Microsoft 厂商相关 12267 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
Microsoft 主要提供操作系统、办公软件及云计算服务。其软件历史上常出现远程代码执行、权限提升及跨站脚本等漏洞，多源于内存处理缺陷或配置错误。值得关注的是，微软推行“安全开发生命周期”并实施零信任架构，近期因 Exchange Server 漏洞引发的全球性供应链攻击事件，凸显了企业级应用的安全风险，促使业界加强补丁管理与纵深防御体系建设。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-59135 | Microsoft Windows Search Component 授权问题漏洞 — Windows 10 Version 1607 CWE-1390 | 5.5 | Medium | 2026-08-11 |
| CVE-2026-59130 | Microsoft Windows 安全漏洞 — Windows 10 Version 1607 CWE-1303 | 5.6 | Medium | 2026-08-11 |
| CVE-2026-59133 | Microsoft HPC Pack 权限许可和访问控制问题漏洞 — Microsoft HPC Pack 2019 CWE-250 | 8.8 | High | 2026-08-11 |
| CVE-2026-59128 | Microsoft Windows Encrypting File System 缓冲区错误漏洞 — Windows 10 Version 1607 CWE-125 | 5.5 | Medium | 2026-08-11 |
| CVE-2026-59127 | Microsoft Windows Installer 数字错误漏洞 — Windows 10 Version 1607 CWE-190 | 7.8 | High | 2026-08-11 |
| CVE-2026-59124 | Microsoft Windows App Client for Windows Desktop 反序列化注入漏洞 — Microsoft HPC Pack 2019 CWE-502 | 9.8 | Critical | 2026-08-11 |
| CVE-2026-47285 | Microsoft Visual Studio Code 命令注入漏洞 — Visual Studio Code CWE-77 | 6.5 | Medium | 2026-08-11 |
| CVE-2026-47299 | Azure Monitor Agent 权限提升漏洞 — Azure Monitor Agent Linux Extension CWE-77 | 7.2 | High | 2026-08-11 |
| CVE-2026-59113 | Microsoft Visual Studio Code 授权问题漏洞 — Visual Studio Code CWE-862 | 8.8 | High | 2026-08-11 |
| CVE-2026-58612 | Microsoft PowerShell 服务端请求伪造漏洞 — PowerShell 7.4 CWE-918 | 7.4 | High | 2026-08-11 |
| CVE-2026-49179 | Microsoft Windows Active Directory 命令注入漏洞 — Windows 10 Version 1607 CWE-77 | 8.8 | High | 2026-08-11 |
| CVE-2026-54113 | Microsoft Windows Kernel 资源管理错误漏洞 — Windows 10 Version 1607 CWE-770 | 7.5 | High | 2026-08-11 |
| CVE-2026-54984 | Microsoft Windows 缓冲区错误漏洞 — Windows 10 Version 1607 CWE-122 | 7.8 | High | 2026-08-11 |
| CVE-2026-40375 | Microsoft Dynamics 365 Business Central 授权问题漏洞 — Microsoft Dynamics 365 Business Central 2024 Release Wave 2 CWE-862 | 6.5 | Medium | 2026-08-11 |
| CVE-2026-63520 | Microsoft SharePoint 输入验证错误漏洞 — Microsoft SharePoint Enterprise Server 2016 CWE-20 | 8.1 | High | 2026-08-11 |
| CVE-2026-63516 | Microsoft SharePoint 反序列化注入漏洞 — Microsoft SharePoint Enterprise Server 2016 CWE-502 | 6.5 | Medium | 2026-08-11 |
| CVE-2026-63514 | Microsoft SharePoint 反序列化注入漏洞 — Microsoft SharePoint Enterprise Server 2016 CWE-502 | 8.8 | High | 2026-08-11 |
| CVE-2026-63512 | Microsoft SharePoint 授权问题漏洞 — Microsoft SharePoint Enterprise Server 2016 CWE-863 | 6.5 | Medium | 2026-08-11 |
| CVE-2026-62837 | Microsoft SharePoint 路径遍历漏洞 — Microsoft SharePoint Enterprise Server 2016 CWE-23 | 6.5 | Medium | 2026-08-11 |
| CVE-2026-62827 | Microsoft SharePoint 授权问题漏洞 — Microsoft SharePoint Enterprise Server 2016 CWE-287 | 8.8 | High | 2026-08-11 |
| CVE-2026-62829 | Microsoft SharePoint 跨站脚本漏洞 — Microsoft SharePoint Server 2019 CWE-79 | 4.6 | Medium | 2026-08-11 |
| CVE-2026-57105 | Microsoft SharePoint 跨站脚本漏洞 — Microsoft SharePoint Server 2019 CWE-79 | 8.0 | High | 2026-08-11 |
| CVE-2026-65768 | Microsoft Teams for Android 路径遍历漏洞 — Microsoft Teams for Android CWE-22 | 8.8 | High | 2026-08-11 |
| CVE-2026-58650 | Microsoft Visual Studio Code 授权问题漏洞 — Visual Studio Code CWE-639 | 7.8 | High | 2026-08-11 |
| CVE-2026-56174 | Microsoft Windows Narrator Braille 权限许可和访问控制问题漏洞 — Windows 10 Version 1809 CWE-426 | 7.8 | High | 2026-08-11 |
| CVE-2026-50472 | Microsoft Windows LUAFV 缓冲区错误漏洞 — Windows 10 Version 1607 CWE-122 | 7.0 | High | 2026-08-11 |
| CVE-2026-70332 | Microsoft SharePoint Online 服务端请求伪造漏洞 — Microsoft SharePoint Online CWE-79 | 9.6 | Critical | 2026-08-06 |
| CVE-2026-62873 | Microsoft 365 Admin Center 加密问题漏洞 — Microsoft 365 Admin Center CWE-347 | 9.8 | Critical | 2026-08-06 |
| CVE-2026-63508 | Microsoft Planetary Computer Pro (GeoCatalog) 授权问题漏洞 — Microsoft Planetary Computer Pro (GeoCatalog) CWE-306 | 10.0 | Critical | 2026-08-06 |
| CVE-2026-50515 | Microsoft Azure Service Bus 反序列化注入漏洞 — Azure Service Bus CWE-502 | 9.9 | Critical | 2026-08-06 |
本页汇总了 Microsoft 厂商截至目前公开的全部 12267 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。