Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

microsoft — Vulnerabilities & Security Advisories 8284

Browse all 8284 CVE security advisories affecting microsoft. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Microsoft operates as a global technology corporation primarily providing enterprise software, cloud computing services, and consumer electronics. Its extensive software portfolio, including Windows operating systems and Office suites, has historically been associated with a high volume of Common Vulnerabilities and Exposures (CVEs), currently totaling 8,272. Common vulnerability classes affecting these products include remote code execution, cross-site scripting, and privilege escalation, often stemming from complex legacy codebases and extensive feature sets. Notable security incidents include the 2021 SolarWinds supply chain compromise, which impacted Microsoft’s Orion platform, and various critical zero-day exploits in Internet Explorer and Edge browsers. The company maintains a dedicated security response team and regularly issues patches through Windows Update to mitigate these risks, though the sheer scale of its ecosystem continues to present significant attack surfaces for threat actors seeking unauthorized access or data exfiltration.

CVE IDTitleCVSSSeverityPublished
CVE-2025-55336 Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability — Windows 10 Version 1809CWE-200 5.5 Medium2025-10-14
CVE-2025-55333 Windows BitLocker Security Feature Bypass Vulnerability — Windows 10 Version 1507CWE-1023 6.1 Medium2025-10-14
CVE-2025-55325 Windows Storage Management Provider Information Disclosure Vulnerability — Windows 10 Version 1507CWE-126 5.5 Medium2025-10-14
CVE-2025-55320 Configuration Manager Elevation of Privilege Vulnerability — Microsoft Configuration ManagerCWE-89 6.8 Medium2025-10-14
CVE-2025-24052 Windows Agere Modem Driver Elevation of Privilege Vulnerability — Windows 10 Version 1507CWE-121 7.8 High2025-10-14
CVE-2025-24990 Windows Agere Modem Driver Elevation of Privilege Vulnerability — Windows 10 Version 1507CWE-822 7.8 High2025-10-14
CVE-2025-55247 .NET Elevation of Privilege Vulnerability — .NET 8.0CWE-59 7.3 High2025-10-14
CVE-2025-55315 ASP.NET Security Feature Bypass Vulnerability — ASP.NET Core 2.3CWE-444 9.9 Critical2025-10-14
CVE-2025-50174 Windows Device Association Broker Service Elevation of Privilege Vulnerability — Windows 11 Version 24H2CWE-416 7.0 High2025-10-14
CVE-2025-53782 Microsoft Exchange Server Elevation of Privilege Vulnerability — Microsoft Exchange Server 2016 Cumulative Update 23CWE-303 8.4 High2025-10-14
CVE-2025-48004 Microsoft Brokering File System Elevation of Privilege Vulnerability — Windows 11 version 22H2CWE-416 7.4 High2025-10-14
CVE-2025-47989 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability — Arc Enabled Servers - Azure Connected Machine AgentCWE-284 7.0 High2025-10-14
CVE-2025-59286 Copilot Information Disclosure Vulnerability — Microsoft 365 Copilot's Business ChatCWE-77 9.3 Critical2025-10-09
CVE-2025-59271 Redis Enterprise Elevation of Privilege Vulnerability — Azure Cache for Redis EnterpriseCWE-285 8.7 High2025-10-09
CVE-2025-59272 Copilot Information Disclosure Vulnerability — Microsoft 365 Copilot's Business ChatCWE-77 9.3 Critical2025-10-09
CVE-2025-59252 M365 Copilot Information Disclosure Vulnerability — Microsoft 365 Word CopilotCWE-77 9.3 Critical2025-10-09
CVE-2025-55321 Azure Monitor Log Analytics Spoofing Vulnerability — Azure MonitorCWE-79 9.3 Critical2025-10-09
CVE-2025-59247 Azure PlayFab Elevation of Privilege Vulnerability — Azure PlayFabCWE-269 8.8 High2025-10-09
CVE-2025-59246 Azure Entra ID Elevation of Privilege Vulnerability — Microsoft EntraCWE-306 9.8 Critical2025-10-09
CVE-2025-59218 Azure Entra ID Elevation of Privilege Vulnerability — Microsoft EntraCWE-284 9.6 Critical2025-10-09
CVE-2025-55322 OmniParser Remote Code Execution Vulnerability — OmniParserCWE-1327 7.3 High2025-09-24
CVE-2025-59251 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability — Microsoft Edge (Chromium-based)CWE-121 7.6 High2025-09-24
CVE-2025-59220 Windows Bluetooth Service Elevation of Privilege Vulnerability — Windows 10 Version 21H2CWE-362 7.0 High2025-09-18
CVE-2025-59216 Windows Graphics Component Elevation of Privilege Vulnerability — Windows 11 Version 24H2CWE-362 7.0 High2025-09-18
CVE-2025-59215 Windows Graphics Component Elevation of Privilege Vulnerability — Windows 11 Version 24H2CWE-416 7.0 High2025-09-18
CVE-2025-49728 Microsoft PC Manager Security Feature Bypass Vulnerability — Microsoft PC ManagerCWE-312 4.0 Medium2025-09-16
CVE-2025-47967 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability — Microsoft Edge (Chromium-based)CWE-357 4.7 Medium2025-09-16
CVE-2025-55319 Agentic AI and Visual Studio Code Remote Code Execution Vulnerability — Visual Studio CodeCWE-77 8.8 High2025-09-12
CVE-2025-55234 Windows SMB Elevation of Privilege Vulnerability — Windows 10 Version 1507CWE-287 8.8 High2025-09-09
CVE-2025-55227 Microsoft SQL Server Elevation of Privilege Vulnerability — Microsoft SQL Server 2016 Service Pack 3 (GDR)CWE-77 8.8 High2025-09-09

This page lists every published CVE security advisory associated with microsoft. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.