Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

Microsoft — Vulnerabilities & Security Advisories 8419

Browse all 8419 CVE security advisories affecting Microsoft. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Microsoft operates as a global technology corporation primarily providing enterprise software, cloud computing services, and consumer electronics. Its extensive software portfolio, including Windows operating systems and Office suites, has historically been associated with a high volume of Common Vulnerabilities and Exposures (CVEs), currently totaling 8,272. Common vulnerability classes affecting these products include remote code execution, cross-site scripting, and privilege escalation, often stemming from complex legacy codebases and extensive feature sets. Notable security incidents include the 2021 SolarWinds supply chain compromise, which impacted Microsoft’s Orion platform, and various critical zero-day exploits in Internet Explorer and Edge browsers. The company maintains a dedicated security response team and regularly issues patches through Windows Update to mitigate these risks, though the sheer scale of its ecosystem continues to present significant attack surfaces for threat actors seeking unauthorized access or data exfiltration.

CVE IDTitleCVSSSeverityPublished
CVE-2024-37985 Windows Kernel Information Disclosure Vulnerability — Windows 11 version 22H2CWE-1037 5.9 Medium2024-09-17
CVE-2024-43460 Dynamics 365 Business Central Elevation of Privilege Vulnerability — Dynamics 365 Business Central OnlineCWE-285 8.1 High2024-09-17
CVE-2024-38183 GroupMe Elevation of Privilege Vulnerability — GroupMeCWE-918 9.8 Critical2024-09-17
CVE-2024-45383 Microsoft High Definition Audio Bus Driver 安全漏洞 — HDAudBus.sysCWE-664 5.0 Medium2024-09-12
CVE-2024-38222 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability — Microsoft Edge (Chromium-based)CWE-276 6.5 Medium2024-09-12
CVE-2024-38194 Azure Web Apps Elevation of Privilege Vulnerability — Azure Web AppsCWE-20 8.4 High2024-09-10
CVE-2024-37980 Microsoft SQL Server Elevation of Privilege Vulnerability — Microsoft SQL Server 2017 (GDR)CWE-269 8.8 High2024-09-10
CVE-2024-43495 Windows libarchive Remote Code Execution Vulnerability — Windows 11 version 22H2CWE-190 7.3 High2024-09-10
CVE-2024-43487 Windows Mark of the Web Security Feature Bypass Vulnerability — Windows 10 Version 1809CWE-693 6.5 Medium2024-09-10
CVE-2024-43491 Microsoft Windows Update Remote Code Execution Vulnerability — Windows 10 Version 1507CWE-416 9.8 Critical2024-09-10
CVE-2024-30073 Windows Security Zone Mapping Security Feature Bypass Vulnerability — Windows 11 Version 24H2CWE-41 7.8 High2024-09-10
CVE-2024-43479 Microsoft Power Automate Desktop Remote Code Execution Vulnerability — Power Automate for DesktopCWE-284 8.5 High2024-09-10
CVE-2024-43476 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability — Microsoft Dynamics 365 (on-premises) version 9.1CWE-79 7.6 High2024-09-10
CVE-2024-43475 Microsoft Windows Admin Center Information Disclosure Vulnerability — Windows Server 2008 Service Pack 2CWE-126 7.3 High2024-09-10
CVE-2024-43469 Azure CycleCloud Remote Code Execution Vulnerability — Azure CycleCloud 8.2.0CWE-94 8.8 High2024-09-10
CVE-2024-43470 Azure Network Watcher VM Agent Elevation of Privilege Vulnerability — Azure Network Watcher VM ExtensionCWE-59 7.3 High2024-09-10
CVE-2024-43466 Microsoft SharePoint Server Denial of Service Vulnerability — Microsoft SharePoint Enterprise Server 2016CWE-502 6.5 Medium2024-09-10
CVE-2024-43461 Windows MSHTML Platform Spoofing Vulnerability — Windows 11 Version 24H2CWE-451 8.8 High2024-09-10
CVE-2024-43458 Windows Networking Information Disclosure Vulnerability — Windows 10 Version 1607CWE-908 7.7 High2024-09-10
CVE-2024-43457 Windows Setup and Deployment Elevation of Privilege Vulnerability — Windows 11 Version 24H2CWE-428 7.8 High2024-09-10
CVE-2024-43455 Windows Remote Desktop Licensing Service Spoofing Vulnerability — Windows Server 2019CWE-20 8.8 High2024-09-10
CVE-2024-43454 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability — Windows Server 2019CWE-23 7.1 High2024-09-10
CVE-2024-38119 Windows Network Address Translation (NAT) Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-416 7.5 High2024-09-10
CVE-2024-38045 Windows TCP/IP Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-122 8.1 High2024-09-10
CVE-2024-21416 Windows TCP/IP Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-122 8.1 High2024-09-10
CVE-2024-38263 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability — Windows Server 2019CWE-591 7.5 High2024-09-10
CVE-2024-38260 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability — Windows Server 2019CWE-908 8.8 High2024-09-10
CVE-2024-38259 Microsoft Management Console Remote Code Execution Vulnerability — Windows Server 2022CWE-416 8.8 High2024-09-10
CVE-2024-38257 Microsoft AllJoyn API Information Disclosure Vulnerability — Windows 10 Version 1809CWE-908 7.5 High2024-09-10
CVE-2024-38258 Windows Remote Desktop Licensing Service Information Disclosure Vulnerability — Windows Server 2019CWE-23 6.5 Medium2024-09-10

This page lists every published CVE security advisory associated with Microsoft. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.