目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1325 CNY

100%
コーヒーを一杯おごる

Microsoft 厂商漏洞列表 / CVE 中文分析 8663

Microsoft 厂商相关 8663 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Microsoft 主要提供操作系统、办公软件及云计算服务。其软件历史上常出现远程代码执行、权限提升及跨站脚本等漏洞，多源于内存处理缺陷或配置错误。值得关注的是，微软推行“安全开发生命周期”并实施零信任架构，近期因 Exchange Server 漏洞引发的全球性供应链攻击事件，凸显了企业级应用的安全风险，促使业界加强补丁管理与纵深防御体系建设。

上位製品 Microsoft: Windows 10 Version 1809 Windows Windows 10 Version 1507 Windows 10 Version 1607 Windows 10 Version 1803 Microsoft 365 Apps for Enterprise Microsoft SharePoint Enterprise Server 2016 Windows Server 2019 Microsoft Edge (Chromium-based) Microsoft Edge Microsoft Office 2019 Windows 7 Windows 11 Version 24H2 Windows 10 Version 2004 Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 20H2 Azure Site Recovery VMWare to Azure Windows Server 2016 Windows 10 Version 1703 Microsoft SQL Server 2017 (GDR) Microsoft Office Windows Server 2022 Microsoft SharePoint Enterprise Server Windows 11 version 22H2 Internet Explorer 9 Windows 10 Version 21H2 ChakraCore Internet Explorer 11 Windows Server 2008 R2 Service Pack 1 Visual Studio Code
CVE IDタイトルCVSS深刻度公開日
CVE-2023-36026 Microsoft Edge (Chromium-based) Spoofing Vulnerability — Microsoft Edge (Chromium-based) 4.3 Medium2023-11-16
CVE-2023-36038 ASP.NET Core Denial of Service Vulnerability — ASP.NET Core 8.0CWE-400 8.2 High2023-11-14
CVE-2023-36558 ASP.NET Core Security Feature Bypass Vulnerability — .NET 6.0 6.2 Medium2023-11-14
CVE-2023-36049 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability — Microsoft Visual Studio 2022 version 17.2CWE-20 7.6 High2023-11-14
CVE-2023-36007 Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability — Send Customer Voice survey from Dynamics 365 appCWE-79 7.6 High2023-11-14
CVE-2023-36437 Azure DevOps Server Remote Code Execution Vulnerability — Azure Pipelines AgentCWE-94 8.8 High2023-11-14
CVE-2023-36016 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability — Microsoft Dynamics 365 (on-premises) version 9.0CWE-79 6.2 Medium2023-11-14
CVE-2023-36018 Visual Studio Code Jupyter Extension Spoofing Vulnerability — Jupyter Extension for Visual Studio CodeCWE-359 7.8 High2023-11-14
CVE-2023-36025 Windows SmartScreen Security Feature Bypass Vulnerability — Windows 10 Version 1809 8.8 High2023-11-14
CVE-2023-36021 Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability — On-Prem Data GatewayCWE-20 8.0 High2023-11-14
CVE-2023-36031 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability — Microsoft Dynamics 365 (on-premises) version 9.1CWE-79 7.6 High2023-11-14
CVE-2023-36033 Windows DWM Core Library Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-822 7.8 High2023-11-14
CVE-2023-36030 Microsoft Dynamics 365 Sales Spoofing Vulnerability — Microsoft Dynamics 365 (on-premises) version 9.1CWE-79 6.1 Medium2023-11-14
CVE-2023-36028 Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-122 9.8 Critical2023-11-14
CVE-2023-36035 Microsoft Exchange Server Spoofing Vulnerability — Microsoft Exchange Server 2016 Cumulative Update 23CWE-502 8.0 High2023-11-14
CVE-2023-36037 Microsoft Excel Security Feature Bypass Vulnerability — Microsoft Office 2019 7.8 High2023-11-14
CVE-2023-36045 Microsoft Office Graphics Remote Code Execution Vulnerability — Microsoft Office 2019CWE-822 7.8 High2023-11-14
CVE-2023-36042 Visual Studio Denial of Service Vulnerability — Microsoft Visual Studio 2022 version 17.6CWE-122 6.2 Medium2023-11-14
CVE-2023-36039 Microsoft Exchange Server Spoofing Vulnerability — Microsoft Exchange Server 2016 Cumulative Update 23CWE-502 8.0 High2023-11-14
CVE-2023-36041 Microsoft Excel Remote Code Execution Vulnerability — Microsoft Office 2019CWE-416 7.8 High2023-11-14
CVE-2023-36050 Microsoft Exchange Server Spoofing Vulnerability — Microsoft Exchange Server 2019 Cumulative Update 12CWE-502 8.0 High2023-11-14
CVE-2023-36047 Windows Authentication Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-59 7.8 High2023-11-14
CVE-2023-36046 Windows Authentication Denial of Service Vulnerability — Windows 11 version 21H2CWE-59 7.1 High2023-11-14
CVE-2023-36392 DHCP Server Service Denial of Service Vulnerability — Windows Server 2019CWE-126 7.5 High2023-11-14
CVE-2023-36393 Windows User Interface Application Core Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-426 7.8 High2023-11-14
CVE-2023-36394 Windows Search Service Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-59 7.0 High2023-11-14
CVE-2023-36395 Windows Deployment Services Denial of Service Vulnerability — Windows Server 2019CWE-190 7.5 High2023-11-14
CVE-2023-36396 Windows Compressed Folder Remote Code Execution Vulnerability — Windows 11 version 22H2CWE-41 7.8 High2023-11-14
CVE-2023-36397 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-126 9.8 Critical2023-11-14
CVE-2023-36398 Windows NTFS Information Disclosure Vulnerability — Windows 10 Version 1809CWE-908 6.5 Medium2023-11-14

本页汇总了 Microsoft 厂商截至目前公开的全部 8663 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。