Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

Microsoft — Vulnerabilities & Security Advisories 8284

Browse all 8284 CVE security advisories affecting Microsoft. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Microsoft operates as a global technology corporation primarily providing enterprise software, cloud computing services, and consumer electronics. Its extensive software portfolio, including Windows operating systems and Office suites, has historically been associated with a high volume of Common Vulnerabilities and Exposures (CVEs), currently totaling 8,272. Common vulnerability classes affecting these products include remote code execution, cross-site scripting, and privilege escalation, often stemming from complex legacy codebases and extensive feature sets. Notable security incidents include the 2021 SolarWinds supply chain compromise, which impacted Microsoft’s Orion platform, and various critical zero-day exploits in Internet Explorer and Edge browsers. The company maintains a dedicated security response team and regularly issues patches through Windows Update to mitigate these risks, though the sheer scale of its ecosystem continues to present significant attack surfaces for threat actors seeking unauthorized access or data exfiltration.

CVE IDTitleCVSSSeverityPublished
CVE-2026-26123 Microsoft Authenticator Information Disclosure Vulnerability — Microsoft Authenticator for AndroidCWE-939 5.5 Medium2026-03-10
CVE-2026-26144 Microsoft Excel Information Disclosure Vulnerability — Microsoft 365 Apps for EnterpriseCWE-79 7.5 High2026-03-10
CVE-2026-26141 Hybrid Worker Extension (Arc‑enabled Windows VMs) Elevation of Privilege Vulnerability — Azure Automation Hybrid Worker Windows ExtensionCWE-287 7.8 High2026-03-10
CVE-2026-26130 ASP.NET Core Denial of Service Vulnerability — ASP.NET Core 10.0CWE-770 7.5 High2026-03-10
CVE-2026-26118 Azure MCP Server Tools Elevation of Privilege Vulnerability — Azure MCP Server Tools 1.0.0 (npm)CWE-918 8.8 High2026-03-10
CVE-2026-26117 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability — Arc Enabled Servers - Azure Connected Machine AgentCWE-288 7.8 High2026-03-10
CVE-2026-26110 Microsoft Office Remote Code Execution Vulnerability — Microsoft 365 Apps for EnterpriseCWE-843 8.4 High2026-03-10
CVE-2026-26109 Microsoft Excel Remote Code Execution Vulnerability — Microsoft 365 Apps for EnterpriseCWE-125 8.4 High2026-03-10
CVE-2026-26108 Microsoft Excel Remote Code Execution Vulnerability — Microsoft 365 Apps for EnterpriseCWE-122 7.8 High2026-03-10
CVE-2026-26107 Microsoft Excel Remote Code Execution Vulnerability — Microsoft 365 Apps for EnterpriseCWE-416 7.8 High2026-03-10
CVE-2026-26106 Microsoft SharePoint Server Remote Code Execution Vulnerability — Microsoft SharePoint Enterprise Server 2016CWE-20 8.8 High2026-03-10
CVE-2026-23665 Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability — Azure Linux Virtual Machines with Azure Diagnostics extensionCWE-122 7.8 High2026-03-10
CVE-2026-23662 Azure IoT Explorer Information Disclosure Vulnerability — Azure IoT ExplorerCWE-306 7.5 High2026-03-10
CVE-2026-23661 Azure IoT Explorer Information Disclosure Vulnerability — Azure IoT ExplorerCWE-319 7.5 High2026-03-10
CVE-2026-26148 Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability — Microsoft Azure AD SSH Login extension for LinuxCWE-454 8.1 High2026-03-10
CVE-2026-23654 GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability — GitHub Repo: Zero Shot scFoundationCWE-1395 8.8 High2026-03-10
CVE-2026-26127 .NET Denial of Service Vulnerability — .NET 10.0CWE-125 7.5 High2026-03-10
CVE-2026-23674 MapUrlToZone Security Feature Bypass Vulnerability — Windows 10 Version 1607CWE-41 7.5 High2026-03-10
CVE-2026-26134 Microsoft Office Elevation of Privilege Vulnerability — Microsoft Office for AndroidCWE-190 7.8 High2026-03-10
CVE-2026-26132 Windows Kernel Elevation of Privilege Vulnerability — Windows 10 Version 21H2CWE-416 7.8 High2026-03-10
CVE-2026-26128 Windows SMB Server Elevation of Privilege Vulnerability — Windows 10 Version 1607CWE-287 7.8 High2026-03-10
CVE-2026-26131 .NET Elevation of Privilege Vulnerability — .NET 10.0CWE-276 7.8 High2026-03-10
CVE-2026-26116 SQL Server Elevation of Privilege Vulnerability — Microsoft SQL Server 2025 (CU 2)CWE-89 8.8 High2026-03-10
CVE-2026-26115 SQL Server Elevation of Privilege Vulnerability — Microsoft SQL Server 2016 Service Pack 3 (GDR)CWE-1287 8.8 High2026-03-10
CVE-2026-26121 Azure IOT Explorer Spoofing Vulnerability — Azure IoT ExplorerCWE-918 7.5 High2026-03-10
CVE-2026-20967 System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability — System Center Operations Manager 2019CWE-20 8.8 High2026-03-10
CVE-2026-26114 Microsoft SharePoint Server Remote Code Execution Vulnerability — Microsoft SharePoint Enterprise Server 2016CWE-502 8.8 High2026-03-10
CVE-2026-23656 Windows App Installer Spoofing Vulnerability — Windows App Client for Windows DesktopCWE-345 5.9 Medium2026-03-10
CVE-2026-26113 Microsoft Office Remote Code Execution Vulnerability — Microsoft 365 Apps for EnterpriseCWE-822 8.4 High2026-03-10
CVE-2026-26112 Microsoft Excel Remote Code Execution Vulnerability — Microsoft 365 Apps for EnterpriseCWE-822 7.8 High2026-03-10

This page lists every published CVE security advisory associated with Microsoft. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.