Microsoft Security Response Center

10,146 results · Feed

• High max 8.8
  MSRC-CVE-2026-88196 1 CVE rev. 2

  Microsoft Office Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-88197 1 CVE rev. 2

  Microsoft Office Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 9.8
  MSRC-CVE-2026-88178 1 CVE rev. 2

  Microsoft Office PowerPoint Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 6.5
  MSRC-CVE-2026-88169 1 CVE rev. 2

  Microsoft Office Word Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 6.5
  MSRC-CVE-2026-88167 1 CVE rev. 2

  Microsoft Office Word Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 6.5
  MSRC-CVE-2026-88175 1 CVE rev. 2

  Microsoft Office Excel Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 9.8
  MSRC-CVE-2026-88156 1 CVE rev. 2

  Microsoft Office Outlook Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-88145 1 CVE rev. 2

  Microsoft Office Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-88150 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-83891 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-70301 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-70302 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-70287 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 6.5
  MSRC-CVE-2026-70263 1 CVE rev. 2

  Microsoft Office Word Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 8.1
  MSRC-CVE-2026-70269 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 6.5
  MSRC-CVE-2026-70206 1 CVE rev. 2

  Microsoft Office Word Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-70220 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-70268 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 9.1
  MSRC-CVE-2026-70188 1 CVE rev. 2

  ASP.NET Core Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 7.3
  MSRC-CVE-2026-70190 1 CVE rev. 2

  .NET Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-70179 1 CVE rev. 2

  ASP.NET Core Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 6.7
  MSRC-CVE-2026-70165 1 CVE rev. 2

  .NET Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-70159 1 CVE rev. 2

  ASP.NET Core Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-70174 1 CVE rev. 2

  .NET Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-87697 1 CVE rev. 2

  .NET Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-69651 1 CVE rev. 2

  .NET Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 5.9
  MSRC-CVE-2026-66822 1 CVE rev. 2

  .NET Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 9.8
  MSRC-CVE-2026-70096 1 CVE rev. 2

  Windows Rich Text Edit Control Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-105718 1 CVE rev. 2

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-105715 1 CVE rev. 2

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 7.5
  MSRC-CVE-2026-105599 1 CVE rev. 2

  Microsoft Office PowerPoint Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• High max 8.8
  MSRC-CVE-2026-102858 1 CVE rev. 2

  Microsoft Office OneNote Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Oct 13, 2026
• Critical max 8.8
  MSRC-CVE-2026-32157 1 CVE rev. 3

  Remote Desktop Client Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026

  first Apr 14, 2026
• High max 5.9
  MSRC-CVE-2026-109461 1 CVE

  Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 15, 2026
• Critical max 8.8
  MSRC-CVE-2026-81352 1 CVE rev. 2

  Web Media Extensions Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 14, 2026

  first Sep 8, 2026
• High max 6.7
  MSRC-CVE-2026-32176 1 CVE rev. 2

  SQL Server Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 14, 2026

  first Apr 14, 2026
• Critical max 8.7
  MSRC-CVE-2026-83943 1 CVE rev. 2

  Azure API Center Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited. Customer action: Not required.

  Microsoft
  Oct 14, 2026

  first Oct 8, 2026
• High max 6.8
  MSRC-CVE-2026-102188 1 CVE rev. 2

  Windows Storage Port Driver Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Oct 14, 2026

  first Oct 13, 2026
• High max 7.0
  MSRC-CVE-2026-84019 1 CVE rev. 2

  Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Oct 14, 2026

  first Oct 13, 2026
• High max 7.8
  MSRC-CVE-2026-70245 1 CVE rev. 2

  Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Oct 14, 2026

  first Oct 13, 2026