目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Microsoft 厂商漏洞列表 / CVE 中文分析 12267

Microsoft 厂商相关 12267 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Microsoft 主要提供操作系统、办公软件及云计算服务。其软件历史上常出现远程代码执行、权限提升及跨站脚本等漏洞，多源于内存处理缺陷或配置错误。值得关注的是，微软推行“安全开发生命周期”并实施零信任架构，近期因 Exchange Server 漏洞引发的全球性供应链攻击事件，凸显了企业级应用的安全风险，促使业界加强补丁管理与纵深防御体系建设。

Top products by Microsoft: Windows 10 Version 1607 Windows 10 Version 1809 Windows 10 Version 1507 Microsoft 365 Apps for Enterprise Windows Microsoft Edge (Chromium-based) Windows 11 Version 24H2 Microsoft SharePoint Enterprise Server 2016 Windows 10 Version 1803 Windows 10 Version 21H2 Windows Server 2019 Microsoft Edge Windows 11 Version 23H2 Windows 7 Microsoft Office 2019 Windows 10 Version 2004 Windows 10 Version 2004 for 32-bit Systems Visual Studio Code Windows 10 Version 20H2 Windows Server 2008 R2 Service Pack 1 Windows Server 2016 Azure Site Recovery VMWare to Azure Windows 10 Version 1703 Microsoft Office Microsoft SQL Server 2017 (GDR) Windows Server 2012 .NET 10.0 Internet Explorer 11 Windows Server 2022 Microsoft Exchange Server 2016 Cumulative Update 23
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-62906 Microsoft Discovery Studio 输入验证错误漏洞 — Microsoft Discovery Studio CWE-943 7.4 High 2026-09-03
CVE-2026-84452 Microsoft Windows ML CLI 授权问题漏洞 — winml-cli CWE-942 8.6 High 2026-09-02
CVE-2026-70309 Microsoft Edge 输入验证错误漏洞 — Microsoft Edge (Chromium-based) CWE-346 5.4 Medium 2026-08-28
CVE-2026-72984 Microsoft Edge 缓冲区错误漏洞 — Microsoft Edge (Chromium-based) CWE-843 8.8 High 2026-08-28
CVE-2026-66798 Microsoft Edge 资源管理错误漏洞 — Microsoft Edge (Chromium-based) CWE-416 4.3 Medium 2026-08-28
CVE-2026-66324 Microsoft Edge 输入验证错误漏洞 — Microsoft Edge for Android CWE-73 6.5 Medium 2026-08-28
CVE-2026-66323 Microsoft Edge 输入验证错误漏洞 — Microsoft Edge for Android CWE-141 5.4 Medium 2026-08-28
CVE-2026-62904 Microsoft Edge 授权问题漏洞 — Microsoft Edge (Chromium-based) CWE-863 5.4 Medium 2026-08-28
CVE-2026-58616 Microsoft Edge 竞争条件问题漏洞 — Microsoft Edge (Chromium-based) CWE-362 4.4 Medium 2026-08-28
CVE-2026-70331 Microsoft Edge 提示词注入漏洞 — Microsoft Edge (Chromium-based) CWE-1427 5.4 Medium 2026-08-28
CVE-2026-62316 Microsoft UFO 信息泄露漏洞 — UFO CWE-200 8.8 High 2026-08-21
CVE-2026-69502 Microsoft Azure SQL Database 服务端请求伪造漏洞 — Azure SQL Database CWE-918 10.0 Critical 2026-08-21
CVE-2026-69855 Microsoft Copilot in Azure 服务端请求伪造漏洞 — Microsoft Copilot in Azure CWE-918 7.7 High 2026-08-20
CVE-2026-69558 Microsoft Partner Center 授权问题漏洞 — Microsoft Partner Center CWE-639 8.6 High 2026-08-20
CVE-2026-69543 Microsoft Azure Virtual Machines 服务端请求伪造漏洞 — Azure Virtual Machines CWE-918 8.5 High 2026-08-20
CVE-2026-69400 Microsoft Azure Logic Apps 路径遍历漏洞 — Azure Logic Apps CWE-22 9.6 Critical 2026-08-20
CVE-2026-69555 Microsoft azure arc 授权问题漏洞 — Azure ARC CWE-863 10.0 Critical 2026-08-20
CVE-2026-69419 Microsoft Azure Data Manager for Energy 数字错误漏洞 — Azure Data Manager for Energy CWE-190 8.5 High 2026-08-20
CVE-2026-68782 Microsoft Azure SQL Database SQL注入漏洞 — Azure SQL Database CWE-89 9.9 Critical 2026-08-20
CVE-2026-66309 Microsoft Azure SQL Database 权限许可和访问控制问题漏洞 — Azure SQL Database CWE-284 9.1 Critical 2026-08-20
CVE-2026-66800 Microsoft Azure Data Factory 服务端请求伪造漏洞 — Azure Data Factory CWE-918 8.6 High 2026-08-20
CVE-2026-65816 Microsoft azure web apps 输入验证错误漏洞 — Azure Web Apps CWE-706 10.0 Critical 2026-08-20
CVE-2026-63509 Microsoft Fabric 路径遍历漏洞 — Microsoft Fabric CWE-23 9.9 Critical 2026-08-20
CVE-2026-65770 Microsoft Azure Managed Instance for Apache Cassandra 命令注入漏洞 — Azure Managed Instance for Apache Cassandra CWE-88 10.0 Critical 2026-08-20
CVE-2026-70105 Microsoft Office Word 输入验证错误漏洞 — Microsoft 365 Apps for Enterprise CWE-20 6.5 Medium 2026-08-20
CVE-2026-55013 Microsoft Windows Remote Help 权限许可和访问控制问题漏洞 — Windows Remote Help CWE-427 7.1 High 2026-08-20
CVE-2026-55015 Microsoft Windows Remote Help 权限许可和访问控制问题漏洞 — Windows Remote Help CWE-427 5.5 Medium 2026-08-20
CVE-2026-69836 Microsoft Entra 反序列化注入漏洞 — Microsoft Entra CWE-502 10.0 Critical 2026-08-20
CVE-2026-69851 Microsoft Entra 服务端请求伪造漏洞 — Microsoft Entra CWE-918 9.9 Critical 2026-08-20
CVE-2026-69519 Microsoft azure stack hci 侧信道信息泄露漏洞 — Azure Stack HCI CWE-204 8.6 High 2026-08-20

本页汇总了 Microsoft 厂商截至目前公开的全部 12267 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。