Microsoft 厂商相关 12294 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
Microsoft 主要提供操作系统、办公软件及云计算服务。其软件历史上常出现远程代码执行、权限提升及跨站脚本等漏洞，多源于内存处理缺陷或配置错误。值得关注的是，微软推行“安全开发生命周期”并实施零信任架构，近期因 Exchange Server 漏洞引发的全球性供应链攻击事件，凸显了企业级应用的安全风险，促使业界加强补丁管理与纵深防御体系建设。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-109469 | Entra 设备注册权限提升漏洞 — Entra Device Registration CWE-639 | 10.0 | Critical | 2026-11-06 |
| CVE-2026-118147 | Visual Studio 伪造漏洞 — Microsoft Visual Studio 2017 version 15.9 CWE-295 | 7.4 | High | 2026-10-31 |
| CVE-2026-69446 | Microsoft Edge 提权漏洞 — Microsoft Edge (Chromium-based) CWE-863 | 4.4 | Medium | 2026-10-30 |
| CVE-2026-88078 | Microsoft Edge 基于 Chromium 的欺骗漏洞 — Microsoft Edge (Chromium-based) CWE-347 | 4.3 | Medium | 2026-10-29 |
| CVE-2026-88077 | Microsoft Edge Chromium 提权漏洞 — Microsoft Edge (Chromium-based) CWE-190 | 8.8 | High | 2026-10-29 |
| CVE-2026-96196 | Microsoft Edge 安全特性绕过漏洞 — Microsoft Edge (Chromium-based) CWE-184 | 8.8 | High | 2026-10-29 |
| CVE-2026-96187 | Microsoft Edge 信息泄露漏洞 — Microsoft Edge (Chromium-based) CWE-843 | 7.4 | High | 2026-10-29 |
| CVE-2026-85330 | Microsoft Edge Android 安全功能绕过漏洞 — Microsoft Edge (Chromium-based) CWE-863 | 4.3 | Medium | 2026-10-29 |
| CVE-2026-85899 | Microsoft Edge 提权漏洞 — Microsoft Edge (Chromium-based) CWE-416 | 8.1 | High | 2026-10-29 |
| CVE-2026-114148 | ASP.NET Core 提权漏洞 — .NET 10.0 installed on Linux CWE-276 | 7.8 | High | 2026-10-29 |
| CVE-2026-88090 | Microsoft Edge 提权漏洞 — Microsoft Edge (Chromium-based) CWE-843 | 5.4 | Medium | 2026-10-29 |
| CVE-2026-20942 | Microsoft Edge 欺骗漏洞 — Microsoft Edge (Chromium-based) CWE-1021 | 4.3 | Medium | 2026-10-29 |
| CVE-2026-96203 | Microsoft Edge 提权漏洞 — Microsoft Edge (Chromium-based) CWE-416 | 8.8 | High | 2026-10-29 |
| CVE-2026-96192 | Microsoft Edge 远程代码执行漏洞 — Microsoft Edge (Chromium-based) CWE-416 | 8.8 | High | 2026-10-29 |
| CVE-2026-96199 | Microsoft Edge 远程代码执行漏洞 — Microsoft Edge (Chromium-based) CWE-122 | 8.8 | High | 2026-10-29 |
| CVE-2026-96198 | Microsoft Edge 远程代码执行漏洞 — Microsoft Edge (Chromium-based) CWE-122 | 8.8 | High | 2026-10-29 |
| CVE-2026-85890 | Microsoft Edge 远程代码执行漏洞 — Microsoft Edge (Chromium-based) CWE-415 | 8.8 | High | 2026-10-29 |
| CVE-2026-85897 | Microsoft Edge 远程代码执行漏洞 — Microsoft Edge (Chromium-based) CWE-122 | 8.8 | High | 2026-10-29 |
| CVE-2026-62765 | Microsoft Edge (Chromium) 远程代码执行漏洞 — Microsoft Edge (Chromium-based) CWE-843 | 7.5 | High | 2026-10-27 |
| CVE-2026-85898 | Microsoft Edge 远程代码执行漏洞 — Microsoft Edge (Chromium-based) CWE-843 | 8.8 | High | 2026-10-27 |
| CVE-2026-83831 | Microsoft Edge 远程代码执行漏洞 — Microsoft Edge (Chromium-based) CWE-415 | 8.8 | High | 2026-10-27 |
| CVE-2026-110063 | VM Inspector 提权漏洞 — VM Inspector for Azure Virtual Machines CWE-59 | 10.0 | Critical | 2026-10-22 |
| CVE-2026-83938 | Azure Kubernetes 配置服务提权漏洞 — Azure Kubernetes Configuration Service CWE-306 | 10.0 | Critical | 2026-10-22 |
| CVE-2026-96185 | Microsoft Exchange Online 远程代码执行漏洞 — Microsoft Exchange Online CWE-121 | 7.5 | High | 2026-10-22 |
| CVE-2026-108456 | Azure AI Foundry 权限提升漏洞 — Azure AI Foundry CWE-918 | 7.7 | High | 2026-10-22 |
| CVE-2026-97785 | AAD 应用代理权限提升漏洞 — Microsoft Entra application proxy CWE-287 | 10.0 | Critical | 2026-10-22 |
| CVE-2026-105014 | Azure Pipelines 远程代码执行漏洞 — Azure Pipelines CWE-77 | 9.1 | Critical | 2026-10-22 |
| CVE-2026-80092 | Microsoft Identity Web 权限提升漏洞 — microsoft-identity-web CWE-302 | 5.3 | Medium | 2026-10-16 |
| CVE-2026-109461 | Microsoft MSAL for Node.js 信息泄露漏洞 — Microsoft Identity Client for NodeJS CWE-346 | 5.9 | Medium | 2026-10-16 |
| CVE-2026-109468 | ASP.NET Core 拒绝服务漏洞 — Microsoft Visual Studio 2022 version 17.14 CWE-770 | 7.5 | High | 2026-10-15 |
本页汇总了 Microsoft 厂商截至目前公开的全部 12294 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。