Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

10,146 results · Feed

  • Medium max 3.1
    MSRC-CVE-2021-43220 1 CVE rev. 2

    Microsoft Edge for iOS Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 19, 2021
  • High max 7.8
    MSRC-CVE-2021-42292 1 CVE 1 exploited rev. 2

    Microsoft Excel Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    Microsoft
    first Nov 9, 2021
  • High max 7.8
    MSRC-CVE-2021-40442 1 CVE rev. 2

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 9, 2021
  • High max 7.8
    MSRC-CVE-2021-41377 1 CVE rev. 2

    Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 9, 2021
  • Critical max 8.8
    MSRC-CVE-2021-42316 1 CVE rev. 2

    Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 9, 2021
  • Critical max 9.0
    MSRC-CVE-2021-26443 1 CVE rev. 2

    Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 9, 2021
  • High max 6.5
    MSRC-CVE-2021-41349 1 CVE rev. 2

    Microsoft Exchange Server Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
    first Nov 9, 2021
  • High max 3.3
    MSRC-CVE-2021-26444 1 CVE

    Azure RTOS Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 3.3
    MSRC-CVE-2021-42323 1 CVE

    Azure RTOS Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2021-42278 1 CVE 1 exploited

    Active Directory Domain Services Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2021-41356 1 CVE

    Windows Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2021-42305 1 CVE

    Microsoft Exchange Server Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 7.8
    MSRC-CVE-2021-42298 1 CVE

    Microsoft Defender Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2021-42296 1 CVE

    Microsoft Word Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.7
    MSRC-CVE-2021-42288 1 CVE

    Windows Hello Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2021-42287 1 CVE 1 exploited

    Active Directory Domain Services Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2021-42286 1 CVE

    Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2021-42285 1 CVE

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2021-42283 1 CVE

    NTFS Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2021-42282 1 CVE

    Active Directory Domain Services Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2021-42277 1 CVE

    Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 2.3
    MSRC-CVE-2021-41376 1 CVE

    Azure Sphere Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 4.4
    MSRC-CVE-2021-41375 1 CVE

    Azure Sphere Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.7
    MSRC-CVE-2021-41374 1 CVE

    Azure Sphere Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2021-41373 1 CVE

    FSLogix Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2021-41370 1 CVE

    NTFS Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 4.3
    MSRC-CVE-2021-41351 1 CVE

    Microsoft Edge (Chrome based) Spoofing on IE Mode

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 4.4
    MSRC-CVE-2021-38631 1 CVE

    Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • Critical max 8.8
    MSRC-CVE-2021-38666 1 CVE

    Remote Desktop Client Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 7.4
    MSRC-CVE-2021-38665 1 CVE

    Remote Desktop Protocol Client Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2021-43209 1 CVE

    3D Viewer Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2021-43208 1 CVE

    3D Viewer Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2021-42322 1 CVE

    Visual Studio Code Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 4.7
    MSRC-CVE-2021-42319 1 CVE

    Visual Studio Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.6
    MSRC-CVE-2021-42304 1 CVE

    Azure RTOS Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.6
    MSRC-CVE-2021-42303 1 CVE

    Azure RTOS Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.6
    MSRC-CVE-2021-42302 1 CVE

    Azure RTOS Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 3.3
    MSRC-CVE-2021-42301 1 CVE

    Azure RTOS Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.0
    MSRC-CVE-2021-42300 1 CVE

    Azure Sphere Tampering Vulnerability

    Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2021-42280 1 CVE

    Windows Feedback Hub Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft