Microsoft Security Response Center

10,146 results · Feed

• High max 7.8
  MSRC-CVE-2026-50332 1 CVE rev. 2

  Windows Kernel Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 29, 2026

  first Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-50357 1 CVE rev. 3

  Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 29, 2026

  first Jul 14, 2026
• Critical max 7.5
  MSRC-CVE-2026-81355 1 CVE rev. 4

  Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 28, 2026

  first Sep 8, 2026
• Critical max 8.2
  MSRC-CVE-2026-85921 1 CVE rev. 3

  Windows Secure Kernel Mode Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 27, 2026

  first Sep 14, 2026
• High max 7.5
  MSRC-CVE-2026-100208 1 CVE rev. 2

  Microsoft Office Outlook Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 25, 2026
• High max 7.0
  MSRC-CVE-2026-69806 1 CVE rev. 2

  .NET Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 25, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-71328 1 CVE rev. 2

  .NET and Visual Studio Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 25, 2026

  first Sep 8, 2026
• High max 5.9
  MSRC-CVE-2026-69304 1 CVE rev. 2

  ASP.NET Core Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 25, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-69439 1 CVE rev. 2

  .NET and Visual Studio Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 25, 2026

  first Sep 8, 2026
• Critical max 8.4
  MSRC-CVE-2026-78510 1 CVE rev. 4

  Microsoft Outlook and Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 25, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-65660 1 CVE 1 exploited rev. 3

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 25, 2026

  first Aug 11, 2026
• High max 6.5
  MSRC-CVE-2026-69636 1 CVE rev. 2

  Microsoft Office SharePoint Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-70324 1 CVE rev. 2

  Microsoft SharePoint Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Aug 11, 2026
• High max 5.5
  MSRC-CVE-2026-63521 1 CVE rev. 2

  Microsoft Office Word Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Aug 11, 2026
• High max 6.5
  MSRC-CVE-2026-80073 1 CVE rev. 2

  Microsoft Office Outlook Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-69282 1 CVE rev. 2

  Microsoft Office SharePoint Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Sep 8, 2026
• Critical max 9.8
  MSRC-CVE-2026-69590 1 CVE rev. 2

  Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Sep 8, 2026
• High max 5.9
  MSRC-CVE-2026-69803 1 CVE rev. 2

  Windows DHCP Server Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Sep 8, 2026
• High max 5.7
  MSRC-CVE-2026-69637 1 CVE rev. 2

  Windows DHCP Server Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Sep 8, 2026
• High max 8.2
  MSRC-CVE-2026-81357 1 CVE rev. 2

  Visual Studio Code Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-71337 1 CVE rev. 2

  Windows Storage Management Provider Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Sep 8, 2026
• High max 8.0
  MSRC-CVE-2026-69681 1 CVE rev. 2

  Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-59113 1 CVE rev. 3

  Visual Studio Code Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Aug 11, 2026
• High max 7.8
  MSRC-CVE-2026-54981 1 CVE rev. 3

  Visual Studio Code Python Extension Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Aug 11, 2026
• High max 7.8
  MSRC-CVE-2026-47292 1 CVE rev. 3

  Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Jun 9, 2026
• High max 7.1
  MSRC-CVE-2026-65675 1 CVE rev. 4

  CoPilot Chat Security Feature Bypass Vulnerability

  Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 24, 2026

  first Aug 11, 2026
• High max 5.7
  MSRC-CVE-2026-69572 1 CVE rev. 2

  Windows SMB Client Information Disclosure Vulnerability

  Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 22, 2026

  first Sep 8, 2026
• High max 7.8
  MSRC-CVE-2026-57091 1 CVE rev. 2

  Windows File History Service Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

  Microsoft
  Sep 22, 2026

  first Jul 14, 2026
• High max 7.8
  MSRC-CVE-2026-55134 1 CVE rev. 4

  Microsoft Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 22, 2026

  first Jul 14, 2026
• High max 7.0
  MSRC-CVE-2026-68824 1 CVE rev. 3

  Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 22, 2026

  first Sep 8, 2026
• High max 7.5
  MSRC-CVE-2026-77886 1 CVE rev. 2

  Windows DHCP Server Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 22, 2026

  first Sep 8, 2026
• High max 7.5
  MSRC-CVE-2026-57099 1 CVE rev. 2

  ASP.NET Core Denial of Service Vulnerability

  Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 22, 2026

  first Sep 8, 2026
• Critical max 7.8
  MSRC-CVE-2026-83498 1 CVE rev. 2

  Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

  Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 21, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-78526 1 CVE rev. 3

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 21, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-77901 1 CVE rev. 3

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 21, 2026

  first Sep 8, 2026
• High max 8.8
  MSRC-CVE-2026-78517 1 CVE rev. 4

  Microsoft Office Word Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 21, 2026

  first Sep 8, 2026
• Critical max 7.8
  MSRC-CVE-2026-63532 1 CVE rev. 2

  Microsoft Office Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 21, 2026

  first Aug 11, 2026
• High max 7.8
  MSRC-CVE-2026-62871 1 CVE rev. 3

  .NET Elevation of Privilege Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 21, 2026

  first Aug 11, 2026
• High max 7.8
  MSRC-CVE-2026-55039 1 CVE rev. 3

  Microsoft Excel Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

  Microsoft
  Sep 21, 2026

  first Jul 14, 2026
• Critical max 9.0
  MSRC-CVE-2026-67636 1 CVE rev. 3

  Microsoft SQL Server Remote Code Execution Vulnerability

  Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

  Microsoft
  Sep 17, 2026

  first Sep 8, 2026