Microsoft 厂商相关 12234 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
Microsoft 主要提供操作系统、办公软件及云计算服务。其软件历史上常出现远程代码执行、权限提升及跨站脚本等漏洞，多源于内存处理缺陷或配置错误。值得关注的是，微软推行“安全开发生命周期”并实施零信任架构，近期因 Exchange Server 漏洞引发的全球性供应链攻击事件，凸显了企业级应用的安全风险，促使业界加强补丁管理与纵深防御体系建设。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-102867 | Microsoft Office Word 信息泄露漏洞 — Microsoft 365 Apps for Enterprise CWE-125 | 6.5 | Medium | 2026-10-13 |
| CVE-2026-102861 | Microsoft Office SharePoint 权限提升漏洞 — Microsoft SharePoint Server Subscription Edition CWE-862 | 8.8 | High | 2026-10-13 |
| CVE-2026-102866 | Microsoft Office SharePoint 权限提升漏洞 — Microsoft SharePoint Server Subscription Edition CWE-347 | 8.1 | High | 2026-10-13 |
| CVE-2026-102858 | Microsoft Office OneNote远程代码执行漏洞 — Microsoft Office 365 for Mac CWE-122 | 8.8 | High | 2026-10-13 |
| CVE-2026-102865 | Microsoft Office SharePoint 信息泄露漏洞 — Microsoft SharePoint Server Subscription Edition CWE-863 | 6.5 | Medium | 2026-10-13 |
| CVE-2026-102860 | Microsoft Office SharePoint 权限提升漏洞 — Microsoft SharePoint Server Subscription Edition CWE-284 | 8.8 | High | 2026-10-13 |
| CVE-2026-102864 | Microsoft Office SharePoint 欺骗漏洞 — Microsoft SharePoint Server Subscription Edition CWE-79 | 4.6 | Medium | 2026-10-13 |
| CVE-2026-102233 | Visual Studio Code 安全特性绕过漏洞 — Visual Studio Code CWE-862 | 7.8 | High | 2026-10-13 |
| CVE-2026-102232 | VS Code 安全特性绕过漏洞 — Visual Studio Code CWE-863 | 7.0 | High | 2026-10-13 |
| CVE-2026-102856 | 微软 Office Visio 远程代码执行漏洞 — Microsoft 365 Apps for Enterprise CWE-122 | 8.8 | High | 2026-10-13 |
| CVE-2026-102857 | Microsoft Office Visio 远程代码执行漏洞 — Microsoft 365 Apps for Enterprise CWE-122 | 8.8 | High | 2026-10-13 |
| CVE-2026-102231 | VS Code 安全特性绕过漏洞 — Visual Studio Code CWE-41 | 7.7 | High | 2026-10-13 |
| CVE-2026-102855 | Microsoft Office Visio 远程代码执行漏洞 — Microsoft 365 Apps for Enterprise CWE-122 | 8.8 | High | 2026-10-13 |
| CVE-2026-102234 | Visual Studio Code 安全功能绕过漏洞 — Visual Studio Code CWE-807 | 7.4 | High | 2026-10-13 |
| CVE-2026-102235 | Visual Studio Code 远程代码执行漏洞 — Visual Studio Code CWE-116 | 8.8 | High | 2026-10-13 |
| CVE-2026-102238 | Visual Studio Code 远程代码执行漏洞 — Visual Studio Code CWE-22 | 9.6 | Critical | 2026-10-13 |
| CVE-2026-70098 | Visual Studio Code 远程代码执行漏洞 — Visual Studio Code CWE-862 | 8.8 | High | 2026-10-13 |
| CVE-2026-102229 | Visual Studio Code 信息泄露漏洞 — Visual Studio Code CWE-22 | 6.8 | Medium | 2026-10-13 |
| CVE-2026-102227 | Windows ReFS远程代码执行漏洞 — Windows 10 Version 1607 CWE-122 | 7.8 | High | 2026-10-13 |
| CVE-2026-108457 | Microsoft Windows PDF远程代码执行漏洞 — Windows 10 Version 21H2 CWE-787 | 8.1 | High | 2026-10-13 |
| CVE-2026-108468 | Windows Installer 权限提升漏洞 — Windows 10 Version 1607 CWE-416 | 7.0 | High | 2026-10-13 |
| CVE-2026-105728 | Microsoft Dynamics Business Central 信息泄露漏洞 — Microsoft Dynamics NAV 2018 CWE-306 | 7.5 | High | 2026-10-13 |
| CVE-2026-105727 | Microsoft Dynamics 365 Business Central 权限提升漏洞 — Microsoft Dynamics NAV 2018 CWE-22 | 8.8 | High | 2026-10-13 |
| CVE-2026-105725 | Windows Security App 权限提升漏洞 — Windows Security App CWE-416 | 7.0 | High | 2026-10-13 |
| CVE-2026-108400 | HEVC视频扩展远程代码执行漏洞 — HEVC Video Extensions CWE-190 | 8.8 | High | 2026-10-13 |
| CVE-2026-103572 | Visual Studio Tools for Applications 和 SQL Server Management Studio 远程代码执行漏洞 — Microsoft Visual Studio 2022 version 17.14 CWE-94 | 8.8 | High | 2026-10-13 |
| CVE-2026-102850 | Microsoft Office Access 远程代码执行漏洞 — Microsoft 365 Apps for Enterprise CWE-122 | 8.8 | High | 2026-10-13 |
| CVE-2026-102849 | Microsoft Office Access 远程代码执行漏洞 — Microsoft 365 Apps for Enterprise CWE-122 | 8.8 | High | 2026-10-13 |
| CVE-2026-96207 | Microsoft Partner Center 提权漏洞 — Microsoft Partner Center CWE-295 | 10.0 | Critical | 2026-10-08 |
| CVE-2026-94510 | Microsoft Bookings 权限提升漏洞 — Microsoft Bookings CWE-639 | 9.9 | Critical | 2026-10-08 |
本页汇总了 Microsoft 厂商截至目前公开的全部 12234 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。