Microsoft 厂商相关 12233 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
Microsoft 主要提供操作系统、办公软件及云计算服务。其软件历史上常出现远程代码执行、权限提升及跨站脚本等漏洞，多源于内存处理缺陷或配置错误。值得关注的是，微软推行“安全开发生命周期”并实施零信任架构，近期因 Exchange Server 漏洞引发的全球性供应链攻击事件，凸显了企业级应用的安全风险，促使业界加强补丁管理与纵深防御体系建设。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-85372 | Windows内核权限提升漏洞 — Windows 10 Version 1607 CWE-416 | 7.0 | High | 2026-10-13 |
| CVE-2026-85369 | Windows Hyper-V 提权漏洞 — Windows 10 Version 21H2 CWE-125 | 8.2 | High | 2026-10-13 |
| CVE-2026-85361 | Windows Installer 提权漏洞 — Windows 10 Version 1607 CWE-416 | 7.0 | High | 2026-10-13 |
| CVE-2026-85362 | Windows Management Instrumentation 权限提升漏洞 — Windows 10 Version 1607 CWE-763 | 7.0 | High | 2026-10-13 |
| CVE-2026-85367 | Windows 钱箱协议提权漏洞 — Windows 10 Version 1607 CWE-416 | 7.0 | High | 2026-10-13 |
| CVE-2026-85364 | Windows Installer 权限提升漏洞 — Windows 10 Version 1607 CWE-416 | 7.0 | High | 2026-10-13 |
| CVE-2026-85371 | Network Policy Server 远程代码执行漏洞 — Windows 10 Version 1607 CWE-416 | 8.1 | High | 2026-10-13 |
| CVE-2026-85359 | Windows 性能监控器提权漏洞 — Windows 10 Version 1607 CWE-94 | 7.8 | High | 2026-10-13 |
| CVE-2026-85357 | Windows Phone Service 权限提升漏洞 — Windows 11 version 23H2 CWE-362 | 7.0 | High | 2026-10-13 |
| CVE-2026-85358 | Windows Installer 权限提升漏洞 — Windows 10 Version 1607 CWE-122 | 7.8 | High | 2026-10-13 |
| CVE-2026-85341 | Windows USB 视频驱动程序权限提升漏洞 — Windows 10 Version 1607 CWE-122 | 7.8 | High | 2026-10-13 |
| CVE-2026-85343 | Windows Hyper-V 权限提升漏洞 — Windows 10 Version 1607 CWE-59 | 7.8 | High | 2026-10-13 |
| CVE-2026-85356 | Windows Volume Manager Extension Driver 权限提升漏洞 — Windows 10 Version 1607 CWE-125 | 7.8 | High | 2026-10-13 |
| CVE-2026-85338 | Microsoft Graphics Component 提权漏洞 — Windows 10 Version 1809 CWE-125 | 7.8 | High | 2026-10-13 |
| CVE-2026-85352 | Windows设备关联服务提权漏洞 — Windows 10 Version 1607 CWE-416 | 7.0 | High | 2026-10-13 |
| CVE-2026-85354 | Windows错误报告权限提升漏洞 — Windows 10 Version 1607 CWE-416 | 7.0 | High | 2026-10-13 |
| CVE-2026-85355 | Windows Common Log File System Driver 提权漏洞 — Windows 10 Version 1607 CWE-829 | 7.0 | High | 2026-10-13 |
| CVE-2026-85337 | Windows Remote Desktop Client 信息泄露漏洞 — Windows 10 Version 1607 CWE-125 | 6.5 | Medium | 2026-10-13 |
| CVE-2026-85339 | Windows RRAS 远程代码执行漏洞 — Windows 10 Version 1607 CWE-191 | 8.8 | High | 2026-10-13 |
| CVE-2026-85336 | Windows 设备关联服务信息泄露漏洞 — Windows 10 Version 1607 CWE-125 | 5.5 | Medium | 2026-10-13 |
| CVE-2026-85332 | Windows 设备关联服务权限提升漏洞 — Windows 10 Version 1809 CWE-416 | 7.8 | High | 2026-10-13 |
| CVE-2026-85324 | Active Directory Federation Services 拒绝服务漏洞 — Windows 10 Version 1607 CWE-789 | 7.5 | High | 2026-10-13 |
| CVE-2026-85334 | Windows消息队列队列管理器信息泄露漏洞 — Windows 10 Version 1607 CWE-125 | 7.5 | High | 2026-10-13 |
| CVE-2026-85323 | NDES服务欺骗漏洞 — Windows 10 Version 1607 CWE-1390 | 6.8 | Medium | 2026-10-13 |
| CVE-2026-85328 | Windows 投影文件系统提权漏洞 — Windows 10 Version 1809 CWE-1390 | 7.0 | High | 2026-10-13 |
| CVE-2026-85342 | Windows设备关联服务提权漏洞 — Windows 10 Version 1607 CWE-416 | 7.0 | High | 2026-10-13 |
| CVE-2026-85353 | Windows Print Spooler 组件信息泄露漏洞 — Windows 10 Version 1607 CWE-125 | 7.5 | High | 2026-10-13 |
| CVE-2026-85331 | Windows设备关联服务信息泄露漏洞 — Windows 10 Version 1607 CWE-125 | 6.5 | Medium | 2026-10-13 |
| CVE-2026-85327 | Windows 打印后台处理组件提权漏洞 — Windows 10 Version 1607 CWE-122 | 7.8 | High | 2026-10-13 |
| CVE-2026-85333 | Windows性能监控器权限提升漏洞 — Windows 10 Version 1607 CWE-362 | 6.7 | Medium | 2026-10-13 |
本页汇总了 Microsoft 厂商截至目前公开的全部 12233 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。