Microsoft Security Response Center

10,146 results · Feed

• High max 7.8
  MSRC-CVE-2022-30167 1 CVE

  AV1 Video Extension Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• Critical max 8.5
  MSRC-CVE-2022-30163 1 CVE

  Windows Hyper-V Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• High max 5.5
  MSRC-CVE-2022-30162 1 CVE

  Windows Kernel Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• High max 8.8
  MSRC-CVE-2022-30161 1 CVE

  Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• High max 7.8
  MSRC-CVE-2022-30160 1 CVE

  Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• High max 5.5
  MSRC-CVE-2022-30159 1 CVE

  Microsoft Office Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• High max 8.8
  MSRC-CVE-2022-30158 1 CVE

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• High max 5.5
  MSRC-CVE-2022-30155 1 CVE

  Windows Kernel Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• High max 5.3
  MSRC-CVE-2022-30154 1 CVE

  Microsoft File Server Shadow Copy Agent Service (RVSS) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• High max 8.8
  MSRC-CVE-2022-30153 1 CVE

  Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• High max 7.5
  MSRC-CVE-2022-30152 1 CVE

  Windows Network Address Translation (NAT) Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• High max 7.0
  MSRC-CVE-2022-30151 1 CVE

  Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• High max 7.5
  MSRC-CVE-2022-30149 1 CVE

  Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• High max 5.5
  MSRC-CVE-2022-30148 1 CVE

  Windows Desired State Configuration (DSC) Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• High max 7.5
  MSRC-CVE-2022-30143 1 CVE

  Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• High max 8.1
  MSRC-CVE-2022-30141 1 CVE

  Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• Critical max 9.8
  MSRC-CVE-2022-30136 1 CVE

  Windows Network File System Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• High max 7.8
  MSRC-CVE-2022-30135 1 CVE

  Windows Media Center Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• High max 7.8
  MSRC-CVE-2022-30132 1 CVE

  Windows Container Manager Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• High max 7.8
  MSRC-CVE-2022-29111 1 CVE

  HEVC Video Extensions Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• High max 7.8
  MSRC-CVE-2022-22018 1 CVE

  HEVC Video Extensions Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• High max 7.8
  MSRC-CVE-2022-29119 1 CVE

  HEVC Video Extensions Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022
• High max 7.8
  MSRC-CVE-2022-30190 1 CVE 1 exploited rev. 3

  Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

  Microsoft
  Jun 14, 2022

  first May 10, 2022
• High max 7.5
  MSRC-CVE-2022-23267 1 CVE rev. 3

  .NET and Visual Studio Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 14, 2022

  first May 10, 2022
• Medium max 8.3
  MSRC-CVE-2022-22021 1 CVE

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Jun 9, 2022

  first Jun 14, 2022
• High max 7.8
  MSRC-CVE-2022-29104 1 CVE rev. 2

  Windows Print Spooler Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Jun 3, 2022

  first May 10, 2022
• Low max 4.3
  MSRC-CVE-2022-26905 1 CVE

  Microsoft Edge (Chromium-based) Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Low. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  May 31, 2022

  first May 10, 2022
• Medium max 8.3
  MSRC-CVE-2022-30127 1 CVE

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  May 31, 2022

  first May 10, 2022
• Medium max 8.3
  MSRC-CVE-2022-30128 1 CVE

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  May 31, 2022

  first May 10, 2022
• High max 7.8
  MSRC-CVE-2022-29105 1 CVE rev. 2

  Microsoft Windows Media Foundation Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  May 23, 2022

  first May 10, 2022
• High max 6.5
  MSRC-CVE-2022-24522 1 CVE rev. 2

  Skype Extension for Chrome Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  May 16, 2022

  first Mar 8, 2022
• High max 7.8
  MSRC-CVE-2022-30138 1 CVE rev. 2

  Windows Print Spooler Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  May 13, 2022

  first May 10, 2022
• High max 7.5
  MSRC-CVE-2022-26915 1 CVE rev. 2

  Windows Secure Channel Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  May 11, 2022

  first Apr 12, 2022
• High max 8.8
  MSRC-CVE-2022-30129 1 CVE

  Visual Studio Code Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  May 10, 2022
• High max 6.5
  MSRC-CVE-2022-29123 1 CVE

  Windows Clustered Shared Volume Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  May 10, 2022
• High max 6.5
  MSRC-CVE-2022-29122 1 CVE

  Windows Clustered Shared Volume Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  May 10, 2022
• High max 6.5
  MSRC-CVE-2022-29121 1 CVE

  Windows WLAN AutoConfig Service Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  May 10, 2022
• High max 6.5
  MSRC-CVE-2022-29120 1 CVE

  Windows Clustered Shared Volume Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  May 10, 2022
• High max 4.7
  MSRC-CVE-2022-29116 1 CVE

  Windows Kernel Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  May 10, 2022
• High max 8.8
  MSRC-CVE-2022-22019 1 CVE

  Remote Procedure Call Runtime Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  May 10, 2022