Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

10,146 results · Feed

  • Critical max 7.8
    MSRC-CVE-2026-88074 1 CVE rev. 3

    Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • Medium max 6.5

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.8
    MSRC-CVE-2026-56156 1 CVE rev. 2

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 5.5
    MSRC-CVE-2026-55124 1 CVE rev. 2

    Microsoft Word Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • Critical max 8.4
    MSRC-CVE-2026-50301 1 CVE rev. 2

    Microsoft Office Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.8
    MSRC-CVE-2026-50351 1 CVE rev. 4

    Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 5.5
    MSRC-CVE-2026-69406 1 CVE rev. 3

    Windows Kernel Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.4

    Visual Studio Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.8
    MSRC-CVE-2026-97798 1 CVE rev. 2

    Windows Error Reporting Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 5.5
    MSRC-CVE-2026-96860 1 CVE rev. 2

    Windows USB Print Driver Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.8
    MSRC-CVE-2026-85373 1 CVE rev. 2

    Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.8
    MSRC-CVE-2026-85366 1 CVE rev. 2

    Windows Installer Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 9.0
    MSRC-CVE-2026-105008 1 CVE rev. 3

    Windows Schannel Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 5.3
    MSRC-CVE-2026-96234 1 CVE rev. 4

    .NET Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 8.8
    MSRC-CVE-2026-83851 1 CVE rev. 3

    Windows Partition Management Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.8
    MSRC-CVE-2026-70125 1 CVE rev. 4

    Microsoft Office Outlook Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 23, 2026
  • Medium max 4.4
    MSRC-CVE-2026-69446 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Moderate. Not known to be exploited. Customer action: Required.

    first Aug 28, 2026
  • High max 6.8
    MSRC-CVE-2026-97782 1 CVE rev. 2

    Microsoft Office SharePoint Tampering Vulnerability

    Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • Medium max 4.3
    MSRC-CVE-2026-88078 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 27, 2026
  • High max 6.7
    MSRC-CVE-2026-96938 1 CVE rev. 2

    Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • Critical max 8.8
    MSRC-CVE-2026-70250 1 CVE rev. 2

    Windows DHCP Client Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.0
    MSRC-CVE-2026-87715 1 CVE rev. 2

    Windows Installer Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 5.5
    MSRC-CVE-2026-85935 1 CVE rev. 2

    Windows USB Driver Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.8
    MSRC-CVE-2026-85368 1 CVE rev. 2

    Windows TCP/IP Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.0
    MSRC-CVE-2026-85355 1 CVE rev. 2

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 8.8
    MSRC-CVE-2026-69521 1 CVE rev. 2

    Windows iSCSI Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.8
    MSRC-CVE-2026-83983 1 CVE rev. 2

    Windows Biometric Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-83980 1 CVE rev. 2

    Windows Biometric Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • Critical max 8.8
    MSRC-CVE-2026-73013 1 CVE rev. 2

    Windows Imaging Component Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • Critical max 8.8
    MSRC-CVE-2026-69499 1 CVE rev. 2

    Windows Imaging Component Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 5.5
    MSRC-CVE-2026-77491 1 CVE rev. 2

    Windows GDI Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-69576 1 CVE rev. 2

    Graphic Fonts Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 5.5
    MSRC-CVE-2026-69609 1 CVE rev. 2

    Win32k Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 6.8
    MSRC-CVE-2026-69566 1 CVE rev. 3

    Windows NTFS Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.1
    MSRC-CVE-2026-69451 1 CVE rev. 4

    Windows Management Instrumentation Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 8.0
    MSRC-CVE-2026-40400 1 CVE rev. 6

    Windows PowerShell Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.8
    MSRC-CVE-2026-62877 1 CVE rev. 2

    Windows Win32k Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 5.5
    MSRC-CVE-2026-62740 1 CVE rev. 2

    Windows Imaging Component Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 5.5
    MSRC-CVE-2026-57084 1 CVE rev. 2

    Windows File Explorer Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 5.5
    MSRC-CVE-2026-57083 1 CVE rev. 2

    Windows Media Photo Codec Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Jul 14, 2026