目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Microsoft 厂商漏洞列表 / CVE 中文分析 12267

Microsoft 厂商相关 12267 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Microsoft 主要提供操作系统、办公软件及云计算服务。其软件历史上常出现远程代码执行、权限提升及跨站脚本等漏洞，多源于内存处理缺陷或配置错误。值得关注的是，微软推行“安全开发生命周期”并实施零信任架构，近期因 Exchange Server 漏洞引发的全球性供应链攻击事件，凸显了企业级应用的安全风险，促使业界加强补丁管理与纵深防御体系建设。

Top products by Microsoft: Windows 10 Version 1607 Windows 10 Version 1809 Windows 10 Version 1507 Microsoft 365 Apps for Enterprise Windows Microsoft Edge (Chromium-based) Windows 11 Version 24H2 Microsoft SharePoint Enterprise Server 2016 Windows 10 Version 1803 Windows 10 Version 21H2 Windows Server 2019 Microsoft Edge Windows 11 Version 23H2 Windows 7 Microsoft Office 2019 Windows 10 Version 2004 Windows 10 Version 2004 for 32-bit Systems Visual Studio Code Windows 10 Version 20H2 Windows Server 2008 R2 Service Pack 1 Windows Server 2016 Azure Site Recovery VMWare to Azure Windows 10 Version 1703 Microsoft Office Microsoft SQL Server 2017 (GDR) Windows Server 2012 .NET 10.0 Internet Explorer 11 Windows Server 2022 Microsoft Exchange Server 2016 Cumulative Update 23
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-62828 Microsoft Edge 输入验证错误漏洞 — Microsoft Edge for Android CWE-20 5.4 Medium 2026-07-28
CVE-2026-57990 Microsoft Edge(Chromium-based) 权限许可和访问控制问题漏洞 — Microsoft Edge (Chromium-based) CWE-552 7.4 High 2026-07-26
CVE-2026-57989 Microsoft Edge(Chromium-based) 输入验证错误漏洞 — Microsoft Edge (Chromium-based) CWE-346 7.4 High 2026-07-26
CVE-2026-57978 Microsoft Edge(Chromium-based) 输入验证错误漏洞 — Microsoft Edge (Chromium-based) CWE-346 5.4 Medium 2026-07-26
CVE-2026-62835 Microsoft Azure Portal 授权问题漏洞 — Azure Portal CWE-285 9.3 Critical 2026-07-24
CVE-2026-56163 Microsoft Azure Kubernetes Service 授权问题漏洞 — Azure Kubernetes Service CWE-306 10.0 Critical 2026-07-24
CVE-2026-58630 Microsoft Azure App Service 权限许可和访问控制问题漏洞 — Azure App Service for Linux CWE-284 10.0 Critical 2026-07-24
CVE-2026-57106 Microsoft Purview Data Governance 服务端请求伪造漏洞 — Microsoft Purview Data Governance CWE-918 10.0 Critical 2026-07-24
CVE-2026-58275 Microsoft Azure DNS 授权问题漏洞 — Azure DNS CWE-862 10.0 Critical 2026-07-24
CVE-2026-62825 Microsoft Azure Key Vault 授权问题漏洞 — Azure Key Vault CWE-287 10.0 Critical 2026-07-24
CVE-2026-50517 Microsoft 365 copilot 反序列化注入漏洞 — Microsoft 365 Copilot CWE-502 9.9 Critical 2026-07-24
CVE-2026-56191 Microsoft Exchange Online 授权问题漏洞 — Microsoft Exchange Online CWE-287 10.0 Critical 2026-07-24
CVE-2026-35425 Microsoft Azure API Management 权限许可和访问控制问题漏洞 — Azure API Management (APIM) CWE-284 8.0 High 2026-07-24
CVE-2026-49159 Microsoft Graph 信息泄露漏洞 — Microsoft Graph CWE-200 6.5 Medium 2026-07-24
CVE-2026-56160 Microsoft Azure Red Hat OpenShift 授权问题漏洞 — Azure Red Hat OpenShift (ARO) CWE-285 9.1 Critical 2026-07-23
CVE-2026-54120 Microsoft Surface Management Services 输入验证错误漏洞 — Surface Management Services CWE-20 9.9 Critical 2026-07-23
CVE-2026-56165 Microsoft Account 缓冲区错误漏洞 — Microsoft Account CWE-122 9.8 Critical 2026-07-23
CVE-2026-56167 Microsoft Azure AI Search 服务端请求伪造漏洞 — Azure AI Search CWE-918 8.5 High 2026-07-23
CVE-2026-56171 Microsoft Remote Desktop Web Client 信息泄露漏洞 — Remote Desktop Web Client CWE-359 7.1 High 2026-07-17
CVE-2026-57980 Microsoft Edge 授权问题漏洞 — Microsoft Edge (Chromium-based) CWE-288 5.4 Medium 2026-07-17
CVE-2026-62826 Microsoft Office Sharepoint Server 跨站脚本漏洞 — Microsoft SharePoint Enterprise Server 2016 CWE-79 4.6 Medium 2026-07-16
CVE-2026-58643 Microsoft Windows Admin Center 跨站脚本漏洞 — Windows Admin Center CWE-79 6.1 Medium 2026-07-16
CVE-2026-58598 Microsoft Windows Backup Engine 竞争条件问题漏洞 — Windows 10 Version 21H2 CWE-362 7.0 High 2026-07-16
CVE-2026-59117 Microsoft Windows Terminal 数字错误漏洞 — Windows Terminal App CWE-190 7.5 High 2026-07-16
CVE-2026-55440 microsoft UFO 资源管理错误漏洞 — UFO CWE-400 6.5 Medium 2026-07-16
CVE-2026-54568 Microsoft UFO 授权问题漏洞 — UFO CWE-639 4.3 Medium 2026-07-16
CVE-2026-57206 Microsoft SimpleChat 授权问题漏洞 — simplechat CWE-306 8.6 High 2026-07-16
CVE-2026-57205 Microsoft SimpleChat 信息泄露漏洞 — simplechat CWE-200 4.3 Medium 2026-07-16
CVE-2026-53598 Microsoft prompty 信息泄露漏洞 — prompty CWE-22 7.5 High 2026-07-16
CVE-2026-53597 Microsoft prompty 代码注入漏洞 — prompty CWE-94 - - 2026-07-16

本页汇总了 Microsoft 厂商截至目前公开的全部 12267 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。