Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Microsoft — Vulnerabilities & Security Advisories 9319

Browse all 9319 CVE security advisories affecting Microsoft. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Microsoft operates as a global technology corporation primarily providing enterprise software, cloud computing services, and consumer electronics. Its extensive software portfolio, including Windows operating systems and Office suites, has historically been associated with a high volume of Common Vulnerabilities and Exposures (CVEs), currently totaling 8,272. Common vulnerability classes affecting these products include remote code execution, cross-site scripting, and privilege escalation, often stemming from complex legacy codebases and extensive feature sets. Notable security incidents include the 2021 SolarWinds supply chain compromise, which impacted Microsoft’s Orion platform, and various critical zero-day exploits in Internet Explorer and Edge browsers. The company maintains a dedicated security response team and regularly issues patches through Windows Update to mitigate these risks, though the sheer scale of its ecosystem continues to present significant attack surfaces for threat actors seeking unauthorized access or data exfiltration.

CVE IDTitleCVSSSeverityPublished
CVE-2021-42280 Windows Feedback Hub Elevation of Privilege Vulnerability — Windows 10 Version 1809 5.5 Medium2021-11-10
CVE-2021-42279 Chakra Scripting Engine Memory Corruption Vulnerability — ChakraCore 4.2 Medium2021-11-10
CVE-2021-42278 Active Directory Domain Services Elevation of Privilege Vulnerability — Windows Server 2019 7.5 High2021-11-10
CVE-2021-42277 Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability — Windows 10 Version 1809 5.5 Medium2021-11-10
CVE-2021-42276 Microsoft Windows Media Foundation Remote Code Execution Vulnerability — Windows 10 Version 1809 7.8 High2021-11-10
CVE-2021-42275 Microsoft COM for Windows Remote Code Execution Vulnerability — Windows 10 Version 1809 8.8 High2021-11-10
CVE-2021-42274 Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability — Windows 10 Version 1809 6.8 Medium2021-11-10
CVE-2021-41379 Windows Installer Elevation of Privilege Vulnerability — Windows 10 Version 1809 5.5 Medium2021-11-10
CVE-2021-41378 Windows NTFS Remote Code Execution Vulnerability — Windows 10 Version 1809 7.8 High2021-11-10
CVE-2021-41377 Windows Fast FAT File System Driver Elevation of Privilege Vulnerability — Windows 10 Version 1809 7.8 High2021-11-10
CVE-2021-41376 Azure Sphere Information Disclosure Vulnerability — Azure Sphere 2.3 Low2021-11-10
CVE-2021-41375 Azure Sphere Information Disclosure Vulnerability — Azure Sphere 4.4 Medium2021-11-10
CVE-2021-41374 Azure Sphere Information Disclosure Vulnerability — Azure Sphere 6.7 Medium2021-11-10
CVE-2021-41373 FSLogix Information Disclosure Vulnerability — FSLogix 5.5 Medium2021-11-10
CVE-2021-41372 Power BI Report Server Spoofing Vulnerability — Power BI Report Server version 1.11.8091.10468 7.6 High2021-11-10
CVE-2021-41371 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability — Windows 10 Version 1809 4.4 Medium2021-11-10
CVE-2021-41370 NTFS Elevation of Privilege Vulnerability — Windows 10 Version 1809 7.8 High2021-11-10
CVE-2021-41368 Microsoft Access Remote Code Execution Vulnerability — Microsoft Office LTSC 2021 6.1 Medium2021-11-10
CVE-2021-41367 NTFS Elevation of Privilege Vulnerability — Windows 10 Version 1809 7.8 High2021-11-10
CVE-2021-41366 Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability — Windows 10 Version 1809 7.8 High2021-11-10
CVE-2021-41356 Windows Denial of Service Vulnerability — Windows 10 Version 1809 7.5 High2021-11-10
CVE-2021-41351 Microsoft Edge (Chrome based) Spoofing on IE Mode — Microsoft Edge (Chromium-based) in IE Mode 4.3 Medium2021-11-10
CVE-2021-41349 Microsoft Exchange Server Spoofing Vulnerability — Microsoft Exchange Server 2013 Cumulative Update 23 6.5 Medium2021-11-10
CVE-2021-40442 Microsoft Excel Remote Code Execution Vulnerability — Microsoft SharePoint Enterprise Server 2013 Service Pack 1 7.8 High2021-11-10
CVE-2021-38666 Remote Desktop Client Remote Code Execution Vulnerability — Windows 10 Version 1809 8.8 High2021-11-10
CVE-2021-38665 Remote Desktop Protocol Client Information Disclosure Vulnerability — Windows 10 Version 1809 7.4 High2021-11-10
CVE-2021-38631 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability — Windows 10 Version 1809 4.4 Medium2021-11-10
CVE-2021-36957 Windows Desktop Bridge Elevation of Privilege Vulnerability — Windows 10 Version 1809 7.8 High2021-11-10
CVE-2021-26444 Azure RTOS Information Disclosure Vulnerability — Azure Real Time Operating System 3.3 Low2021-11-10
CVE-2021-26443 Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability — Windows 10 Version 1809 9.0 Critical2021-11-10

This page lists every published CVE security advisory associated with Microsoft. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.