Microsoft Security Response Center

10,146 results · Feed

• High max 8.8
  MSRC-CVE-2026-85890 1 CVE rev. 2

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 16, 2026
• High max 8.8
  MSRC-CVE-2026-83831 1 CVE rev. 2

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 16, 2026
• Critical max 8.8
  MSRC-CVE-2026-96202 1 CVE rev. 2

  Windows Raw Image Extension Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 16, 2026
• High max 7.8
  MSRC-CVE-2026-69926 1 CVE rev. 2

  Desktop Window Manager Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-69923 1 CVE rev. 2

  Windows AI Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-70054 1 CVE rev. 2

  Windows NetBIOS Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 13, 2026
• High max 9.8
  MSRC-CVE-2026-83519 1 CVE rev. 2

  Windows Error Reporting Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 26, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-102870 1 CVE rev. 2

  ASP.NET Core Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 25, 2026

  first Oct 13, 2026
• High max 8.1
  MSRC-CVE-2026-70197 1 CVE rev. 5

  .NET and Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 25, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-114148 1 CVE

  ASP.NET Core Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 25, 2026
• High max 8.8
  MSRC-CVE-2026-83862 1 CVE rev. 2

  Windows Network Load Balancing Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 23, 2026

  first Oct 13, 2026
• High max 6.5
  MSRC-CVE-2026-96303 1 CVE rev. 2

  Microsoft PowerShell Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 22, 2026

  first Oct 13, 2026
• Critical max 10.0
  MSRC-CVE-2026-110063 1 CVE

  VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  Microsoft
  Oct 22, 2026
• Critical max 10.0
  MSRC-CVE-2026-83938 1 CVE

  Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  Microsoft
  Oct 22, 2026
• Critical max 7.5
  MSRC-CVE-2026-96185 1 CVE

  Microsoft Exchange Online Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  Microsoft
  Oct 22, 2026
• Critical max 10.0
  MSRC-CVE-2026-97785 1 CVE

  AAD App Proxy Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  Microsoft
  Oct 22, 2026
• Critical max 7.7
  MSRC-CVE-2026-108456 1 CVE

  Azure AI Foundry Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  Microsoft
  Oct 22, 2026
• Critical max 9.1
  MSRC-CVE-2026-105014 1 CVE

  Azure Pipelines Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  Microsoft
  Oct 22, 2026
• High max 7.0
  MSRC-CVE-2026-85870 1 CVE rev. 3

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 21, 2026

  first Oct 13, 2026
• High max 7.0
  MSRC-CVE-2026-85868 1 CVE rev. 3

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 21, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-61359 1 CVE rev. 4

  Windows Storage Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 21, 2026

  first Aug 11, 2026
• High max 6.7
  MSRC-CVE-2026-69902 1 CVE rev. 2

  Windows NTFS Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 21, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-83709 1 CVE rev. 2

  Windows NTLM Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 21, 2026

  first Oct 13, 2026
• High max 8.1
  MSRC-CVE-2026-97783 1 CVE rev. 2

  Microsoft Office SharePoint Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 21, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-102204 1 CVE rev. 2

  Windows Subsystem for Linux Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 20, 2026

  first Oct 13, 2026
• High max 9.8
  MSRC-CVE-2026-83782 1 CVE rev. 2

  Windows Shell Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 20, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-62913 1 CVE rev. 4

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 20, 2026

  first Aug 11, 2026
• High max 7.0
  MSRC-CVE-2026-83839 1 CVE rev. 2

  Windows Hyper-V Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 20, 2026

  first Oct 13, 2026
• High max 5.5
  MSRC-CVE-2026-70074 1 CVE rev. 2

  Windows DNS Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 20, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-96913 1 CVE rev. 2

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 20, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-70337 1 CVE rev. 6

  Microsoft PowerShell Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 20, 2026

  first Aug 11, 2026
• High max 5.3
  MSRC-CVE-2026-80092 1 CVE rev. 2

  Microsoft Identity Web Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 19, 2026

  first Oct 15, 2026
• High max 7.5
  MSRC-CVE-2026-96237 1 CVE rev. 2

  .NET Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• Critical max 7.4
  MSRC-CVE-2026-96222 1 CVE rev. 2

  Active Directory Federation Services (AD FS) Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-70181 1 CVE rev. 2

  ASP.NET Core Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-70186 1 CVE rev. 2

  ASP.NET Core Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-103572 1 CVE rev. 2

  Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-109468 1 CVE rev. 2

  ASP.NET Core Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 15, 2026
• High max 5.9
  MSRC-CVE-2026-70162 1 CVE rev. 3

  .NET Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 5.9
  MSRC-CVE-2026-85790 1 CVE rev. 3

  Microsoft QUIC Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026