Microsoft Security Response Center

10,146 results · Feed

• High max 8.1
  MSRC-CVE-2026-70013 1 CVE rev. 2

  Windows iSCSI Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-70031 1 CVE rev. 2

  Windows iSCSI Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-87716 1 CVE rev. 2

  Windows Storage Spaces Controller Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 8.0
  MSRC-CVE-2026-70213 1 CVE rev. 2

  Microsoft Power Apps Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 6.5
  MSRC-CVE-2026-70170 1 CVE rev. 2

  Windows Kernel Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-85822 1 CVE rev. 2

  Windows exFAT File System Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-85377 1 CVE rev. 2

  Windows CD-ROM Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.0
  MSRC-CVE-2026-83708 1 CVE rev. 2

  Windows Installer Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-83654 1 CVE rev. 2

  Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.0
  MSRC-CVE-2026-70056 1 CVE rev. 2

  Windows Update Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.0
  MSRC-CVE-2026-108465 1 CVE rev. 2

  Windows Update Delivery Optimization Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-69283 1 CVE rev. 2

  Windows CD-ROM Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-81396 1 CVE rev. 3

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-78524 1 CVE rev. 4

  Microsoft Office Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-65775 1 CVE rev. 5

  Windows Win32k Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Aug 11, 2026
• High max 7.8
  MSRC-CVE-2026-68798 1 CVE rev. 3

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Aug 11, 2026
• High max 7.8
  MSRC-CVE-2026-59127 1 CVE rev. 4

  Windows Installer Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Aug 11, 2026
• High max 7.5
  MSRC-CVE-2026-50696 1 CVE rev. 6

  Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-83518 1 CVE rev. 2

  RPC Runtime Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-108471 1 CVE rev. 2

  Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• Critical max 7.5
  MSRC-CVE-2026-108131 1 CVE rev. 2

  Active Directory Federation Services (AD FS) Spoofing Vulnerability

  Impact: Spoofing. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-96044 1 CVE rev. 2

  Microsoft Office SharePoint Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 16, 2026

  first Oct 13, 2026
• High max 6.5
  MSRC-CVE-2026-108455 1 CVE rev. 2

  Microsoft Office PowerPoint Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• High max 6.5
  MSRC-CVE-2026-108454 1 CVE rev. 2

  Microsoft Office PowerPoint Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• High max 6.5
  MSRC-CVE-2026-108453 1 CVE rev. 2

  Microsoft Office PowerPoint Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• High max 8.8
  MSRC-CVE-2026-108452 1 CVE rev. 2

  Microsoft Office SharePoint Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• High max 8.8
  MSRC-CVE-2026-108451 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• High max 8.8
  MSRC-CVE-2026-108450 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• High max 8.8
  MSRC-CVE-2026-108449 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• Critical max 7.5
  MSRC-CVE-2026-108448 1 CVE rev. 2

  Microsoft Office Outlook Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• High max 8.8
  MSRC-CVE-2026-108446 1 CVE rev. 2

  Microsoft Office Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• High max 8.8
  MSRC-CVE-2026-108445 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• High max 8.8
  MSRC-CVE-2026-108444 1 CVE rev. 2

  Microsoft Office Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• High max 8.8
  MSRC-CVE-2026-108443 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• High max 8.8
  MSRC-CVE-2026-108442 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• High max 8.8
  MSRC-CVE-2026-108441 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• Critical max 8.8
  MSRC-CVE-2026-108440 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• Critical max 8.8
  MSRC-CVE-2026-108439 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• High max 6.5
  MSRC-CVE-2026-108438 1 CVE rev. 2

  Microsoft Office Word Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• High max 8.8
  MSRC-CVE-2026-108437 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026