Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

10,146 results · Feed

  • High max 7.8
    MSRC-CVE-2026-96912 1 CVE rev. 2

    Windows Client License Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.8
    MSRC-CVE-2026-88147 1 CVE rev. 2

    Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 8.8
    MSRC-CVE-2026-70068 1 CVE rev. 2

    Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 9.8
    MSRC-CVE-2026-85806 1 CVE rev. 3

    Network Policy Server (NPS) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • Critical max 6.1
    MSRC-CVE-2026-55946 1 CVE rev. 2

    Microsoft Copilot Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

    first Sep 17, 2026
  • High max 7.5

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 8.8

    Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited. Customer action: Required.

  • Low max 4.3

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Low. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 5.5
    MSRC-CVE-2026-70277 1 CVE rev. 2

    Windows Fast FAT File System Driver Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.8
    MSRC-CVE-2026-96225 1 CVE rev. 3

    .NET Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 8.8
    MSRC-CVE-2026-70007 1 CVE rev. 3

    .NET Framework Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.3
    MSRC-CVE-2026-70161 1 CVE rev. 3

    .NET Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.8
    MSRC-CVE-2026-69284 1 CVE rev. 2

    Windows DCOM Server Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.0
    MSRC-CVE-2026-69473 1 CVE rev. 2

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-70338 1 CVE rev. 5

    Microsoft PowerShell Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 7.8
    MSRC-CVE-2026-68877 1 CVE rev. 3

    Windows Storage Spaces Controller Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 8.1
    MSRC-CVE-2026-88097 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 18, 2026
  • High max 8.0
    MSRC-CVE-2026-68894 1 CVE rev. 6

    Windows Error Reporting Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 8.8

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.4

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited. Customer action: Required.

  • High max 8.1

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • Medium max 4.3

    Microsoft Edge for Android Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Moderate. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • Medium max 5.4
    MSRC-CVE-2026-88090 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 8.8

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 8.8

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited. Customer action: Required.

  • High max 8.8
    MSRC-CVE-2026-96951 1 CVE 1 exploited rev. 2

    Windows Shell Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

    first Oct 13, 2026
  • High max 8.1
    MSRC-CVE-2026-88094 1 CVE rev. 2

    Azure Storage Library Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 8.0
    MSRC-CVE-2026-96844 1 CVE rev. 2

    Microsoft Bluetooth Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.8
    MSRC-CVE-2026-83840 1 CVE rev. 2

    Windows Error Reporting Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 8.8
    MSRC-CVE-2026-83716 1 CVE rev. 2

    Windows Hyper-V Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.8
    MSRC-CVE-2026-96244 1 CVE rev. 2

    Windows Internal System User Profile Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.2
    MSRC-CVE-2026-85798 1 CVE rev. 2

    Windows Distributed File System (DFS) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 6.5
    MSRC-CVE-2026-84007 1 CVE rev. 2

    Remote Desktop Gateway Service Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Oct 13, 2026
  • High max 6.8
    MSRC-CVE-2026-83776 1 CVE rev. 2

    Windows Bluetooth Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.8
    MSRC-CVE-2026-70177 1 CVE rev. 2

    Microsoft Windows Search Component Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 7.5
    MSRC-CVE-2026-105728 1 CVE rev. 2

    Dynamics Business Central Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 13, 2026
  • High max 8.8
    MSRC-CVE-2026-96199 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 16, 2026
  • High max 8.8
    MSRC-CVE-2026-96198 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 16, 2026
  • High max 8.8
    MSRC-CVE-2026-85898 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 16, 2026
  • High max 8.8
    MSRC-CVE-2026-85897 1 CVE rev. 2

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Oct 16, 2026