 2022
• High max 8.8
  MSRC-CVE-2023-21549 1 CVE rev. 3

  Windows SMB Witness Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 23, 2023

  first Jan 10, 2023
• High max 7.8
  MSRC-CVE-2023-21524 1 CVE rev. 3

  Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 23, 2023

  first Jan 10, 2023
• Medium max 6.5
  MSRC-CVE-2023-21719 1 CVE

  Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 19, 2023

  first Jan 10, 2023
• High max 8.3
  MSRC-CVE-2023-21795 1 CVE

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 17, 2023

  first Jan 10, 2023
• Medium max 8.3
  MSRC-CVE-2023-21775 1 CVE rev. 2

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 17, 2023

  first Jan 10, 2023
• High max 8.3
  MSRC-CVE-2023-21796 1 CVE rev. 2

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 17, 2023

  first Jan 10, 2023
• Critical max 7.8
  MSRC-CVE-2023-21561 1 CVE rev. 2

  Microsoft Cryptographic Services Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 17, 2023

  first Jan 10, 2023
• High max 7.5
  MSRC-CVE-2023-21547 1 CVE rev. 2

  Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 13, 2023

  first Jan 10, 2023
• High max 7.5
  MSRC-CVE-2023-21683 1 CVE rev. 2

  Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 12, 2023

  first Jan 10, 2023
• High max 7.8
  MSRC-CVE-2023-21790 1 CVE rev. 2

  3D Builder Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 11, 2023

  first Jan 10, 2023
• High max 7.8
  MSRC-CVE-2023-21789 1 CVE rev. 2

  3D Builder Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 11, 2023

  first Jan 10, 2023
• High max 7.8
  MSRC-CVE-2023-21788 1 CVE rev. 2

  3D Builder Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 11, 2023

  first Jan 10, 2023
• High max 7.8
  MSRC-CVE-2023-21787 1 CVE rev. 2

  3D Builder Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 11, 2023

  first Jan 10, 2023
• High max 7.8
  MSRC-CVE-2023-21785 1 CVE rev. 2

  3D Builder Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 11, 2023

  first Jan 10, 2023
• High max 7.8
  MSRC-CVE-2023-21783 1 CVE rev. 2

  3D Builder Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 11, 2023

  first Jan 10, 2023
• High max 7.8
  MSRC-CVE-2023-21793 1 CVE rev. 2

  3D Builder Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 11, 2023

  first Jan 10, 2023
• High max 7.8
  MSRC-CVE-2023-21791 1 CVE rev. 2

  3D Builder Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 11, 2023

  first Jan 10, 2023
• High max 7.8
  MSRC-CVE-2023-21786 1 CVE rev. 2

  3D Builder Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 11, 2023

  first Jan 10, 2023
• High max 7.8
  MSRC-CVE-2023-21784 1 CVE rev. 2

  3D Builder Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 11, 2023

  first Jan 10, 2023
• High max 7.8
  MSRC-CVE-2023-21782 1 CVE rev. 2

  3D Builder Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 11, 2023

  first Jan 10, 2023
• High max 7.8
  MSRC-CVE-2023-21781 1 CVE rev. 2

  3D Builder Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 11, 2023

  first Jan 10, 2023
• High max 7.8
  MSRC-CVE-2023-21792 1 CVE

  3D Builder Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jan 10, 2023