Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Microsoft — Vulnerabilities & Security Advisories 9328

Browse all 9328 CVE security advisories affecting Microsoft. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Microsoft operates as a global technology corporation primarily providing enterprise software, cloud computing services, and consumer electronics. Its extensive software portfolio, including Windows operating systems and Office suites, has historically been associated with a high volume of Common Vulnerabilities and Exposures (CVEs), currently totaling 8,272. Common vulnerability classes affecting these products include remote code execution, cross-site scripting, and privilege escalation, often stemming from complex legacy codebases and extensive feature sets. Notable security incidents include the 2021 SolarWinds supply chain compromise, which impacted Microsoft’s Orion platform, and various critical zero-day exploits in Internet Explorer and Edge browsers. The company maintains a dedicated security response team and regularly issues patches through Windows Update to mitigate these risks, though the sheer scale of its ecosystem continues to present significant attack surfaces for threat actors seeking unauthorized access or data exfiltration.

CVE IDTitleCVSSSeverityPublished
CVE-2026-66803 Azure Cosmos DB Remote Code Execution Vulnerability — Azure Cosmos DBCWE-284 10.0 Critical2026-07-30
CVE-2026-62828 Microsoft Edge for Android (Chromium-based) Tampering Vulnerability — Microsoft Edge for AndroidCWE-20 5.4 Medium2026-07-28
CVE-2026-57990 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability — Microsoft Edge (Chromium-based)CWE-552 7.4 High2026-07-26
CVE-2026-57989 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability — Microsoft Edge (Chromium-based)CWE-346 7.4 High2026-07-26
CVE-2026-57978 Microsoft Edge (Chromium-based) Spoofing Vulnerability — Microsoft Edge (Chromium-based)CWE-346 5.4 Medium2026-07-26
CVE-2026-62835 Azure Portal Information Disclosure Vulnerability — Azure PortalCWE-285 9.3 Critical2026-07-24
CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability — Azure Kubernetes ServiceCWE-306 10.0 Critical2026-07-24
CVE-2026-58630 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability — Azure App Service for LinuxCWE-284 10.0 Critical2026-07-24
CVE-2026-57106 Data Quality Elevation of Privilege Vulnerability — Microsoft Purview Data GovernanceCWE-918 10.0 Critical2026-07-24
CVE-2026-58275 Azure DNS Elevation of Privilege Vulnerability — Azure DNSCWE-862 10.0 Critical2026-07-24
CVE-2026-62825 Azure Key Vault Elevation of Privilege Vulnerability — Azure Key VaultCWE-287 10.0 Critical2026-07-24
CVE-2026-50517 Microsoft M365 Copilot Remote Code Execution Vulnerability — Microsoft 365 CopilotCWE-502 9.9 Critical2026-07-24
CVE-2026-56191 Microsoft Exchange Online Tampering Vulnerability — Microsoft Exchange OnlineCWE-287 10.0 Critical2026-07-24
CVE-2026-35425 Azure API Management (APIM) Remote Code Execution Vulnerability — Azure API Management (APIM)CWE-284 8.0 High2026-07-24
CVE-2026-49159 Microsoft Graph Information Disclosure Vulnerability — Microsoft GraphCWE-200 6.5 Medium2026-07-24
CVE-2026-56160 Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability — Azure Red Hat OpenShift (ARO)CWE-285 9.1 Critical2026-07-23
CVE-2026-54120 Microsoft Surface Remote Code Execution Vulnerability — Surface Management ServicesCWE-20 9.9 Critical2026-07-23
CVE-2026-56165 Microsoft Account Remote Code Execution Vulnerability — Microsoft AccountCWE-122 9.8 Critical2026-07-23
CVE-2026-56167 Azure AI Search Elevation of Privilege Vulnerability — Azure AI SearchCWE-918 8.5 High2026-07-23
CVE-2026-56171 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability — Remote Desktop Web ClientCWE-359 7.1 High2026-07-17
CVE-2026-57980 Microsoft Edge (Chromium-based) Tampering Vulnerability — Microsoft Edge (Chromium-based)CWE-288 5.4 Medium2026-07-17
CVE-2026-62826 Microsoft SharePoint Server Spoofing Vulnerability — Microsoft SharePoint Enterprise Server 2016CWE-79 4.6 Medium2026-07-16
CVE-2026-58643 Windows Admin Center Spoofing Vulnerability — Windows Admin CenterCWE-79 6.1 Medium2026-07-16
CVE-2026-58598 Windows Backup Service Elevation of Privilege Vulnerability — Windows 10 Version 21H2CWE-362 7.0 High2026-07-16
CVE-2026-59117 Windows Terminal Remote Code Execution Vulnerability — Windows Terminal AppCWE-190 7.5 High2026-07-16
CVE-2026-55440 Microsoft UFO: COMMAND_RESULTS handler creates unowned sessions, allowing authenticated session-squatting denial of service — UFOCWE-400 6.5 Medium2026-07-16
CVE-2026-54568 Microsoft UFO: Missing Authorization in DEVICE_INFO_REQUEST Allows a DEVICE Client to Read Another Device's system_info — UFOCWE-639 4.3 Medium2026-07-16
CVE-2026-57206 SimpleChat plugin validation endpoints missing authentication and authorization — simplechatCWE-306 8.6 High2026-07-16
CVE-2026-57205 SimpleChat: Authenticated users can access other users' profile metadata through user IDOR endpoints — simplechatCWE-200 4.3 Medium2026-07-16
CVE-2026-53598 Prompty: Arbitrary File Read via ${file:path} Reference Expansion — promptyCWE-22 7.5 High2026-07-16

This page lists every published CVE security advisory associated with Microsoft. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.