Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

microsoft — Vulnerabilities & Security Advisories 8284

Browse all 8284 CVE security advisories affecting microsoft. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Microsoft operates as a global technology corporation primarily providing enterprise software, cloud computing services, and consumer electronics. Its extensive software portfolio, including Windows operating systems and Office suites, has historically been associated with a high volume of Common Vulnerabilities and Exposures (CVEs), currently totaling 8,272. Common vulnerability classes affecting these products include remote code execution, cross-site scripting, and privilege escalation, often stemming from complex legacy codebases and extensive feature sets. Notable security incidents include the 2021 SolarWinds supply chain compromise, which impacted Microsoft’s Orion platform, and various critical zero-day exploits in Internet Explorer and Edge browsers. The company maintains a dedicated security response team and regularly issues patches through Windows Update to mitigate these risks, though the sheer scale of its ecosystem continues to present significant attack surfaces for threat actors seeking unauthorized access or data exfiltration.

CVE IDTitleCVSSSeverityPublished
CVE-2025-62473 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability — Windows 10 Version 1607CWE-126 6.5 Medium2025-12-09
CVE-2025-62470 Windows Common Log File System Driver Elevation of Privilege Vulnerability — Windows 10 Version 1607CWE-122 7.8 High2025-12-09
CVE-2025-62469 Microsoft Brokering File System Elevation of Privilege Vulnerability — Windows 11 Version 24H2CWE-362 7.0 High2025-12-09
CVE-2025-62466 Windows Client-Side Caching Elevation of Privilege Vulnerability — Windows 10 Version 1607CWE-476 7.8 High2025-12-09
CVE-2025-62458 Win32k Elevation of Privilege Vulnerability — Windows 10 Version 1607CWE-122 7.8 High2025-12-09
CVE-2025-62457 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-125 7.8 High2025-12-09
CVE-2025-62456 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability — Windows 11 version 22H3CWE-122 8.8 High2025-12-09
CVE-2025-62454 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-122 7.8 High2025-12-09
CVE-2025-62223 Microsoft Edge (Chromium-based) for Mac Spoofing Vulnerability — Microsoft Edge (Chromium-based)CWE-451 4.3 Medium2025-12-05
CVE-2025-64657 Azure Application Gateway Elevation of Privilege Vulnerability — Azure App GatewayCWE-787 9.8 Critical2025-11-26
CVE-2025-64656 Azure Application Gateway Elevation of Privilege Vulnerability — Azure App GatewayCWE-125 9.4 Critical2025-11-26
CVE-2025-62459 Microsoft Defender Portal Spoofing Vulnerability — Microsoft 365 Defender PortalCWE-79 8.3 High2025-11-20
CVE-2025-64660 GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability — Visual Studio CodeCWE-284 8.0 High2025-11-20
CVE-2025-62207 Azure Monitor Elevation of Privilege Vulnerability — Azure Monitor Control ServiceCWE-918 8.6 High2025-11-20
CVE-2025-49752 Azure Bastion Elevation of Privilege Vulnerability — Azure Bastion DeveloperCWE-294 10.0 Critical2025-11-20
CVE-2025-59245 Microsoft SharePoint Online Elevation of Privilege Vulnerability — Microsoft SharePoint OnlineCWE-502 9.8 Critical2025-11-20
CVE-2025-64655 Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability — Dynamics OmniChannel SDK Storage ContainersCWE-285 8.8 High2025-11-20
CVE-2025-30398 Nuance PowerScribe 360 Information Disclosure Vulnerability — Nuance PowerScribe 360 version 4.0.1CWE-862 8.1 High2025-11-11
CVE-2025-62453 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability — Visual Studio CodeCWE-1426 5.0 Medium2025-11-11
CVE-2025-60721 Windows Administrator Protection Elevation of Privilege Vulnerability — Windows 11 Version 24H2CWE-270 7.8 High2025-11-11
CVE-2025-62449 Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability — Microsoft Visual Studio Code CoPilot Chat ExtensionCWE-22 6.8 Medium2025-11-11
CVE-2025-62213 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability — Windows 10 Version 1607CWE-416 7.0 High2025-11-11
CVE-2025-62222 Agentic AI and Visual Studio Code Remote Code Execution Vulnerability — Microsoft Visual Studio Code CoPilot Chat ExtensionCWE-77 8.8 High2025-11-11
CVE-2025-62214 Visual Studio Remote Code Execution Vulnerability — Microsoft Visual Studio 2022 version 17.14CWE-77 6.7 Medium2025-11-11
CVE-2025-62215 Windows Kernel Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-362 7.0 High2025-11-11
CVE-2025-62211 Dynamics 365 Field Service (online) Spoofing Vulnerability — Dynamics 365 Field Service (online)CWE-79 8.7 High2025-11-11
CVE-2025-59499 Microsoft SQL Server Elevation of Privilege Vulnerability — Microsoft SQL Server 2016 Service Pack 3 (GDR)CWE-89 8.8 High2025-11-11
CVE-2025-62209 Windows License Manager Information Disclosure Vulnerability — Windows 10 Version 1507CWE-532 5.5 Medium2025-11-11
CVE-2025-62208 Windows License Manager Information Disclosure Vulnerability — Windows 10 Version 1507CWE-532 5.5 Medium2025-11-11
CVE-2025-62205 Microsoft Office Remote Code Execution Vulnerability — Microsoft 365 Apps for EnterpriseCWE-416 7.8 High2025-11-11

This page lists every published CVE security advisory associated with microsoft. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.