Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1020 CNY

100%

Microsoft — Vulnerabilities & Security Advisories 8424

Browse all 8424 CVE security advisories affecting Microsoft. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Microsoft operates as a global technology corporation primarily providing enterprise software, cloud computing services, and consumer electronics. Its extensive software portfolio, including Windows operating systems and Office suites, has historically been associated with a high volume of Common Vulnerabilities and Exposures (CVEs), currently totaling 8,272. Common vulnerability classes affecting these products include remote code execution, cross-site scripting, and privilege escalation, often stemming from complex legacy codebases and extensive feature sets. Notable security incidents include the 2021 SolarWinds supply chain compromise, which impacted Microsoft’s Orion platform, and various critical zero-day exploits in Internet Explorer and Edge browsers. The company maintains a dedicated security response team and regularly issues patches through Windows Update to mitigate these risks, though the sheer scale of its ecosystem continues to present significant attack surfaces for threat actors seeking unauthorized access or data exfiltration.

CVE IDTitleCVSSSeverityPublished
CVE-2026-42834 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability — Windows Admin Center in Azure PortalCWE-59 7.8 High2026-05-20
CVE-2026-45584 Microsoft Defender Remote Code Execution Vulnerability — Microsoft Malware Protection EngineCWE-122 8.1 High2026-05-20
CVE-2026-41091 Microsoft Defender Elevation of Privilege Vulnerability — Microsoft Malware Protection EngineCWE-59 7.8 High2026-05-20
CVE-2026-45498 Microsoft Defender Denial of Service Vulnerability — Microsoft Defender Antimalware Platform 4.0 Medium2026-05-20
CVE-2026-45585 Windows BitLocker Security Feature Bypass Vulnerability — Windows 11 Version 24H2CWE-77 6.8 Medium2026-05-19
CVE-2026-42822 Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability — Azure LocalCWE-287 10.0 Critical2026-05-18
CVE-2026-45495 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability — Microsoft Edge (Chromium-based) 8.8 High2026-05-18
CVE-2026-45494 Microsoft Edge (Chromium-based) Spoofing Vulnerability — Microsoft Edge (Chromium-based)CWE-79 5.4 Medium2026-05-18
CVE-2026-45492 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability — Microsoft Edge (Chromium-based)CWE-20 5.4 Medium2026-05-18
CVE-2026-46383 Microsoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install` — apmCWE-22 5.5 Medium2026-05-15
CVE-2026-45539 Microsoft APM: Symlinks under `.apm/prompts/` and `.apm/agents/` are dereferenced during `apm install`, copying host-local file contents into the project tree — apmCWE-59 7.4 High2026-05-15
CVE-2026-44641 Microsoft APM: plugin.json component paths escape plugin root and copy arbitrary host files during install — apmCWE-22 7.1 High2026-05-15
CVE-2026-41615 Microsoft Authenticator Information Disclosure Vulnerability — Microsoft Authenticator for AndroidCWE-200 9.6 Critical2026-05-14
CVE-2026-42897 Microsoft Exchange Server Spoofing Vulnerability — Microsoft Exchange Server 2016 Cumulative Update 23CWE-79 8.1 High2026-05-14
CVE-2026-44503 Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect — kiota-javaCWE-601--2026-05-14
CVE-2026-33821 Microsoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerability — Dynamics 365CWE-269 7.7 High2026-05-12
CVE-2026-42893 Microsoft Outlook for iOS Tampering Vulnerability — Microsoft Outlook for iOSCWE-77 7.4 High2026-05-12
CVE-2026-42838 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability — Microsoft Edge (Chromium-based)CWE-74 5.4 Medium2026-05-12
CVE-2026-40416 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability — Microsoft Edge (Chromium-based)CWE-451 4.3 Medium2026-05-12
CVE-2026-42832 Microsoft Office Spoofing Vulnerability — Microsoft Excel for AndroidCWE-284 7.7 High2026-05-12
CVE-2026-42833 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability — Microsoft Dynamics 365 (on-premises) version 9.1CWE-250 9.1 Critical2026-05-12
CVE-2026-42830 Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability — Azure Monitor Agent Metrics ExtensionCWE-426 6.5 Medium2026-05-12
CVE-2026-42823 Azure Logic Apps Elevation of Privilege Vulnerability — Azure Logic AppsCWE-284 9.9 Critical2026-05-12
CVE-2026-41613 Visual Studio Code Elevation of Privilege Vulnerability — Visual Studio CodeCWE-384 8.8 High2026-05-12
CVE-2026-41103 Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability — Microsoft Confluence SAML SSO pluginCWE-303 9.1 Critical2026-05-12
CVE-2026-41097 Secure Boot Security Feature Bypass Vulnerability — Windows 10 Version 1809CWE-1329 6.7 Medium2026-05-12
CVE-2026-40381 Azure Connected Machine Agent Elevation of Privilege Vulnerability — Azure Connected Machine AgentCWE-284 7.8 High2026-05-12
CVE-2026-41086 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability — Windows Admin Center in Azure PortalCWE-284 8.8 High2026-05-12
CVE-2026-35436 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability — Microsoft 365 Apps for EnterpriseCWE-1220 8.8 High2026-05-12
CVE-2026-40420 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability — Microsoft 365 Apps for EnterpriseCWE-284 8.8 High2026-05-12

This page lists every published CVE security advisory associated with Microsoft. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.