Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

Microsoft — Vulnerabilities & Security Advisories 8272

Browse all 8272 CVE security advisories affecting Microsoft. AI-powered Chinese analysis, POCs, and references for each vulnerability.

CVE IDTitleCVSSSeverityPublished
CVE-2026-20958 Microsoft SharePoint Information Disclosure Vulnerability — Microsoft SharePoint Enterprise Server 2016CWE-918 5.4 Medium2026-01-13
CVE-2026-20957 Microsoft Excel Remote Code Execution Vulnerability — Microsoft 365 Apps for EnterpriseCWE-191 7.8 High2026-01-13
CVE-2026-20950 Microsoft Excel Remote Code Execution Vulnerability — Microsoft 365 Apps for EnterpriseCWE-416 7.8 High2026-01-13
CVE-2026-20952 Microsoft Office Remote Code Execution Vulnerability — Microsoft 365 Apps for EnterpriseCWE-416 8.4 High2026-01-13
CVE-2026-20948 Microsoft Word Remote Code Execution Vulnerability — Microsoft 365 Apps for EnterpriseCWE-822 7.8 High2026-01-13
CVE-2026-20949 Microsoft Excel Security Feature Bypass Vulnerability — Microsoft 365 Apps for EnterpriseCWE-284 7.8 High2026-01-13
CVE-2026-20939 Windows File Explorer Information Disclosure Vulnerability — Windows 10 Version 1607CWE-200 5.5 Medium2026-01-13
CVE-2026-20937 Windows File Explorer Information Disclosure Vulnerability — Windows 10 Version 1607CWE-200 5.5 Medium2026-01-13
CVE-2026-20936 Windows NDIS Information Disclosure Vulnerability — Windows 10 Version 1607CWE-125 4.3 Medium2026-01-13
CVE-2026-20935 Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability — Windows 11 version 22H3CWE-822 6.2 Medium2026-01-13
CVE-2026-20931 Windows Telephony Service Elevation of Privilege Vulnerability — Windows 10 Version 1607CWE-73 8.0 High2026-01-13
CVE-2026-20929 Windows HTTP.sys Elevation of Privilege Vulnerability — Windows 10 Version 1607CWE-284 7.5 High2026-01-13
CVE-2026-20874 Windows Management Services Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-362 7.8 High2026-01-13
CVE-2026-20872 NTLM Hash Disclosure Spoofing Vulnerability — Windows 10 Version 1607CWE-73 6.5 Medium2026-01-13
CVE-2026-20873 Windows Management Services Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-362 7.8 High2026-01-13
CVE-2026-20870 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability — Windows 11 Version 24H2CWE-416 7.8 High2026-01-13
CVE-2026-20871 Desktop Window Manager Elevation of Privilege Vulnerability — Windows 10 Version 21H2CWE-416 7.8 High2026-01-13
CVE-2026-20868 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability — Windows 10 Version 1607CWE-122 8.8 High2026-01-13
CVE-2026-20867 Windows Management Services Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-362 7.8 High2026-01-13
CVE-2026-20866 Windows Management Services Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-362 7.8 High2026-01-13
CVE-2026-20862 Windows Management Services Information Disclosure Vulnerability — Windows 10 Version 1809CWE-200 5.5 Medium2026-01-13
CVE-2026-20863 Win32k Elevation of Privilege Vulnerability — Windows 11 version 22H3CWE-415 7.0 High2026-01-13
CVE-2026-20861 Windows Management Services Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-362 7.8 High2026-01-13
CVE-2026-21219 Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability — Windows SDKCWE-416 7.0 High2026-01-13
CVE-2026-20854 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability — Windows 11 Version 24H2CWE-416 7.5 High2026-01-13
CVE-2026-20849 Windows Kerberos Elevation of Privilege Vulnerability — Windows 10 Version 1607CWE-807 7.5 High2026-01-13
CVE-2026-20853 Windows WalletService Elevation of Privilege Vulnerability — Windows 10 Version 1607CWE-362 7.4 High2026-01-13
CVE-2026-20848 Windows SMB Server Elevation of Privilege Vulnerability — Windows 10 Version 1607CWE-362 7.5 High2026-01-13
CVE-2026-20843 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability — Windows 10 Version 1607CWE-284 7.8 High2026-01-13
CVE-2026-21224 Azure Connected Machine Agent Elevation of Privilege Vulnerability — Azure Connected Machine AgentCWE-121 7.8 High2026-01-13

This page lists every published CVE security advisory associated with Microsoft. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.