Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Microsoft — Vulnerabilities & Security Advisories 9328

Browse all 9328 CVE security advisories affecting Microsoft. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Microsoft operates as a global technology corporation primarily providing enterprise software, cloud computing services, and consumer electronics. Its extensive software portfolio, including Windows operating systems and Office suites, has historically been associated with a high volume of Common Vulnerabilities and Exposures (CVEs), currently totaling 8,272. Common vulnerability classes affecting these products include remote code execution, cross-site scripting, and privilege escalation, often stemming from complex legacy codebases and extensive feature sets. Notable security incidents include the 2021 SolarWinds supply chain compromise, which impacted Microsoft’s Orion platform, and various critical zero-day exploits in Internet Explorer and Edge browsers. The company maintains a dedicated security response team and regularly issues patches through Windows Update to mitigate these risks, though the sheer scale of its ecosystem continues to present significant attack surfaces for threat actors seeking unauthorized access or data exfiltration.

CVE IDTitleCVSSSeverityPublished
CVE-2026-42983 Windows DWM Core Library Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-416 7.8 High2026-06-09
CVE-2026-44815 DHCP Client Service Remote Code Execution Vulnerability — Windows 10 Version 1607CWE-121 9.8 Critical2026-06-09
CVE-2026-44799 Remote Desktop Client Remote Code Execution Vulnerability — Remote Desktop client for Windows DesktopCWE-122 7.5 High2026-06-09
CVE-2026-44808 Windows DWM Core Library Elevation of Privilege Vulnerability — Windows 11 version 26H1CWE-122 7.8 High2026-06-09
CVE-2026-44807 Windows DWM Core Library Elevation of Privilege Vulnerability — Windows 11 version 26H1CWE-416 7.8 High2026-06-09
CVE-2026-44805 Windows Network Controller (NC) Host Agent Denial of Service Vulnerability — Windows Server 2019CWE-416 5.5 Medium2026-06-09
CVE-2026-44811 Windows DWM Core Library Elevation of Privilege Vulnerability — Windows 11 version 26H1CWE-122 7.8 High2026-06-09
CVE-2026-42992 Remote Desktop Client Remote Code Execution Vulnerability — Windows 10 Version 1607CWE-122 7.5 High2026-06-09
CVE-2026-44810 Microsoft Cryptographic Services Elevation of Privilege Vulnerability — Windows 11 version 23H2CWE-287 8.4 High2026-06-09
CVE-2026-44809 Windows Common Log File System Driver Elevation of Privilege Vulnerability — Windows 11 Version 24H2CWE-416 7.8 High2026-06-09
CVE-2026-42991 Windows Push Notifications Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-362 7.8 High2026-06-09
CVE-2026-42989 Winlogon Elevation of Privilege Vulnerability — Windows 10 Version 1607CWE-59 7.8 High2026-06-09
CVE-2026-42977 Windows Push Notifications Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-362 7.8 High2026-06-09
CVE-2026-42979 Windows Push Notifications Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-362 7.8 High2026-06-09
CVE-2026-42978 Windows Push Notifications Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-362 7.8 High2026-06-09
CVE-2026-42986 Microsoft Graphics Component Elevation of Privilege Vulnerability — Windows 10 Version 1607CWE-416 7.8 High2026-06-09
CVE-2026-42974 Windows Performance Monitor Remote Code Execution Vulnerability — Windows 11 version 23H2CWE-190 8.1 High2026-06-09
CVE-2026-42984 Windows Kernel Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-416 7.0 High2026-06-09
CVE-2026-42981 Windows Performance Monitor Remote Code Execution Vulnerability — Windows 11 version 23H2CWE-191 8.1 High2026-06-09
CVE-2026-42970 Windows Push Notification Information Disclosure Vulnerability — Windows 10 Version 1607CWE-200 5.5 Medium2026-06-09
CVE-2026-42973 Windows Push Notification Information Disclosure Vulnerability — Windows 10 Version 1607CWE-200 5.5 Medium2026-06-09
CVE-2026-42969 Windows Push Notification Information Disclosure Vulnerability — Windows 10 Version 1607CWE-908 5.5 Medium2026-06-09
CVE-2026-42971 Windows Push Notification Information Disclosure Vulnerability — Windows 10 Version 1607CWE-200 5.5 Medium2026-06-09
CVE-2026-42972 Windows Hyper-V Information Disclosure Vulnerability — Windows 10 Version 1607CWE-200 5.5 Medium2026-06-09
CVE-2026-42968 Windows Telephony Server Information Disclosure Vulnerability — Windows 10 Version 1607CWE-125 5.5 Medium2026-06-09
CVE-2026-42915 Microsoft Windows VMSwitch Denial of Service Vulnerability — Windows 10 Version 21H2CWE-131 5.5 Medium2026-06-09
CVE-2026-42912 Windows Telephony Service Elevation of Privilege Vulnerability — Windows 10 Version 1607CWE-362 7.0 High2026-06-09
CVE-2026-42914 Windows Kerberos Denial of Service Vulnerability — Windows 10 Version 1607CWE-125 5.3 Medium2026-06-09
CVE-2026-42911 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability — Windows 10 Version 1607CWE-416 7.0 High2026-06-09
CVE-2026-42913 Remote Desktop Client Remote Code Execution Vulnerability — Remote Desktop client for Windows DesktopCWE-362 7.5 High2026-06-09

This page lists every published CVE security advisory associated with Microsoft. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.