Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

Microsoft — Vulnerabilities & Security Advisories 8284

Browse all 8284 CVE security advisories affecting Microsoft. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Microsoft operates as a global technology corporation primarily providing enterprise software, cloud computing services, and consumer electronics. Its extensive software portfolio, including Windows operating systems and Office suites, has historically been associated with a high volume of Common Vulnerabilities and Exposures (CVEs), currently totaling 8,272. Common vulnerability classes affecting these products include remote code execution, cross-site scripting, and privilege escalation, often stemming from complex legacy codebases and extensive feature sets. Notable security incidents include the 2021 SolarWinds supply chain compromise, which impacted Microsoft’s Orion platform, and various critical zero-day exploits in Internet Explorer and Edge browsers. The company maintains a dedicated security response team and regularly issues patches through Windows Update to mitigate these risks, though the sheer scale of its ecosystem continues to present significant attack surfaces for threat actors seeking unauthorized access or data exfiltration.

CVE IDTitleCVSSSeverityPublished
CVE-2018-8290 Microsoft Edge和ChakraCore 缓冲区错误漏洞 — Microsoft Edge 7.5 -2018-07-11
CVE-2018-8291 Microsoft ChakraCore、Internet Explorer和Edge 缓冲区错误漏洞 — ChakraCore 7.5 -2018-07-11
CVE-2018-8294 Microsoft ChakraCore和Windows Edge 缓冲区错误漏洞 — Microsoft Edge 7.5 -2018-07-11
CVE-2018-8296 Microsoft Internet Explorer 缓冲区错误漏洞 — Internet Explorer 11 7.5 -2018-07-11
CVE-2018-8297 Microsoft Edge 信息泄露漏洞 — Microsoft Edge 4.3 -2018-07-11
CVE-2018-8298 Microsoft ChakraCore 缓冲区错误漏洞 — ChakraCore 7.5 -2018-07-11
CVE-2018-8299 Microsoft SharePoint 权限许可和访问控制漏洞 — Microsoft SharePoint 5.4 -2018-07-11
CVE-2018-8300 Microsoft SharePoint 安全漏洞 — Microsoft SharePoint 8.8 -2018-07-11
CVE-2018-8301 Microsoft Edge 缓冲区错误漏洞 — Microsoft Edge 7.5 -2018-07-11
CVE-2018-8304 Microsoft Windows DNSAPI.dll 安全漏洞 — Windows 7 5.9 -2018-07-11
CVE-2018-8305 Microsoft Windows Mail Client 信息泄露漏洞 — Mail, Calendar, and People in Windows 8.1 App Store 5.7 -2018-07-11
CVE-2018-8306 Microsoft Wireless Display Adapter V2 Software 安全漏洞 — Microsoft Wireless Display Adapter V2 Software 7.6 -2018-07-11
CVE-2018-8307 Microsoft WordPad 安全漏洞 — Windows 7 5.3 -2018-07-11
CVE-2018-8308 Microsoft Windows kernel 权限许可和访问控制问题漏洞 — Windows 7 7.0 -2018-07-11
CVE-2018-8309 Microsoft Windows 缓冲区错误漏洞 — Windows 7 5.5 -2018-07-11
CVE-2018-8310 Microsoft Outlook 输入验证错误漏洞 — Microsoft Word 5.3 -2018-07-11
CVE-2018-8311 Microsoft Lync和Skype for Business 安全漏洞 — Skype 8.8 -2018-07-11
CVE-2018-8312 Microsoft Access 缓冲区错误漏洞 — Microsoft Access 7.8 -2018-07-11
CVE-2018-8313 Microsoft Windows 权限许可和访问控制问题漏洞 — Windows Server 2012 R2 7.8 -2018-07-11
CVE-2018-8314 Microsoft Windows 权限许可和访问控制问题漏洞 — Windows 7 3.6 -2018-07-11
CVE-2018-8319 Microsoft Research JavaScript Cryptography Library 安全漏洞 — Microsoft Research JavaScript Cryptography Library 9.8 -2018-07-11
CVE-2018-8323 Microsoft SharePoint Enterprise Server 权限许可和访问控制漏洞 — Microsoft SharePoint 5.4 -2018-07-11
CVE-2018-8324 Microsoft Edge 信息泄露漏洞 — Microsoft Edge 4.3 -2018-07-11
CVE-2018-8325 Microsoft Windows Edge 信息泄露漏洞 — Microsoft Edge 4.3 -2018-07-11
CVE-2018-8326 Microsoft Active Directory Federation Services 跨站脚本漏洞 — Web Customizations 5.4 -2018-07-11
CVE-2018-8327 Microsoft PowerShell Editor Services 安全漏洞 — PowerShell Editor 9.8 -2018-07-11
CVE-2018-8356 Microsoft .NET Framework 安全漏洞 — Microsoft .NET Framework 6.2 -2018-07-11
CVE-2018-0592 Microsoft OneDrive 安全漏洞 — Microsoft OneDrive 8.4 -2018-06-26
CVE-2018-0593 Microsoft OneDrive installer 安全漏洞 — The installer of Microsoft OneDrive 7.8 -2018-06-26
CVE-2018-0594 Microsoft Skype for Windows 安全漏洞 — Skype for Windows 7.8 -2018-06-26

This page lists every published CVE security advisory associated with Microsoft. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.