Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Microsoft — Vulnerabilities & Security Advisories 8663

Browse all 8663 CVE security advisories affecting Microsoft. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Microsoft operates as a global technology corporation primarily providing enterprise software, cloud computing services, and consumer electronics. Its extensive software portfolio, including Windows operating systems and Office suites, has historically been associated with a high volume of Common Vulnerabilities and Exposures (CVEs), currently totaling 8,272. Common vulnerability classes affecting these products include remote code execution, cross-site scripting, and privilege escalation, often stemming from complex legacy codebases and extensive feature sets. Notable security incidents include the 2021 SolarWinds supply chain compromise, which impacted Microsoft’s Orion platform, and various critical zero-day exploits in Internet Explorer and Edge browsers. The company maintains a dedicated security response team and regularly issues patches through Windows Update to mitigate these risks, though the sheer scale of its ecosystem continues to present significant attack surfaces for threat actors seeking unauthorized access or data exfiltration.

CVE IDTitleCVSSSeverityPublished
CVE-2023-21820 Windows Distributed File System (DFS) Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-126 7.4 High2023-02-14
CVE-2023-21819 Windows Secure Channel Denial of Service Vulnerability — Windows 10 Version 1809CWE-125 7.5 High2023-02-14
CVE-2023-21818 Windows Secure Channel Denial of Service Vulnerability — Windows 10 Version 1809CWE-20 7.5 High2023-02-14
CVE-2023-21817 Windows Kerberos Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-287 7.8 High2023-02-14
CVE-2023-21816 Windows Active Directory Domain Services API Denial of Service Vulnerability — Windows 10 Version 1809CWE-20 7.5 High2023-02-14
CVE-2023-21813 Windows Secure Channel Denial of Service Vulnerability — Windows 10 Version 1809CWE-126 7.5 High2023-02-14
CVE-2023-21812 Windows Common Log File System Driver Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-122 7.8 High2023-02-14
CVE-2023-21811 Windows iSCSI Service Denial of Service Vulnerability — Windows 10 Version 1809CWE-126 7.5 High2023-02-14
CVE-2023-21809 Microsoft Defender for Endpoint Security Feature Bypass Vulnerability — Microsoft Defender Security Intelligence Updates 7.8 High2023-02-14
CVE-2023-21805 Windows MSHTML Platform Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-77 7.8 High2023-02-14
CVE-2023-21804 Windows Graphics Component Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-122 7.8 High2023-02-14
CVE-2023-21803 Windows iSCSI Discovery Service Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-190 9.8 Critical2023-02-14
CVE-2023-21802 Windows Media Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-190 7.8 High2023-02-14
CVE-2023-21801 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability — Windows 10 Version 1809 7.8 High2023-02-14
CVE-2023-21800 Windows Installer Elevation of Privilege Vulnerability — Windows Server 2008 Service Pack 2CWE-73 7.8 High2023-02-14
CVE-2023-21799 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-122 8.8 High2023-02-14
CVE-2023-21798 Microsoft ODBC Driver Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-125 8.8 High2023-02-14
CVE-2023-21797 Microsoft ODBC Driver Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-190 8.8 High2023-02-14
CVE-2023-21529 Microsoft Exchange Server Remote Code Execution Vulnerability — Microsoft Exchange Server 2019 Cumulative Update 12CWE-502 8.8 High2023-02-14
CVE-2023-23382 Azure Machine Learning Compute Instance Information Disclosure Vulnerability — Azure Machine LearningCWE-257 6.5 Medium2023-02-14
CVE-2023-23379 Microsoft Defender for IoT Elevation of Privilege Vulnerability — Microsoft Defender for IoTCWE-23 7.8 High2023-02-14
CVE-2023-23378 Print 3D Remote Code Execution Vulnerability — Print 3DCWE-122 7.8 High2023-02-14
CVE-2023-23374 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability — Microsoft Edge for Android 8.3 High2023-02-14
CVE-2023-21573 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability — Microsoft Dynamics 365 (on-premises) version 9.1 5.4 Medium2023-02-14
CVE-2023-21572 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability — Microsoft Dynamics 365 (on-premises) version 9.1 6.5 Medium2023-02-14
CVE-2023-21571 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability — Microsoft Dynamics 365 (on-premises) version 9.1CWE-79 5.4 Medium2023-02-14
CVE-2023-21568 Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability — SQL Server Integration Services for Visual Studio 2019CWE-502 7.3 High2023-02-14
CVE-2023-21570 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability — Microsoft Dynamics 365 (on-premises) version 9.1CWE-79 5.4 Medium2023-02-14
CVE-2023-21721 Microsoft OneNote Elevation of Privilege Vulnerability — Microsoft OneNote for AndroidCWE-287 6.5 Medium2023-02-14
CVE-2023-21720 Microsoft Edge (Chromium-based) Tampering Vulnerability — Microsoft Edge (Chromium-based)CWE-126 5.3 Medium2023-02-14

This page lists every published CVE security advisory associated with Microsoft. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.