Microsoft 厂商相关 12267 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
Microsoft 主要提供操作系统、办公软件及云计算服务。其软件历史上常出现远程代码执行、权限提升及跨站脚本等漏洞，多源于内存处理缺陷或配置错误。值得关注的是，微软推行“安全开发生命周期”并实施零信任架构，近期因 Exchange Server 漏洞引发的全球性供应链攻击事件，凸显了企业级应用的安全风险，促使业界加强补丁管理与纵深防御体系建设。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-65667 | Microsoft Teams 授权问题漏洞 — Microsoft Teams CWE-862 | 10.0 | Critical | 2026-08-06 |
| CVE-2026-56162 | Microsoft Azure SQL Database 授权问题漏洞 — Azure SQL Database CWE-287 | 10.0 | Critical | 2026-08-06 |
| CVE-2026-62830 | Microsoft Azure SRE Agent 授权问题漏洞 — Azure SRE Agent CWE-862 | 9.9 | Critical | 2026-08-06 |
| CVE-2026-68823 | Microsoft Azure Confidential Ledger 权限许可和访问控制问题漏洞 — Azure Confidential Ledger CWE-749 | 9.1 | Critical | 2026-08-06 |
| CVE-2026-56161 | Microsoft Azure Logic Apps 权限许可和访问控制问题漏洞 — Azure Logic Apps CWE-284 | 9.6 | Critical | 2026-08-06 |
| CVE-2026-59115 | Microsoft Entra Provisioning Service 路径遍历漏洞 — Microsoft Entra Provisioning Service CWE-35 | 9.9 | Critical | 2026-08-06 |
| CVE-2026-49163 | Microsoft Application Insights Profiler 路径遍历漏洞 — Application Insights Profiler CWE-22 | 8.8 | High | 2026-08-06 |
| CVE-2026-62918 | Microsoft Teams 加密问题漏洞 — Microsoft Teams CWE-347 | 7.5 | High | 2026-08-06 |
| CVE-2026-50481 | Microsoft Azure Active Directory 处理逻辑错误漏洞 — Azure Active Directory CWE-471 | 9.9 | Critical | 2026-08-06 |
| CVE-2026-59118 | Microsoft Power Apps 授权问题漏洞 — Copilot Cowork CWE-285 | 9.3 | Critical | 2026-08-06 |
| CVE-2026-62896 | Microsoft Teams 授权问题漏洞 — Microsoft Teams CWE-287 | 9.6 | Critical | 2026-08-06 |
| CVE-2026-65668 | Microsoft Purview eDiscovery 权限许可和访问控制问题漏洞 — Microsoft Purview eDiscovery CWE-284 | 8.8 | High | 2026-08-06 |
| CVE-2026-62836 | Microsoft Azure SQL Managed Instance 授权问题漏洞 — Azure SQL Managed Instance CWE-923 | 8.7 | High | 2026-08-06 |
| CVE-2026-62870 | Microsoft 365 Apps for Enterprise 资源管理错误漏洞 — Microsoft 365 Apps for Enterprise CWE-416 | 8.8 | High | 2026-08-03 |
| CVE-2026-66326 | Microsoft Edge 授权问题漏洞 — Microsoft Edge (Chromium-based) CWE-862 | 6.5 | Medium | 2026-08-03 |
| CVE-2026-66325 | Microsoft Edge 服务端请求伪造漏洞 — Microsoft Edge (Chromium-based) CWE-918 | 6.1 | Medium | 2026-08-03 |
| CVE-2026-66322 | Microsoft Edge 输入验证错误漏洞 — Microsoft Edge (Chromium-based) CWE-346 | 7.1 | High | 2026-08-03 |
| CVE-2026-66317 | Microsoft Edge 输入验证错误漏洞 — Microsoft Edge (Chromium-based) CWE-346 | 5.4 | Medium | 2026-08-03 |
| CVE-2026-66311 | Microsoft Edge 授权问题漏洞 — Microsoft Edge (Chromium-based) CWE-862 | 6.2 | Medium | 2026-08-03 |
| CVE-2026-65804 | Microsoft Edge 代码注入漏洞 — Microsoft Edge (Chromium-based) CWE-94 | 6.1 | Medium | 2026-08-03 |
| CVE-2026-65802 | Microsoft Edge 输入验证错误漏洞 — Microsoft Edge (Chromium-based) CWE-73 | 7.4 | High | 2026-08-03 |
| CVE-2026-66316 | Microsoft Edge 输入验证错误漏洞 — Microsoft Edge (Chromium-based) CWE-346 | 5.4 | Medium | 2026-08-03 |
| CVE-2026-66315 | Microsoft Edge 资源管理错误漏洞 — Microsoft Edge (Chromium-based) CWE-416 | 7.5 | High | 2026-08-03 |
| CVE-2026-66314 | Microsoft Edge 竞争条件问题漏洞 — Microsoft Edge (Chromium-based) CWE-367 | 6.5 | Medium | 2026-08-03 |
| CVE-2026-66313 | Microsoft Edge 输入验证错误漏洞 — Microsoft Edge (Chromium-based) CWE-346 | 6.8 | Medium | 2026-08-03 |
| CVE-2026-66312 | Microsoft Edge 缓冲区错误漏洞 — Microsoft Edge (Chromium-based) CWE-126 | 6.5 | Medium | 2026-08-03 |
| CVE-2026-66310 | Microsoft Edge 输入验证错误漏洞 — Microsoft Edge for Android CWE-73 | 7.7 | High | 2026-08-03 |
| CVE-2026-66321 | Microsoft Edge 缓冲区错误漏洞 — Microsoft Edge (Chromium-based) CWE-843 | 7.4 | High | 2026-08-03 |
| CVE-2026-66318 | Microsoft Edge 输入验证错误漏洞 — Microsoft Edge (Chromium-based) CWE-346 | 8.1 | High | 2026-08-03 |
| CVE-2026-66803 | Microsoft Azure Cosmos DB 权限许可和访问控制问题漏洞 — Azure Cosmos DB CWE-284 | 10.0 | Critical | 2026-07-30 |
本页汇总了 Microsoft 厂商截至目前公开的全部 12267 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。