Microsoft Security Response Center

10,146 results · Feed

• High max 7.8
  MSRC-CVE-2021-42276 1 CVE

  Microsoft Windows Media Foundation Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021
• High max 8.8
  MSRC-CVE-2021-42275 1 CVE

  Microsoft COM for Windows Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021
• High max 6.8
  MSRC-CVE-2021-42274 1 CVE

  Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021
• High max 5.5
  MSRC-CVE-2021-41379 1 CVE 1 exploited

  Windows Installer Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021
• High max 7.8
  MSRC-CVE-2021-41378 1 CVE

  Windows NTFS Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021
• High max 4.4
  MSRC-CVE-2021-41371 1 CVE

  Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021
• High max 6.1
  MSRC-CVE-2021-41368 1 CVE

  Microsoft Access Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021
• High max 7.8
  MSRC-CVE-2021-41367 1 CVE

  NTFS Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021
• High max 7.8
  MSRC-CVE-2021-41366 1 CVE

  Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021
• High max 7.8
  MSRC-CVE-2021-36957 1 CVE

  Windows Desktop Bridge Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Nov 9, 2021
• High max 8.1
  MSRC-CVE-2021-33781 1 CVE rev. 3

  Azure AD Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 12, 2021

  first Jul 13, 2021
• High max 6.5
  MSRC-CVE-2021-38624 1 CVE rev. 3

  Windows Key Storage Provider Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 12, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38671 1 CVE rev. 2

  Windows Print Spooler Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38667 1 CVE rev. 2

  Windows Print Spooler Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 6.1
  MSRC-CVE-2021-38657 1 CVE rev. 2

  Microsoft Office Graphics Component Information Disclosure Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38639 1 CVE rev. 2

  Win32k Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38638 1 CVE rev. 2

  Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 5.5
  MSRC-CVE-2021-38637 1 CVE rev. 2

  Windows Storage Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 5.5
  MSRC-CVE-2021-38636 1 CVE rev. 2

  Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 5.5
  MSRC-CVE-2021-38635 1 CVE rev. 2

  Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.1
  MSRC-CVE-2021-38634 1 CVE rev. 2

  Microsoft Windows Update Client Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38633 1 CVE rev. 2

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 5.7
  MSRC-CVE-2021-38632 1 CVE rev. 2

  Windows BitLocker Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38630 1 CVE rev. 2

  Windows Event Tracing Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 6.5
  MSRC-CVE-2021-38629 1 CVE rev. 2

  Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-38628 1 CVE rev. 2

  Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• Critical max 8.1
  MSRC-CVE-2021-26435 1 CVE rev. 2

  Windows Scripting Engine Memory Corruption Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-36975 1 CVE rev. 2

  Win32k Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-36974 1 CVE rev. 2

  Windows SMB Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-36973 1 CVE rev. 2

  Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 5.5
  MSRC-CVE-2021-36972 1 CVE rev. 2

  Windows SMB Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 5.5
  MSRC-CVE-2021-36969 1 CVE rev. 2

  Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 8.0
  MSRC-CVE-2021-36967 1 CVE rev. 2

  Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-36966 1 CVE rev. 2

  Windows Subsystem for Linux Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• Critical max 8.8
  MSRC-CVE-2021-36965 1 CVE rev. 2

  Windows WLAN AutoConfig Service Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-36964 1 CVE rev. 2

  Windows Event Tracing Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.8
  MSRC-CVE-2021-36963 1 CVE rev. 2

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 5.5
  MSRC-CVE-2021-36962 1 CVE rev. 2

  Windows Installer Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 5.5
  MSRC-CVE-2021-36961 1 CVE rev. 2

  Windows Installer Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021
• High max 7.5
  MSRC-CVE-2021-36960 1 CVE rev. 2

  Windows SMB Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 23, 2021

  first Sep 14, 2021