Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

10,146 results · Feed

  • High max 8.8
    MSRC-CVE-2026-69266 1 CVE rev. 2

    Windows DHCP Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.0
    MSRC-CVE-2026-69401 1 CVE rev. 2

    Audio Video Control Transport Protocol Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.0
    MSRC-CVE-2026-69498 1 CVE rev. 3

    Windows Win32k Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-62739 1 CVE rev. 2

    Windows HTTP.sys Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Aug 11, 2026
  • Critical max 9.8
    MSRC-CVE-2026-65791 1 CVE rev. 3

    Windows iSCSI Target Service Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Aug 11, 2026
  • High max 6.5
    MSRC-CVE-2026-63516 1 CVE rev. 3

    Microsoft SharePoint Server Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 7.8
    MSRC-CVE-2026-50353 1 CVE rev. 2

    DirectX Graphics Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • Critical max 9.8
    MSRC-CVE-2026-73009 1 CVE rev. 2

    Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 6.8
    MSRC-CVE-2026-72999 1 CVE rev. 2

    Windows USB Hub Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-69844 1 CVE rev. 2

    Windows Win32k Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-69265 1 CVE rev. 2

    Windows NTFS Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-71343 1 CVE rev. 2

    Windows Remote Access Connection Manager Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-62698 1 CVE rev. 2

    Microsoft Digest Authentication Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 7.0
    MSRC-CVE-2026-61927 1 CVE rev. 2

    Windows Bind Filter Driver Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Aug 11, 2026
  • Critical max 8.4
    MSRC-CVE-2026-54128 1 CVE rev. 3

    Windows DHCP Client Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.8
    MSRC-CVE-2026-50387 1 CVE rev. 4

    Windows GDI Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.5
    MSRC-CVE-2026-78446 1 CVE rev. 2

    Windows Distributed File System (DFS) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 8.1
    MSRC-CVE-2026-72936 1 CVE rev. 2

    Windows SMB Client Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • Critical max 7.8
    MSRC-CVE-2026-68804 1 CVE rev. 4

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 6.5
    MSRC-CVE-2026-69267 1 CVE rev. 2

    Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 8.8

    Microsoft Exchange Server Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  • High max 7.0
    MSRC-CVE-2026-70562 1 CVE rev. 2

    Windows Audio Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.0
    MSRC-CVE-2026-69605 1 CVE rev. 3

    Microsoft Install Service Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-62758 1 CVE rev. 2

    Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Aug 11, 2026
  • High max 6.8
    MSRC-CVE-2026-62699 1 CVE rev. 2

    Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 9.8
    MSRC-CVE-2026-69586 1 CVE rev. 2

    Microsoft Windows PDF Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-69328 1 CVE rev. 2

    Windows Storage Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 5.5
    MSRC-CVE-2026-69288 1 CVE rev. 2

    Windows GDI+ Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • Critical max 8.8
    MSRC-CVE-2026-69712 1 CVE rev. 2

    Windows Key Distribution Center Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 5.5
    MSRC-CVE-2026-69504 1 CVE rev. 2

    Windows NTFS Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.0
    MSRC-CVE-2026-61938 1 CVE rev. 3

    Windows Installer Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 7.8
    MSRC-CVE-2026-62722 1 CVE rev. 3

    Microsoft Brokering File System Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 7.8
    MSRC-CVE-2026-65787 1 CVE rev. 3

    Desktop Window Manager Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 7.8
    MSRC-CVE-2026-49800 1 CVE rev. 2

    Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Jul 14, 2026
  • High max 8.8
    MSRC-CVE-2026-69522 1 CVE rev. 3

    .NET and Visual Studio Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-69307 1 CVE rev. 2

    Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    first Sep 8, 2026
  • High max 7.8
    MSRC-CVE-2026-61930 1 CVE rev. 2

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    first Aug 11, 2026
  • High max 6.2
    MSRC-CVE-2026-57095 1 CVE rev. 2

    Win32k Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.5
    MSRC-CVE-2026-50414 1 CVE rev. 2

    Windows Media Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Jul 14, 2026
  • High max 7.8
    MSRC-CVE-2026-50400 1 CVE rev. 2

    Windows App Package Installer Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

    first Jul 14, 2026