Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Microsoft — Vulnerabilities & Security Advisories 9328

Browse all 9328 CVE security advisories affecting Microsoft. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Microsoft operates as a global technology corporation primarily providing enterprise software, cloud computing services, and consumer electronics. Its extensive software portfolio, including Windows operating systems and Office suites, has historically been associated with a high volume of Common Vulnerabilities and Exposures (CVEs), currently totaling 8,272. Common vulnerability classes affecting these products include remote code execution, cross-site scripting, and privilege escalation, often stemming from complex legacy codebases and extensive feature sets. Notable security incidents include the 2021 SolarWinds supply chain compromise, which impacted Microsoft’s Orion platform, and various critical zero-day exploits in Internet Explorer and Edge browsers. The company maintains a dedicated security response team and regularly issues patches through Windows Update to mitigate these risks, though the sheer scale of its ecosystem continues to present significant attack surfaces for threat actors seeking unauthorized access or data exfiltration.

CVE IDTitleCVSSSeverityPublished
CVE-2026-47636 Microsoft SharePoint Server Spoofing Vulnerability — Microsoft SharePoint Enterprise Server 2016CWE-79 5.4 Medium2026-06-09
CVE-2026-47637 Microsoft SharePoint Server Spoofing Vulnerability — Microsoft SharePoint Enterprise Server 2016CWE-79 4.6 Medium2026-06-09
CVE-2026-41098 Azure Stack Edge Spoofing Vulnerability — Azure Stack EdgeCWE-79 8.4 High2026-06-09
CVE-2026-47635 Microsoft Outlook and Word Remote Code Execution Vulnerability — Microsoft Office LTSC 2024CWE-122 8.4 High2026-06-09
CVE-2026-47298 Microsoft SharePoint Server Remote Code Execution Vulnerability — Microsoft SharePoint Enterprise Server 2016CWE-285 8.0 High2026-06-09
CVE-2026-47631 Microsoft Exchange Server Spoofing Vulnerability — Microsoft Exchange Server 2016 Cumulative Update 23CWE-79 8.1 High2026-06-09
CVE-2026-32193 Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability — Azure Kubernetes ServiceCWE-22 8.8 High2026-06-09
CVE-2026-41092 Microsoft Kinect Elevation of Privilege Vulnerability — Windows 10 Version 1607CWE-284 7.8 High2026-06-09
CVE-2026-47292 Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability — Visual Studio Code - MSSQL ExtensionCWE-829 7.8 High2026-06-09
CVE-2026-47289 Remote Desktop Client Remote Code Execution Vulnerability — Windows 10 Version 1607CWE-122 8.8 High2026-06-09
CVE-2026-47291 HTTP.sys Remote Code Execution Vulnerability — Windows 10 Version 1607CWE-190 9.8 Critical2026-06-09
CVE-2026-47288 Windows Kerberos Key Distribution Center (KDC) Remote Code Execution — Windows Server 2012CWE-190 7.1 High2026-06-09
CVE-2026-45657 Windows Kernel Remote Code Execution Vulnerability — Windows 11 version 23H2CWE-416 9.8 Critical2026-06-09
CVE-2026-47287 Visual Studio Code Tampering Vulnerability — Visual Studio CodeCWE-23 6.5 Medium2026-06-09
CVE-2026-45656 UEFI Secure Boot Security Feature Bypass Vulnerability — Windows 10 Version 1607CWE-693 7.8 High2026-06-09
CVE-2026-45655 Windows BitLocker Security Feature Bypass Vulnerability — Windows 10 Version 1607CWE-693 5.3 Medium2026-06-09
CVE-2026-45649 Office for Android Spoofing Vulnerability — Microsoft Excel for AndroidCWE-284 7.1 High2026-06-09
CVE-2026-45650 Microsoft Bing Search Spoofing Vulnerability — Microsoft Bing Search for AndroidCWE-451 4.3 Medium2026-06-09
CVE-2026-45648 Windows Active Directory Domain Services Remote Code Execution Vulnerability — Windows Server 2022CWE-121 8.8 High2026-06-09
CVE-2026-45645 Microsoft Office Remote Code Execution Vulnerability — Microsoft 365 Apps for EnterpriseCWE-822 7.8 High2026-06-09
CVE-2026-45643 Microsoft Word Remote Code Execution Vulnerability — Microsoft 365 Apps for EnterpriseCWE-822 7.8 High2026-06-09
CVE-2026-45642 Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability — Windows 10 Version 1607CWE-20 3.9 Low2026-06-09
CVE-2026-45634 Windows DHCP Client Information Disclosure Vulnerability — Windows 10 Version 1607CWE-125 5.5 Medium2026-06-09
CVE-2026-45641 Windows Hyper-V Remote Code Execution Vulnerability — Windows 10 Version 21H2CWE-843 8.4 High2026-06-09
CVE-2026-45607 Windows Hyper-V Remote Code Execution Vulnerability — Windows 10 Version 1607CWE-125 8.4 High2026-06-09
CVE-2026-45640 Windows Bluetooth Port Driver Elevation of Privilege Vulnerability — Windows 10 Version 21H2CWE-416 7.0 High2026-06-09
CVE-2026-45606 Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability — Windows 10 Version 1607CWE-125 5.5 Medium2026-06-09
CVE-2026-45639 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability — Remote Desktop client for Windows DesktopCWE-125 7.5 High2026-06-09
CVE-2026-45605 Windows Bluetooth Service Elevation of Privilege Vulnerability — Windows 10 Version 1607CWE-416 7.8 High2026-06-09
CVE-2026-45583 Microsoft Exchange Server Remote Code Execution Vulnerability — Microsoft Exchange Server 2016 Cumulative Update 23CWE-94 7.5 High2026-06-09

This page lists every published CVE security advisory associated with Microsoft. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.