Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Microsoft — Vulnerabilities & Security Advisories 10805

Browse all 10805 CVE security advisories affecting Microsoft. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Microsoft operates as a global technology corporation primarily providing enterprise software, cloud computing services, and consumer electronics. Its extensive software portfolio, including Windows operating systems and Office suites, has historically been associated with a high volume of Common Vulnerabilities and Exposures (CVEs), currently totaling 8,272. Common vulnerability classes affecting these products include remote code execution, cross-site scripting, and privilege escalation, often stemming from complex legacy codebases and extensive feature sets. Notable security incidents include the 2021 SolarWinds supply chain compromise, which impacted Microsoft’s Orion platform, and various critical zero-day exploits in Internet Explorer and Edge browsers. The company maintains a dedicated security response team and regularly issues patches through Windows Update to mitigate these risks, though the sheer scale of its ecosystem continues to present significant attack surfaces for threat actors seeking unauthorized access or data exfiltration.

Top products by Microsoft: Windows 10 Version 1809 Windows 10 Version 1607 Windows 10 Version 1507 Windows Microsoft 365 Apps for Enterprise Microsoft Edge (Chromium-based) Microsoft SharePoint Enterprise Server 2016 Windows 10 Version 1803 Windows 11 Version 24H2 Windows Server 2019 Microsoft Edge Windows 7 Windows 10 Version 21H2 Microsoft Office 2019 Windows 10 Version 2004 Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 20H2 Windows Server 2008 R2 Service Pack 1 Windows Server 2016 Azure Site Recovery VMWare to Azure Windows 10 Version 1703 Visual Studio Code Microsoft Office Windows 11 Version 23H2 Internet Explorer 11 Windows 11 version 22H2 Windows Server 2022 ChakraCore Microsoft SQL Server 2017 (GDR) Internet Explorer 9
CVE ID Title CVSS Severity Published
CVE-2022-22006 HEVC Video Extensions Remote Code Execution Vulnerability — HEVC Video Extension 7.8 High 2022-03-09
CVE-2022-21990 Remote Desktop Client Remote Code Execution Vulnerability — Windows 10 Version 1809 8.8 High 2022-03-09
CVE-2022-21977 Media Foundation Information Disclosure Vulnerability — Windows 10 Version 1809 3.3 Low 2022-03-09
CVE-2022-21975 Windows Hyper-V Denial of Service Vulnerability — Windows 10 Version 1809 4.7 Medium 2022-03-09
CVE-2022-21973 Windows Media Center Update Denial of Service Vulnerability — Windows 7 5.5 Medium 2022-03-09
CVE-2022-21967 Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability — Windows 10 Version 1809 7.0 High 2022-03-09
CVE-2022-23280 Microsoft Outlook for Mac Security Feature Bypass Vulnerability — Microsoft Outlook 2016 for Mac 5.3 Medium 2022-02-09
CVE-2022-23276 SQL Server for Linux Containers Elevation of Privilege Vulnerability — SQL Server 2019 for Linux Containers 7.8 High 2022-02-09
CVE-2022-23274 Microsoft Dynamics GP Remote Code Execution Vulnerability — Microsoft Dynamics GP 8.8 High 2022-02-09
CVE-2022-23273 Microsoft Dynamics GP Elevation Of Privilege Vulnerability — Microsoft Dynamics GP 7.1 High 2022-02-09
CVE-2022-23272 Microsoft Dynamics GP Elevation Of Privilege Vulnerability — Microsoft Dynamics GP 8.1 High 2022-02-09
CVE-2022-23271 Microsoft Dynamics GP Elevation Of Privilege Vulnerability — Microsoft Dynamics GP 6.5 Medium 2022-02-09
CVE-2022-23269 Microsoft Dynamics GP Spoofing Vulnerability — Microsoft Dynamics GP 5.4 Medium 2022-02-09
CVE-2022-23256 Azure Data Explorer Spoofing Vulnerability — Azure Data Explorer 8.1 High 2022-02-09
CVE-2022-23255 Microsoft OneDrive for Android Security Feature Bypass Vulnerability — OneDrive for Android 5.9 Medium 2022-02-09
CVE-2022-23254 Microsoft Power BI Information Disclosure Vulnerability — PowerBI-client JS SDK 4.9 Medium 2022-02-09
CVE-2022-23252 Microsoft Office Information Disclosure Vulnerability — Microsoft Office 2019 5.5 Medium 2022-02-09
CVE-2022-22718 Windows Print Spooler Elevation of Privilege Vulnerability — Windows 10 Version 1809 7.8 High 2022-02-09
CVE-2022-22717 Windows Print Spooler Elevation of Privilege Vulnerability — Windows 10 Version 1809 7.0 High 2022-02-09
CVE-2022-22716 Microsoft Excel Information Disclosure Vulnerability — Microsoft SharePoint Enterprise Server 2013 Service Pack 1 5.5 Medium 2022-02-09
CVE-2022-22715 Named Pipe File System Elevation of Privilege Vulnerability — Windows 10 Version 1809 7.8 High 2022-02-09
CVE-2022-22712 Windows Hyper-V Denial of Service Vulnerability — Windows 10 Version 1809 5.6 Medium 2022-02-09
CVE-2022-22710 Windows Common Log File System Driver Denial of Service Vulnerability — Windows 10 Version 1809 5.5 Medium 2022-02-09
CVE-2022-22709 VP9 Video Extensions Remote Code Execution Vulnerability — VP9 Video Extensions 7.8 High 2022-02-09
CVE-2022-22005 Microsoft SharePoint Server Remote Code Execution Vulnerability — Microsoft SharePoint Enterprise Server 2016 8.8 High 2022-02-09
CVE-2022-22004 Microsoft Office ClickToRun Remote Code Execution Vulnerability — Microsoft Office 2013 Click-to-Run (C2R) 7.8 High 2022-02-09
CVE-2022-22003 Microsoft Office Graphics Remote Code Execution Vulnerability — Microsoft Office 2019 7.8 High 2022-02-09
CVE-2022-22002 Windows User Account Profile Picture Denial of Service Vulnerability — Windows 10 Version 1809 5.5 Medium 2022-02-09
CVE-2022-22001 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability — Windows 10 Version 1809 7.8 High 2022-02-09
CVE-2022-22000 Windows Common Log File System Driver Elevation of Privilege Vulnerability — Windows 10 Version 1809 7.8 High 2022-02-09

This page lists every published CVE security advisory associated with Microsoft. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.