Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Microsoft — Vulnerabilities & Security Advisories 9361

Browse all 9361 CVE security advisories affecting Microsoft. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Microsoft operates as a global technology corporation primarily providing enterprise software, cloud computing services, and consumer electronics. Its extensive software portfolio, including Windows operating systems and Office suites, has historically been associated with a high volume of Common Vulnerabilities and Exposures (CVEs), currently totaling 8,272. Common vulnerability classes affecting these products include remote code execution, cross-site scripting, and privilege escalation, often stemming from complex legacy codebases and extensive feature sets. Notable security incidents include the 2021 SolarWinds supply chain compromise, which impacted Microsoft’s Orion platform, and various critical zero-day exploits in Internet Explorer and Edge browsers. The company maintains a dedicated security response team and regularly issues patches through Windows Update to mitigate these risks, though the sheer scale of its ecosystem continues to present significant attack surfaces for threat actors seeking unauthorized access or data exfiltration.

CVE IDTitleCVSSSeverityPublished
CVE-2025-55320 Configuration Manager Elevation of Privilege Vulnerability — Microsoft Configuration ManagerCWE-89 6.8 Medium2025-10-14
CVE-2025-24052 Windows Agere Modem Driver Elevation of Privilege Vulnerability — Windows 10 Version 1507CWE-121 7.8 High2025-10-14
CVE-2025-24990 Windows Agere Modem Driver Elevation of Privilege Vulnerability — Windows 10 Version 1507CWE-822 7.8 High2025-10-14
CVE-2025-55247 .NET Elevation of Privilege Vulnerability — .NET 8.0CWE-59 7.3 High2025-10-14
CVE-2025-55315 ASP.NET Security Feature Bypass Vulnerability — ASP.NET Core 2.3CWE-444 9.9 Critical2025-10-14
CVE-2025-50174 Windows Device Association Broker Service Elevation of Privilege Vulnerability — Windows 11 Version 24H2CWE-416 7.0 High2025-10-14
CVE-2025-53782 Microsoft Exchange Server Elevation of Privilege Vulnerability — Microsoft Exchange Server 2016 Cumulative Update 23CWE-303 8.4 High2025-10-14
CVE-2025-48004 Microsoft Brokering File System Elevation of Privilege Vulnerability — Windows 11 version 22H2CWE-416 7.4 High2025-10-14
CVE-2025-47989 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability — Arc Enabled Servers - Azure Connected Machine AgentCWE-284 7.0 High2025-10-14
CVE-2025-59286 Copilot Information Disclosure Vulnerability — Microsoft 365 Copilot's Business ChatCWE-77 9.3 Critical2025-10-09
CVE-2025-59272 Copilot Information Disclosure Vulnerability — Microsoft 365 Copilot's Business ChatCWE-77 9.3 Critical2025-10-09
CVE-2025-59271 Redis Enterprise Elevation of Privilege Vulnerability — Azure Cache for Redis EnterpriseCWE-285 8.7 High2025-10-09
CVE-2025-59252 M365 Copilot Information Disclosure Vulnerability — Microsoft 365 Word CopilotCWE-77 9.3 Critical2025-10-09
CVE-2025-55321 Azure Monitor Log Analytics Spoofing Vulnerability — Azure MonitorCWE-79 9.3 Critical2025-10-09
CVE-2025-59247 Azure PlayFab Elevation of Privilege Vulnerability — Azure PlayFabCWE-269 8.8 High2025-10-09
CVE-2025-59246 Azure Entra ID Elevation of Privilege Vulnerability — Microsoft EntraCWE-306 9.8 Critical2025-10-09
CVE-2025-59218 Azure Entra ID Elevation of Privilege Vulnerability — Microsoft EntraCWE-284 9.6 Critical2025-10-09
CVE-2025-59251 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability — Microsoft Edge (Chromium-based)CWE-121 7.6 High2025-09-24
CVE-2025-55322 OmniParser Remote Code Execution Vulnerability — OmniParserCWE-1327 7.3 High2025-09-24
CVE-2025-59220 Windows Bluetooth Service Elevation of Privilege Vulnerability — Windows 10 Version 21H2CWE-362 7.0 High2025-09-18
CVE-2025-59216 Windows Graphics Component Elevation of Privilege Vulnerability — Windows 11 Version 24H2CWE-362 7.0 High2025-09-18
CVE-2025-59215 Windows Graphics Component Elevation of Privilege Vulnerability — Windows 11 Version 24H2CWE-416 7.0 High2025-09-18
CVE-2025-47967 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability — Microsoft Edge (Chromium-based)CWE-357 4.7 Medium2025-09-16
CVE-2025-49728 Microsoft PC Manager Security Feature Bypass Vulnerability — Microsoft PC ManagerCWE-312 4.0 Medium2025-09-16
CVE-2025-55319 Agentic AI and Visual Studio Code Remote Code Execution Vulnerability — Visual Studio CodeCWE-77 8.8 High2025-09-12
CVE-2025-55234 Windows SMB Elevation of Privilege Vulnerability — Windows 10 Version 1507CWE-287 8.8 High2025-09-09
CVE-2025-55227 Microsoft SQL Server Elevation of Privilege Vulnerability — Microsoft SQL Server 2016 Service Pack 3 (GDR)CWE-77 8.8 High2025-09-09
CVE-2025-55224 Windows Hyper-V Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-362 7.8 High2025-09-09
CVE-2025-54917 MapUrlToZone Security Feature Bypass Vulnerability — Windows 10 Version 1507CWE-693 4.3 Medium2025-09-09
CVE-2025-54915 Windows Defender Firewall Service Elevation of Privilege Vulnerability — Windows 10 Version 1507CWE-843 6.7 Medium2025-09-09

This page lists every published CVE security advisory associated with Microsoft. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.