Microsoft 厂商相关 12233 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
Microsoft 主要提供操作系统、办公软件及云计算服务。其软件历史上常出现远程代码执行、权限提升及跨站脚本等漏洞,多源于内存处理缺陷或配置错误。值得关注的是,微软推行“安全开发生命周期”并实施零信任架构,近期因 Exchange Server 漏洞引发的全球性供应链攻击事件,凸显了企业级应用的安全风险,促使业界加强补丁管理与纵深防御体系建设。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-21245 | Microsoft Windows Kernel 安全漏洞 — Windows 11 Version 24H2 CWE-122 | 7.8 | High | 2026-02-10 |
| CVE-2026-21249 | Microsoft NTLM 安全漏洞 — Windows 10 Version 1607 CWE-73 | 3.3 | Low | 2026-02-10 |
| CVE-2026-21250 | Microsoft HTTP.sys 安全漏洞 — Windows 11 Version 24H2 CWE-822 | 7.8 | High | 2026-02-10 |
| CVE-2026-21251 | Microsoft Windows 资源管理错误漏洞 — Windows Server 2016 CWE-416 | 7.8 | High | 2026-02-10 |
| CVE-2026-21253 | Microsoft Windows 资源管理错误漏洞 — Windows 10 Version 1607 CWE-416 | 7.0 | High | 2026-02-10 |
| CVE-2026-21255 | Microsoft Hyper-V 访问控制错误漏洞 — Windows 10 Version 1607 CWE-284 | 8.8 | High | 2026-02-10 |
| CVE-2026-21256 | Microsoft GitHub Copilot and Visual Studio 代码注入漏洞 — Microsoft Visual Studio 2022 version 17.14 CWE-77 | 8.8 | High | 2026-02-10 |
| CVE-2026-21257 | Microsoft GitHub Copilot and Visual Studio 命令注入漏洞 — Microsoft Visual Studio 2022 version 17.14 CWE-77 | 8.0 | High | 2026-02-10 |
| CVE-2026-21261 | Microsoft Excel 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise CWE-125 | 5.5 | Medium | 2026-02-10 |
| CVE-2026-21511 | Microsoft Outlook 代码问题漏洞 — Microsoft 365 Apps for Enterprise CWE-502 | 7.5 | High | 2026-02-10 |
| CVE-2026-21508 | Microsoft Windows Storage 代码问题漏洞 — Windows 10 Version 1607 CWE-287 | 7.0 | High | 2026-02-10 |
| CVE-2026-21516 | Microsoft GitHub Copilot for JetBrains 命令注入漏洞 — GitHub Copilot Plugin for JetBrains IDEs CWE-77 | 8.8 | High | 2026-02-10 |
| CVE-2026-21525 | Microsoft Windows Remote Access Connection Manager 安全漏洞 — Windows 10 Version 1607 CWE-476 | 6.2 | Medium | 2026-02-10 |
| CVE-2026-21514 | Microsoft Word 安全漏洞 — Microsoft 365 Apps for Enterprise CWE-807 | 7.8 | High | 2026-02-10 |
| CVE-2026-21529 | Microsoft Azure HDInsight 跨站脚本漏洞 — Azure HDInsight CWE-79 | 5.7 | Medium | 2026-02-10 |
| CVE-2026-21537 | Microsoft Defender 代码注入漏洞 — Microsoft Defender for Endpoint for Linux CWE-94 | 8.8 | High | 2026-02-10 |
| CVE-2026-21531 | Microsoft Azure SDK 代码问题漏洞 — Azure AI Language Authoring CWE-502 | 9.8 | Critical | 2026-02-10 |
| CVE-2026-21510 | Microsoft Windows Shell 安全漏洞 — Windows 10 Version 1607 CWE-693 | 8.8 | High | 2026-02-10 |
| CVE-2026-21528 | Microsoft Azure IoT 安全漏洞 — Azure IoT Explorer CWE-1327 | 6.5 | Medium | 2026-02-10 |
| CVE-2026-21527 | Microsoft Exchange Server 安全漏洞 — Microsoft Exchange Server 2016 Cumulative Update 23 CWE-451 | 6.5 | Medium | 2026-02-10 |
| CVE-2026-21522 | Microsoft Azure Compute Gallery 命令注入漏洞 — Microsoft ACI Confidential Containers CWE-77 | 6.7 | Medium | 2026-02-10 |
| CVE-2026-21513 | Microsoft MSHTML Framework 安全漏洞 — Windows 10 Version 1607 CWE-693 | 8.8 | High | 2026-02-10 |
| CVE-2026-21533 | Microsoft Windows Remote Desktop Services 安全漏洞 — Windows 10 Version 1607 CWE-269 | 7.8 | High | 2026-02-10 |
| CVE-2026-21229 | Microsoft Power BI 输入验证错误漏洞 — Power BI Report Server CWE-20 | 8.0 | High | 2026-02-10 |
| CVE-2026-21523 | Microsoft GitHub Copilot and Visual Studio 安全漏洞 — Microsoft Visual Studio Code CoPilot Chat Extension CWE-367 | 8.0 | High | 2026-02-10 |
| CVE-2026-21218 | Microsoft .NET 安全漏洞 — .NET 10.0 CWE-166 | 7.5 | High | 2026-02-10 |
| CVE-2026-23655 | Microsoft Azure Compute Gallery 安全漏洞 — Microsoft ACI Confidential Containers CWE-312 | 6.5 | Medium | 2026-02-10 |
| CVE-2026-21236 | Microsoft Windows Ancillary Function Driver for WinSock 安全漏洞 — Windows 10 Version 1607 CWE-122 | 7.8 | High | 2026-02-10 |
| CVE-2026-21234 | Microsoft Windows 竞争条件问题漏洞 — Windows 10 Version 1809 CWE-362 | 7.0 | High | 2026-02-10 |
| CVE-2026-21235 | Microsoft Graphics Component 资源管理错误漏洞 — Windows 10 Version 1607 CWE-416 | 7.3 | High | 2026-02-10 |
本页汇总了 Microsoft 厂商截至目前公开的全部 12233 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。