Microsoft 厂商相关 12267 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
Microsoft 主要提供操作系统、办公软件及云计算服务。其软件历史上常出现远程代码执行、权限提升及跨站脚本等漏洞，多源于内存处理缺陷或配置错误。值得关注的是，微软推行“安全开发生命周期”并实施零信任架构，近期因 Exchange Server 漏洞引发的全球性供应链攻击事件，凸显了企业级应用的安全风险，促使业界加强补丁管理与纵深防御体系建设。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-35430 | Microsoft Azure Privileged Identity Management 安全漏洞 — Azure Privileged Identity Management (PIM) CWE-639 | 8.8 | High | 2026-05-22 |
| CVE-2026-23652 | Microsoft Power Pages 命令注入漏洞 — Microsoft Power Pages CWE-77 | 10.0 | Critical | 2026-05-22 |
| CVE-2026-40412 | Microsoft Azure Orbital Spatio 代码问题漏洞 — Azure Orbital Spatio CWE-434 | 10.0 | Critical | 2026-05-22 |
| CVE-2026-42834 | Microsoft Azure Portal Windows Admin Center 后置链接漏洞 — Windows Admin Center in Azure Portal CWE-59 | 7.8 | High | 2026-05-20 |
| CVE-2026-45584 | Microsoft Defender 安全漏洞 — Microsoft Malware Protection Engine CWE-122 | 8.1 | High | 2026-05-20 |
| CVE-2026-41091 | Microsoft Defender 后置链接漏洞 — Microsoft Malware Protection Engine CWE-59 | 7.8 | High | 2026-05-20 |
| CVE-2026-45498 | Microsoft Defender 安全漏洞 — Microsoft Defender Antimalware Platform CWE-400 | 4.0 | Medium | 2026-05-20 |
| CVE-2026-45585 | Microsoft Windows和Microsoft Windows Server 安全漏洞 — Windows 11 Version 24H2 CWE-77 | 6.8 | Medium | 2026-05-19 |
| CVE-2026-42822 | Microsoft Azure Resource Manager和Microsoft Azure Local 授权问题漏洞 — Azure Local CWE-287 | 10.0 | Critical | 2026-05-18 |
| CVE-2026-45495 | Microsoft Edge 安全漏洞 — Microsoft Edge (Chromium-based) CWE-35 | 8.8 | High | 2026-05-18 |
| CVE-2026-45494 | Microsoft Edge 安全漏洞 — Microsoft Edge (Chromium-based) CWE-79 | 5.4 | Medium | 2026-05-18 |
| CVE-2026-45492 | Microsoft Edge 安全漏洞 — Microsoft Edge (Chromium-based) CWE-20 | 5.4 | Medium | 2026-05-18 |
| CVE-2026-46383 | APM – Agent Package Manager 路径遍历漏洞 — apm CWE-22 | 5.5 | Medium | 2026-05-15 |
| CVE-2026-45539 | APM – Agent Package Manager 后置链接漏洞 — apm CWE-59 | 7.4 | High | 2026-05-15 |
| CVE-2026-44641 | APM – Agent Package Manager 路径遍历漏洞 — apm CWE-22 | 7.1 | High | 2026-05-15 |
| CVE-2026-41615 | Microsoft Authenticator 信息泄露漏洞 — Microsoft Authenticator for Android CWE-200 | 9.6 | Critical | 2026-05-14 |
| CVE-2026-42897 | Microsoft Exchange Server 跨站脚本漏洞 — Microsoft Exchange Server 2016 Cumulative Update 23 CWE-79 | 8.1 | High | 2026-05-14 |
| CVE-2026-44503 | Kiota Java Libraries 输入验证错误漏洞 — kiota-java CWE-601 | - | - | 2026-05-14 |
| CVE-2026-33821 | Microsoft Dynamics 365 Customer Insights 安全漏洞 — Dynamics 365 CWE-269 | 7.7 | High | 2026-05-12 |
| CVE-2026-42893 | Microsoft M365 Copilot 命令注入漏洞 — Microsoft Outlook for iOS CWE-77 | 7.4 | High | 2026-05-12 |
| CVE-2026-42838 | Microsoft Edge 注入漏洞 — Microsoft Edge (Chromium-based) CWE-74 | 5.4 | Medium | 2026-05-12 |
| CVE-2026-40416 | Microsoft Edge 安全漏洞 — Microsoft Edge (Chromium-based) CWE-451 | 4.3 | Medium | 2026-05-12 |
| CVE-2026-42832 | Microsoft Office 访问控制错误漏洞 — Microsoft Excel for Android CWE-284 | 7.7 | High | 2026-05-12 |
| CVE-2026-42833 | Microsoft Dynamics 365 安全漏洞 — Microsoft Dynamics 365 (on-premises) version 9.1 CWE-250 | 9.1 | Critical | 2026-05-12 |
| CVE-2026-42830 | Microsoft Azure Monitor Agent 代码问题漏洞 — Azure Monitor Agent Metrics Extension CWE-426 | 6.5 | Medium | 2026-05-12 |
| CVE-2026-42823 | Microsoft Azure Logic Apps 访问控制错误漏洞 — Azure Logic Apps CWE-284 | 9.9 | Critical | 2026-05-12 |
| CVE-2026-41613 | Microsoft Visual Studio Code 操作系统命令注入漏洞 — Visual Studio Code CWE-384 | 8.8 | High | 2026-05-12 |
| CVE-2026-41103 | Microsoft SSO Plugin for Jira & Confluence 安全漏洞 — Microsoft Confluence SAML SSO plugin CWE-303 | 9.1 | Critical | 2026-05-12 |
| CVE-2026-41097 | Microsoft Windows Secure Boot 安全漏洞 — Windows 10 Version 1809 CWE-1329 | 6.7 | Medium | 2026-05-12 |
| CVE-2026-40381 | Microsoft Azure Connected Machine Agent 访问控制错误漏洞 — Azure Connected Machine Agent CWE-284 | 7.8 | High | 2026-05-12 |
本页汇总了 Microsoft 厂商截至目前公开的全部 12267 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。