Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

10,146 results · Feed

  • Critical max 8.8

    Microsoft Office Visio Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Critical max 8.8

    Microsoft Office Visio Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 8.0

    SQL Server Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 8.8

    Visual Studio Code Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 9.6

    Visual Studio Code Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 8.8

    Visual Studio Code Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.4

    Visual Studio Code Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.8

    Visual Studio Code Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.0

    Visual Studio Code Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.7

    Visual Studio Code Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 6.8

    Visual Studio Code Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.0

    Windows Installer Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Critical max 8.1

    Microsoft Windows PDF Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Critical max 8.8

    HEVC Video Extensions Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 8.8

    Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  • High max 7.0

    Windows Security App Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • Medium

    ADV260001 Hardening changes for ReFS volumes on removable media

    Impact: Not a Vulnerability. Microsoft rating: Moderate. Not known to be exploited. Customer action: Required.

  • High max 8.8

    Microsoft Office Access Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 8.8

    Microsoft Office Access Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  • High max 7.8
    MSRC-CVE-2026-62737 1 CVE rev. 2

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Aug 11, 2026
  • Critical max 8.1
    MSRC-CVE-2026-72987 1 CVE rev. 2

    Windows DNS Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-69571 1 CVE rev. 2

    Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.0
    MSRC-CVE-2026-69385 1 CVE rev. 2

    Windows TCP/IP Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.0
    MSRC-CVE-2026-69693 1 CVE rev. 2

    Windows Device Association Broker Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • Critical max 8.8
    MSRC-CVE-2026-73006 1 CVE rev. 3

    DirectWrite Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-62876 1 CVE rev. 2

    Windows Win32k Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 8.8
    MSRC-CVE-2026-69598 1 CVE rev. 3

    Windows iSCSI Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.1
    MSRC-CVE-2026-69688 1 CVE rev. 2

    Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-69433 1 CVE rev. 2

    Windows Error Reporting Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.1
    MSRC-CVE-2026-69340 1 CVE rev. 2

    Windows NTFS Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-69324 1 CVE rev. 2

    Windows Performance Monitor Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 8.0
    MSRC-CVE-2026-69322 1 CVE rev. 2

    Microsoft Windows Search Component Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 8.0
    MSRC-CVE-2026-69301 1 CVE rev. 2

    Windows Win32k Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Sep 8, 2026
  • Critical max 9.8
    MSRC-CVE-2026-72982 1 CVE rev. 2

    Windows Netlogon Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • Critical max 9.8
    MSRC-CVE-2026-72979 1 CVE rev. 2

    Windows DHCP Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.1
    MSRC-CVE-2026-69337 1 CVE rev. 2

    Windows Registry Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.0
    MSRC-CVE-2026-69281 1 CVE rev. 2

    Windows License Manager Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 8.0
    MSRC-CVE-2026-68878 1 CVE rev. 2

    Windows Fast FAT Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-68875 1 CVE rev. 2

    Windows NTFS Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 8.8
    MSRC-CVE-2026-62744 1 CVE rev. 2

    Microsoft Windows Media Foundation Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026