Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

microsoft — Vulnerabilities & Security Advisories 8415

Browse all 8415 CVE security advisories affecting microsoft. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Microsoft operates as a global technology corporation primarily providing enterprise software, cloud computing services, and consumer electronics. Its extensive software portfolio, including Windows operating systems and Office suites, has historically been associated with a high volume of Common Vulnerabilities and Exposures (CVEs), currently totaling 8,272. Common vulnerability classes affecting these products include remote code execution, cross-site scripting, and privilege escalation, often stemming from complex legacy codebases and extensive feature sets. Notable security incidents include the 2021 SolarWinds supply chain compromise, which impacted Microsoft’s Orion platform, and various critical zero-day exploits in Internet Explorer and Edge browsers. The company maintains a dedicated security response team and regularly issues patches through Windows Update to mitigate these risks, though the sheer scale of its ecosystem continues to present significant attack surfaces for threat actors seeking unauthorized access or data exfiltration.

CVE IDTitleCVSSSeverityPublished
CVE-2024-21344 Windows Network Address Translation (NAT) Denial of Service Vulnerability — Windows 10 Version 1809CWE-125 5.9 Medium2024-02-13
CVE-2024-21341 Windows Kernel Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-122 6.8 Medium2024-02-13
CVE-2024-21342 Windows DNS Client Denial of Service Vulnerability — Windows 11 version 22H2CWE-400 7.5 High2024-02-13
CVE-2024-21339 Windows USB Generic Parent Driver Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-416 6.4 Medium2024-02-13
CVE-2024-21328 Dynamics 365 Sales Spoofing Vulnerability — Microsoft Dynamics 365 (on-premises) version 9.1CWE-79 7.6 High2024-02-13
CVE-2024-20684 Windows Hyper-V Denial of Service Vulnerability — Windows Server 2022CWE-20 6.5 Medium2024-02-13
CVE-2024-21315 Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability — Microsoft Defender for Endpoint for WindowsCWE-20 7.8 High2024-02-13
CVE-2024-20695 Skype for Business Information Disclosure Vulnerability — Skype for Business Server 2019 CU7CWE-284 5.7 Medium2024-02-13
CVE-2024-21304 Trusted Compute Base Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-20 4.1 Medium2024-02-13
CVE-2024-20673 Microsoft Office Remote Code Execution Vulnerability — Microsoft Office 2019CWE-693 7.8 High2024-02-13
CVE-2024-20679 Azure Stack Hub Spoofing Vulnerability — Azure Stack HubCWE-79 6.5 Medium2024-02-13
CVE-2024-21413 Microsoft Outlook Remote Code Execution Vulnerability — Microsoft Office 2019CWE-20 9.8 Critical2024-02-13
CVE-2024-21420 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-190 8.8 High2024-02-13
CVE-2024-21402 Microsoft Outlook Elevation of Privilege Vulnerability — Microsoft 365 Apps for EnterpriseCWE-285 7.1 High2024-02-13
CVE-2024-21404 .NET Denial of Service Vulnerability — .NET 6.0CWE-476 7.5 High2024-02-13
CVE-2024-21396 Dynamics 365 Sales Spoofing Vulnerability — Microsoft Dynamics 365 (on-premises) version 9.1CWE-79 7.6 High2024-02-13
CVE-2024-21401 Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability — EntraCWE-284 9.8 Critical2024-02-13
CVE-2024-21394 Dynamics 365 Field Service Spoofing Vulnerability — Microsoft Dynamics 365 (on-premises) version 9.1CWE-79 7.6 High2024-02-13
CVE-2024-21389 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability — Microsoft Dynamics 365 (on-premises) version 9.1CWE-79 7.6 High2024-02-13
CVE-2024-21393 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability — Microsoft Dynamics 365 (on-premises) version 9.1CWE-79 7.6 High2024-02-13
CVE-2024-21381 Microsoft Azure Active Directory B2C Spoofing Vulnerability — EntraCWE-352 6.8 Medium2024-02-13
CVE-2024-21386 .NET Denial of Service Vulnerability — ASP.NET Core 6.0CWE-400 7.5 High2024-02-13
CVE-2024-21379 Microsoft Word Remote Code Execution Vulnerability — Microsoft Office 2019CWE-190 7.8 High2024-02-13
CVE-2024-21372 Windows OLE Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-190 8.8 High2024-02-13
CVE-2024-21375 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-416 8.8 High2024-02-13
CVE-2024-21369 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-122 8.8 High2024-02-13
CVE-2024-21371 Windows Kernel Elevation of Privilege Vulnerability — Windows 10 Version 1809CWE-367 7.0 High2024-02-13
CVE-2024-21361 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-122 8.8 High2024-02-13
CVE-2024-21366 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-122 8.8 High2024-02-13
CVE-2024-21360 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability — Windows 10 Version 1809CWE-122 8.8 High2024-02-13

This page lists every published CVE security advisory associated with microsoft. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.