Microsoft Surface是美国微软(Microsoft)公司的一款平板电脑。 Microsoft Surface存在输入验证错误漏洞。攻击者利用该漏洞可以绕过某些功能。以下产品和版本受到影响:Surface Laptop 4 with Intel Processor,Microsoft Surface Laptop Go 2,Microsoft Surface Go 3,Microsoft Surface Laptop Go 3,Surface Laptop 4 with AMD Process
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Microsoft | Microsoft Surface Go | - | - |
|
| Microsoft | Microsoft Surface Hub | - | - |
|
| Microsoft | Microsoft Surface Laptop Go | - | - |
|
| Microsoft | Microsoft Surface Laptop Go 3 | - | - |
|
| Microsoft | Microsoft Surface Pro | - | - |
|
| Microsoft | Microsoft Surface Pro 8 | - | - |
|
| Microsoft | Microsoft Surface Pro 9 ARM | - | - |
|
| Microsoft | Surface Laptop 3 with Intel Processor | - | - |
|
| Microsoft | Surface Laptop 4 with AMD Processor | - | - |
|
| Microsoft | Surface Laptop 4 with Intel Processor | - | - |
|
| Microsoft | Surface Windows Dev Kit | - | - |
|
| # | POC Description | Source Link | Shenlong Link |
|---|
No public POC found.
Login to generate AI POC| CVE-2025-21198 | 9.0 CRITICAL | Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability |
| CVE-2025-21406 | 8.8 HIGH | Windows Telephony Service Remote Code Execution Vulnerability |
| CVE-2025-21208 | 8.8 HIGH | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2025-21410 | 8.8 HIGH | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2025-21407 | 8.8 HIGH | Windows Telephony Service Remote Code Execution Vulnerability |
| CVE-2025-21200 | 8.8 HIGH | Windows Telephony Service Remote Code Execution Vulnerability |
| CVE-2025-21190 | 8.8 HIGH | Windows Telephony Service Remote Code Execution Vulnerability |
| CVE-2025-21201 | 8.8 HIGH | Windows Telephony Server Remote Code Execution Vulnerability |
| CVE-2025-21371 | 8.8 HIGH | Windows Telephony Service Remote Code Execution Vulnerability |
| CVE-2025-21369 | 8.8 HIGH | Microsoft Digest Authentication Remote Code Execution Vulnerability |
| CVE-2025-21368 | 8.8 HIGH | Microsoft Digest Authentication Remote Code Execution Vulnerability |
| CVE-2025-21376 | 8.1 HIGH | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
| CVE-2025-21400 | 8.0 HIGH | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2025-21381 | 7.8 HIGH | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2025-21387 | 7.8 HIGH | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2025-21390 | 7.8 HIGH | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2025-21359 | 7.8 HIGH | Windows Kernel Security Feature Bypass Vulnerability |
| CVE-2025-21367 | 7.8 HIGH | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2025-21397 | 7.8 HIGH | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2025-21358 | 7.8 HIGH | Windows Core Messaging Elevation of Privileges Vulnerability |
Showing top 20 of 55 CVEs. View all on vendor page → →
No comments yet