Microsoft 厂商相关 12267 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
Microsoft 主要提供操作系统、办公软件及云计算服务。其软件历史上常出现远程代码执行、权限提升及跨站脚本等漏洞,多源于内存处理缺陷或配置错误。值得关注的是,微软推行“安全开发生命周期”并实施零信任架构,近期因 Exchange Server 漏洞引发的全球性供应链攻击事件,凸显了企业级应用的安全风险,促使业界加强补丁管理与纵深防御体系建设。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-23400 | Microsoft DNS Server 安全漏洞 — Windows Server 2019 CWE-122 | 7.2 | High | 2023-03-14 |
| CVE-2023-23401 | Microsoft Windows Codecs Library 安全漏洞 — Windows 10 Version 1809 CWE-681 | 7.8 | High | 2023-03-14 |
| CVE-2023-21708 | Microsoft Windows Remote Procedure Call 安全漏洞 — Windows 10 Version 1809 CWE-191 | 9.8 | Critical | 2023-03-14 |
| CVE-2023-24891 | Microsoft Dynamics 跨站脚本漏洞 — Microsoft Dynamics 365 (on-premises) version 9.1 CWE-79 | 5.4 | Medium | 2023-03-14 |
| CVE-2023-24882 | Microsoft OneDrive 安全漏洞 — OneDrive for Android | 5.5 | Medium | 2023-03-14 |
| CVE-2023-24930 | Microsoft OneDrive 安全漏洞 — OneDrive for MacOS Installer CWE-59 | 7.8 | High | 2023-03-14 |
| CVE-2023-24923 | Microsoft OneDrive 安全漏洞 — OneDrive for Android | 5.5 | Medium | 2023-03-14 |
| CVE-2023-24922 | Microsoft Dynamics 安全漏洞 — Microsoft Dynamics 365 (on-premises) version 9.0 CWE-643 | 6.5 | Medium | 2023-03-14 |
| CVE-2023-24920 | Microsoft Dynamics 跨站脚本漏洞 — Microsoft Dynamics 365 (on-premises) version 9.1 CWE-352 | 5.4 | Medium | 2023-03-14 |
| CVE-2023-24921 | Microsoft Dynamics 跨站脚本漏洞 — Microsoft Dynamics 365 (on-premises) version 9.0 CWE-79 | 5.4 | Medium | 2023-03-14 |
| CVE-2023-24879 | Microsoft Dynamics 跨站脚本漏洞 — Microsoft Dynamics 365 (on-premises) version 9.0 | 5.4 | Medium | 2023-03-14 |
| CVE-2023-24919 | Microsoft Dynamics 跨站脚本漏洞 — Microsoft Dynamics 365 (on-premises) version 9.0 CWE-79 | 5.4 | Medium | 2023-03-14 |
| CVE-2023-23403 | Microsoft PostScript Printer Driver 安全漏洞 — Windows 10 Version 1809 CWE-122 | 8.8 | High | 2023-03-14 |
| CVE-2023-24856 | Microsoft PostScript Printer Driver 安全漏洞 — Windows 10 Version 1809 CWE-20 | 7.5 | High | 2023-03-14 |
| CVE-2023-23398 | Microsoft Excel 安全漏洞 — Microsoft Office 2019 | 7.1 | High | 2023-03-14 |
| CVE-2023-23399 | Microsoft Excel 安全漏洞 — Microsoft Office 2019 CWE-125 | 7.8 | High | 2023-03-14 |
| CVE-2023-23396 | Microsoft Excel 资源管理错误漏洞 — Microsoft Office Online Server CWE-400 | 6.5 | Medium | 2023-03-14 |
| CVE-2023-23397 | Microsoft Outlook 安全漏洞 — Microsoft Office LTSC 2021 CWE-20 | 9.8 | Critical | 2023-03-14 |
| CVE-2023-23394 | Microsoft Client Server Run-time Subsystem (CSRSS) 安全漏洞 — Windows 10 Version 1809 CWE-822 | 5.5 | Medium | 2023-03-14 |
| CVE-2023-23395 | Microsoft SharePoint 安全漏洞 — Microsoft SharePoint Enterprise Server 2016 CWE-601 | 3.1 | Low | 2023-03-14 |
| CVE-2023-23392 | Microsoft Windows HTTP Protocol Stack 安全漏洞 — Windows Server 2022 CWE-416 | 9.8 | Critical | 2023-03-14 |
| CVE-2023-23393 | Microsoft Windows BrokerInfrastructure 竞争条件问题漏洞 — Windows 10 Version 1809 CWE-591 | 7.0 | High | 2023-03-14 |
| CVE-2023-23391 | Microsoft Office for Android 安全漏洞 — Microsoft Office for Android CWE-23 | 5.5 | Medium | 2023-03-14 |
| CVE-2023-23388 | Microsoft Bluetooth Driver 安全漏洞 — Windows 10 Version 1809 CWE-681 | 8.8 | High | 2023-03-14 |
| CVE-2023-23389 | Microsoft Defender 安全漏洞 — Microsoft Malware Protection Engine CWE-367 | 6.3 | Medium | 2023-03-14 |
| CVE-2023-23385 | Microsoft Windows Point-to-Point Protocol over Ethernet 安全漏洞 — Windows 10 Version 1809 CWE-190 | 7.0 | High | 2023-03-14 |
| CVE-2023-23383 | Microsoft Service Fabric 安全漏洞 — Azure Service Fabric 9.0 for Linux CWE-79 | 8.2 | High | 2023-03-14 |
| CVE-2023-21778 | Microsoft Dynamics 安全漏洞 — Microsoft Dynamics 365 Unified Service Desk CWE-77 | 8.0 | High | 2023-02-14 |
| CVE-2023-23381 | Visual Studio 安全漏洞 — Microsoft Visual Studio 2013 Update 5 CWE-122 | 7.8 | High | 2023-02-14 |
| CVE-2023-21823 | Microsoft Graphics Component 安全漏洞 — Microsoft Office for Android CWE-190 | 7.8 | High | 2023-02-14 |
本页汇总了 Microsoft 厂商截至目前公开的全部 12267 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。