Microsoft 厂商相关 12267 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
Microsoft 主要提供操作系统、办公软件及云计算服务。其软件历史上常出现远程代码执行、权限提升及跨站脚本等漏洞，多源于内存处理缺陷或配置错误。值得关注的是，微软推行“安全开发生命周期”并实施零信任架构，近期因 Exchange Server 漏洞引发的全球性供应链攻击事件，凸显了企业级应用的安全风险，促使业界加强补丁管理与纵深防御体系建设。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-36762 | Microsoft Word 安全漏洞 — Microsoft SharePoint Enterprise Server 2016 CWE-20 | 7.3 | High | 2023-09-12 |
| CVE-2023-36761 | Microsoft Word 安全漏洞 — Microsoft Office 2019 CWE-20 | 6.5 | Medium | 2023-09-12 |
| CVE-2023-36763 | Microsoft Outlook 安全漏洞 — Microsoft Office 2019 CWE-200 | 7.5 | High | 2023-09-12 |
| CVE-2023-36770 | Microsoft 3D Builder 安全漏洞 — 3D Builder CWE-122 | 7.8 | High | 2023-09-12 |
| CVE-2023-36764 | Microsoft SharePoint 安全漏洞 — Microsoft SharePoint Enterprise Server 2016 CWE-73 | 8.8 | High | 2023-09-12 |
| CVE-2023-36772 | Microsoft 3D Builder 安全漏洞 — 3D Builder CWE-122 | 7.8 | High | 2023-09-12 |
| CVE-2023-36771 | Microsoft 3D Builder 安全漏洞 — 3D Builder CWE-122 | 7.8 | High | 2023-09-12 |
| CVE-2023-36777 | Microsoft Exchange Server 安全漏洞 — Microsoft Exchange Server 2019 Cumulative Update 12 CWE-502 | 5.7 | Medium | 2023-09-12 |
| CVE-2023-36773 | Microsoft 3D Builder 安全漏洞 — 3D Builder CWE-126 | 7.8 | High | 2023-09-12 |
| CVE-2023-36792 | Microsoft .NET和Microsoft Visual Studio 安全漏洞 — Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) CWE-190 | 7.8 | High | 2023-09-12 |
| CVE-2023-36788 | Microsoft .NET Framework 安全漏洞 — Microsoft .NET Framework 3.5 AND 4.8 | 7.8 | High | 2023-09-12 |
| CVE-2023-36794 | Microsoft Visual Studio和Microsoft .NET 安全漏洞 — Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) CWE-191 | 7.8 | High | 2023-09-12 |
| CVE-2023-36793 | Microsoft Visual Studio和Microsoft .NET 安全漏洞 — Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) CWE-122 | 7.8 | High | 2023-09-12 |
| CVE-2023-36799 | Microsoft .NET Core和Microsoft Visual Studio 安全漏洞 — .NET 6.0 CWE-400 | 6.5 | Medium | 2023-09-12 |
| CVE-2023-36796 | Microsoft Visual Studio和Microsoft .NET 安全漏洞 — Microsoft Visual Studio 2022 version 17.6 CWE-191 | 7.8 | High | 2023-09-12 |
| CVE-2023-38155 | Microsoft Azure DevOps Server 安全漏洞 — Azure DevOps Server 2019.0.1 CWE-502 | 7.0 | High | 2023-09-12 |
| CVE-2023-36800 | Microsoft Dynamics Finance & Operations 跨站脚本漏洞 — Dynamics 365 for Finance and Operations CWE-79 | 7.6 | High | 2023-09-12 |
| CVE-2023-38163 | Microsoft Windows Defender 安全漏洞 — Microsoft Defender Security Intelligence Updates | 7.8 | High | 2023-09-12 |
| CVE-2023-38160 | Microsoft Windows TCP/IP 安全漏洞 — Windows 10 Version 1809 CWE-416 | 5.5 | Medium | 2023-09-12 |
| CVE-2023-38164 | Microsoft Dynamics 365 跨站脚本漏洞 — Microsoft Dynamics 365 (on-premises) version 9.1 CWE-79 | 7.6 | High | 2023-09-12 |
| CVE-2023-36886 | Microsoft Dynamics 365 跨站脚本漏洞 — Microsoft Dynamics 365 (on-premises) version 9.1 CWE-79 | 7.6 | High | 2023-09-12 |
| CVE-2023-33136 | Microsoft Azure DevOps Server 安全漏洞 — Azure DevOps Server 2020.0.2 CWE-77 | 8.8 | High | 2023-09-12 |
| CVE-2023-41764 | Microsoft Office 安全漏洞 — Microsoft Office 2019 CWE-347 | 5.5 | Medium | 2023-09-12 |
| CVE-2023-29332 | Microsoft Azure Kubernetes 输入验证错误漏洞 — Azure Kubernetes Service CWE-330 | 7.5 | High | 2023-09-12 |
| CVE-2023-36742 | Microsoft Visual Studio Code 安全漏洞 — Visual Studio Code | 7.8 | High | 2023-09-12 |
| CVE-2023-36736 | Microsoft Identity Linux Broker 安全漏洞 — Microsoft Identity Linux Broker CWE-502 | 4.4 | Medium | 2023-09-12 |
| CVE-2023-36745 | Microsoft Exchange Server 安全漏洞 — Microsoft Exchange Server 2019 Cumulative Update 13 CWE-502 | 8.0 | High | 2023-09-12 |
| CVE-2023-36744 | Microsoft Exchange Server 安全漏洞 — Microsoft Exchange Server 2019 Cumulative Update 12 CWE-502 | 8.0 | High | 2023-09-12 |
| CVE-2023-36757 | Microsoft Exchange Server 安全漏洞 — Microsoft Exchange Server 2016 Cumulative Update 23 CWE-502 | 8.0 | High | 2023-09-12 |
| CVE-2023-36756 | Microsoft Exchange Server 安全漏洞 — Microsoft Exchange Server 2016 Cumulative Update 23 CWE-502 | 8.0 | High | 2023-09-12 |
本页汇总了 Microsoft 厂商截至目前公开的全部 12267 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。