Microsoft 厂商相关 12233 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
Microsoft 主要提供操作系统、办公软件及云计算服务。其软件历史上常出现远程代码执行、权限提升及跨站脚本等漏洞,多源于内存处理缺陷或配置错误。值得关注的是,微软推行“安全开发生命周期”并实施零信任架构,近期因 Exchange Server 漏洞引发的全球性供应链攻击事件,凸显了企业级应用的安全风险,促使业界加强补丁管理与纵深防御体系建设。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-83914 | Microsoft XML 远程代码执行漏洞 — Windows 10 Version 1607 CWE-416 | 8.1 | High | 2026-10-13 |
| CVE-2026-85841 | Windows DHCP Server 远程代码执行漏洞 — Windows 10 Version 1607 CWE-416 | 6.6 | Medium | 2026-10-13 |
| CVE-2026-83569 | HID Parser Library 提权漏洞 — Windows 10 Version 1809 CWE-122 | 7.8 | High | 2026-10-13 |
| CVE-2026-83912 | Windows Direct Composition 提权漏洞 — Windows 10 Version 1607 CWE-416 | 7.8 | High | 2026-10-13 |
| CVE-2026-83741 | Internet Explorer 权限提升漏洞 — Windows 10 Version 1809 CWE-416 | 7.8 | High | 2026-10-13 |
| CVE-2026-83769 | Microsoft OpenSSH for Windows 权限提升漏洞 — Windows 10 Version 1809 CWE-416 | 7.8 | High | 2026-10-13 |
| CVE-2026-83871 | Windows 版 Microsoft OpenSSH 提权漏洞 — Windows 10 Version 1809 CWE-122 | 7.0 | High | 2026-10-13 |
| CVE-2026-83586 | Windows 文件系统去重服务提权漏洞 — Windows 11 version 23H2 CWE-1390 | 7.8 | High | 2026-10-13 |
| CVE-2026-83886 | Windows Update Orchestrator Service 提权漏洞 — Windows 11 version 23H2 CWE-416 | 7.0 | High | 2026-10-13 |
| CVE-2026-83911 | Windows 存储权限提升漏洞 — Windows 10 Version 1607 CWE-122 | 7.0 | High | 2026-10-13 |
| CVE-2026-70286 | Windows Graphics Component 提权漏洞 — Windows 10 Version 1607 CWE-122 | 7.8 | High | 2026-10-13 |
| CVE-2026-70275 | Windows CD-ROM文件系统驱动程序远程代码执行漏洞 — Windows 10 Version 1607 CWE-822 | 8.8 | High | 2026-10-13 |
| CVE-2026-70299 | Windows Bind Filter Driver 权限提升漏洞 — Windows 11 version 23H2 CWE-863 | 8.8 | High | 2026-10-13 |
| CVE-2026-70248 | Windows Hyper-V 拒绝服务漏洞 — Windows 10 Version 1607 CWE-476 | 6.5 | Medium | 2026-10-13 |
| CVE-2026-70243 | Windows 内核权限提升漏洞 — Windows 11 version 23H2 CWE-416 | 7.0 | High | 2026-10-13 |
| CVE-2026-83892 | Windows HID 信息泄露漏洞 — Windows 10 Version 1809 CWE-125 | 5.5 | Medium | 2026-10-13 |
| CVE-2026-83902 | Windows Direct Composition 权限提升漏洞 — Windows 10 Version 1809 CWE-122 | 7.8 | High | 2026-10-13 |
| CVE-2026-83909 | Windows Win32 内核子系统信息泄露漏洞 — Windows 10 Version 1607 CWE-497 | 4.7 | Medium | 2026-10-13 |
| CVE-2026-83885 | Windows VBS 保护机制存在信息泄露漏洞 — Windows 11 Version 24H2 CWE-326 | 5.6 | Medium | 2026-10-13 |
| CVE-2026-83893 | Windows 剪贴板用户服务信息泄露漏洞 — Windows 10 Version 1809 CWE-497 | 5.5 | Medium | 2026-10-13 |
| CVE-2026-83896 | Windows Direct Composition 提权漏洞 — Windows 10 Version 1607 CWE-122 | 7.8 | High | 2026-10-13 |
| CVE-2026-70222 | Windows Shell 提权漏洞 — Windows 10 Version 1607 CWE-23 | 7.8 | High | 2026-10-13 |
| CVE-2026-70128 | HID解析库信息泄露漏洞 — Windows 10 Version 1809 CWE-125 | 5.5 | Medium | 2026-10-13 |
| CVE-2026-70241 | Windows Kerberos 提权漏洞 — Windows 10 Version 1607 CWE-416 | 7.0 | High | 2026-10-13 |
| CVE-2026-70163 | Microsoft OpenSSH for Windows 拒绝服务漏洞 — Windows 10 Version 1809 CWE-770 | 7.5 | High | 2026-10-13 |
| CVE-2026-70086 | Microsoft Windows 搜索组件提权漏洞 — Windows 10 Version 1809 CWE-416 | 7.0 | High | 2026-10-13 |
| CVE-2026-70151 | Windows Direct Composition 权限提升漏洞 — Windows 10 Version 21H2 CWE-416 | 7.8 | High | 2026-10-13 |
| CVE-2026-70089 | Windows GDI 远程代码执行漏洞 — Windows 10 Version 1607 CWE-122 | 8.8 | High | 2026-10-13 |
| CVE-2026-83868 | 微软蓝牙驱动权限提升漏洞 — Windows 10 Version 1809 CWE-362 | 7.0 | High | 2026-10-13 |
| CVE-2026-83867 | Windows推送通知提权漏洞 — Windows 10 Version 1607 CWE-122 | 7.8 | High | 2026-10-13 |
本页汇总了 Microsoft 厂商截至目前公开的全部 12233 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。