Microsoft Vulnerabilities
225 vulnerabilities related to Microsoft
- PoC2026-08-16CVE-2026-58644: Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCE
- 2026-08-14Microsoft SharePoint /_layouts/15/ToolPane.aspx 代码执行漏洞（CVE-2025-53770）
- 2026-08-14Microsoft SharePoint Server /_trust/default.aspx 代码执行漏洞（CVE-2026-50522）
- 2026-08-14Microsoft SharePoint Server JWT 权限绕过漏洞（CVE-2026-55040）
- PoC2026-02-24CVE-2021-28480: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)
- PoC2026-02-24CVE-2021-28481: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)
- PoC2025-12-12sharepoint-lists-api-disclosure: Microsoft SharePoint - List API Disclosure
- PoC2025-12-02sharepoint-layouts-disclosure: Microsoft SharePoint - Layouts Disclosure
- PoC2025-12-02sharepoint-masterpage-disclosure: Microsoft SharePoint - Master Page Disclosure
- PoC2025-12-02sharepoint-site-metadata-disclosure: Microsoft SharePoint - Site Metadata Disclosure
- PoC2025-12-02sharepoint-sitepages-disclosure: Microsoft SharePoint - Site Pages Disclosure
- PoC2025-11-21CVE-2025-49706: Microsoft SharePoint Server - Authentication Bypass
- 2025-09-09Microsoft Web Deploy 需授权 反序列化漏洞 可导致任意代码执行
- PoC2025-08-01CVE-2019-0604: Microsoft SharePoint - Remote Code Execution
- PoC2025-08-01CVE-2020-0646: Microsoft .NET Framework - Remote Code Execution
- PoC2025-08-01CVE-2000-0114: Microsoft FrontPage Extensions - Information Disclosure
- PoC2025-08-01CVE-2008-1547: Microsoft OWA Exchange Server 2003 - 'redir.asp' Open Redirection
- PoC2025-08-01CVE-2015-1635: Microsoft Windows 'HTTP.sys' - Remote Code Execution
- PoC2025-08-01CVE-2020-0618: Microsoft SQL Server Reporting Services - Remote Code Execution
- PoC2025-08-01CVE-2020-16952: Microsoft SharePoint - Remote Code Execution
- PoC2025-08-01CVE-2021-26855: Microsoft Exchange Server SSRF Vulnerability
- PoC2025-08-01CVE-2021-31195: Microsoft Exchange Server - Cross-Site Scripting
- PoC2025-08-01CVE-2021-38647: Microsoft Open Management Infrastructure - Remote Code Execution
- PoC2025-08-01CVE-2021-41349: Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting
- PoC2025-08-01CVE-2023-29357: Microsoft SharePoint - Authentication Bypass
- PoC2025-08-01CVE-2025-53770: Microsoft SharePoint Server - Remote Code Execution (ToolShell)
- PoC2025-08-01CVE-2020-0796: Microsoft SMBv3 - Remote Code Execution
- PoC2025-08-01CVE-2021-26855: Microsoft Exchange Server Remote Code Execution
- PoC2025-08-01CVE-2021-41349: Microsoft Exchange Server Pre-Auth POST Based Reflected Cross-Site Scripting
- PoC2025-08-01mssql-audit-disabled: Microsoft SQLServer Database Instances - SQL Auditing Disabled
- PoC2025-08-01CVE-2022-41040: Microsoft Exchange SSRF
- PoC2025-08-01CVE-2023-29357: Microsoft SharePoint - Authentication Bypass
- PoC2025-08-01CVE-2025-53770: Microsoft SharePointServer 远程命令执行漏洞
- PoC2025-08-01azure-vm-entra-id-unenabled: Azure VM Microsoft Entra ID Authentication Not Enabled
- PoC2025-08-01microsoft-api-csp-bypass: Content-Security-Policy Bypass - Microsoft API
- PoC2025-08-01azure-takeover-detection: Microsoft Azure Takeover Detection
- PoC2025-08-01CVE-2021-33766: Microsoft Exchange - Authentication Bypass
- PoC2025-08-01mdb-database-file: Microsoft Access Database File - Detect
- PoC2025-08-01anonymous-distribution-point-sccm: Microsoft SCCM - Anonymous Distribution Point Access
- PoC2025-08-01ms-front-page-misconfig: Microsoft FrontPage Configuration - Exposure
- PoC2025-08-01mssql-default-logins: Microsoft Sql - Default Logins
- PoC2025-08-01CVE-2025-53771: Microsoft SharePoint Server - Authentication Bypass (ToolShell)
- PoC2025-08-01microsoft-exchange-panel: Microsoft Exchange Control Panel
- 2025-07-22Microsoft SharePoint 远程代码执行(CVE-2025-53770)
- PoC2025-07-21Microsoft SharePoint 远程代码执行漏洞
- 2025-06-10Microsoft Power Automate 信息泄露漏洞
- 2025-04-11Microsoft Win32k 资源管理错误漏洞
- 2025-04-11Microsoft Office 资源管理错误漏洞
- 2025-04-11Microsoft Lightweight Directory Access Protocol（LDAP） 资源管理错误漏洞
- 2025-04-11Microsoft Office 资源管理错误漏洞
- 2025-04-11Microsoft Office 资源管理错误漏洞
- 2025-04-11Microsoft Office 资源管理错误漏洞
- 2025-04-11Microsoft Hyper-V 资源管理错误漏洞
- 2025-04-11Microsoft Office 资源管理错误漏洞
- 2025-04-11Microsoft Win32k 资源管理错误漏洞
- 2025-04-11Microsoft Office 资源管理错误漏洞
- 2025-04-11Microsoft Office 资源管理错误漏洞
- 2025-04-11Microsoft Lightweight Directory Access Protocol（LDAP） 资源管理错误漏洞
- 2025-04-11Microsoft Office 资源管理错误漏洞
- 2025-04-11Microsoft Lightweight Directory Access Protocol（LDAP） 资源管理错误漏洞
- 2025-02-14Microsoft Excel 资源管理错误漏洞
- 2025-02-14Microsoft Office 资源管理错误漏洞
- 2025-02-14Microsoft Excel 资源管理错误漏洞
- 2025-01-16Microsoft Brokering File System 资源管理错误漏洞
- 2025-01-16Microsoft Message Queuing 资源管理错误漏洞
- 2025-01-16Microsoft Power Automate 代码注入漏洞
- 2025-01-16Microsoft Active Directory Federation Services 跨站请求伪造漏洞
- 2025-01-16Microsoft SharePoint 跨站脚本漏洞
- 2024-12-11Microsoft Message Queuing 未授权 UAF漏洞 可导致远程代码执行
- 2024-11-13Microsoft .NET/Visual Studio 类型混淆漏洞 可导致远程代码执行
- 2024-11-13Microsoft Airlift.microsoft.com 身份验证错误漏洞 可导致权限提升
- 2024-10-23Microsoft Remote Registry Service 设计缺陷漏洞 可致权限提升
- 2024-10-09Microsoft Configuration Manager SQL注入漏洞 可导致远程代码执行
- 2024-10-09Microsoft Visual Studio Code Arduino扩展 权限管理不当漏洞 可导致远程代码执行
- 2024-10-09Microsoft Management Console 输入验证不当漏洞 可导致代码执行
- 2024-10-09Microsoft Winlogon 权限管理不当漏洞 可导致权限提升
- 2024-10-09Microsoft Office 访问控制不当漏洞
- 2024-08-17Microsoft多款产品 资源管理错误漏洞
- 2024-08-17Microsoft Line Printer Daemon Service 资源管理错误漏洞
- 2024-08-17Microsoft DWM Core Library 资源管理错误漏洞
- 2024-08-17Microsoft Office 后置链接漏洞
- 2024-08-17Microsoft Office PowerPoint 资源管理错误漏洞
- 2024-08-17Microsoft DWM Core Library 资源管理错误漏洞
- 2024-08-14Microsoft Edge 脚本引擎 缓冲区操作限制不当漏洞
- 2024-08-14Microsoft .NET CRLF注入任意文件写入漏洞
- 2024-08-01Microsoft Exchange PowerShell Xamlimageinfo 不安全的反序列化漏洞
- 2024-07-18微软Internet Explorer 8 IESHIMS.DLL库不安全加载漏洞
- 2024-06-28Microsoft Internet Explorer CVE-2014-6347内存损坏漏洞
- 2024-06-28Microsoft Internet Explorer CVE-2016-3298信息泄露漏洞
- 2024-06-28Microsoft Office SharePoint 服务器 help.aspx 跨站脚本漏洞
- 2024-06-28Microsoft Internet Explorer CVE-2016-3385内存损坏漏洞
- 2024-06-21Microsoft Office WordPerfect栈溢出漏洞
- 2024-06-13Microsoft Message Queuing (MSMQ) UAF漏洞
- 2024-06-13Microsoft Graphics CVE-2018-1013代码执行漏洞
- 2024-05-31Microsoft Internet Explorer CVE-2014-8966远程内存损坏漏洞
- 2024-05-31Microsoft Internet Explorer CVE-2014-8966远程内存损坏漏洞
- 2024-05-17Microsoft Exchange Server CVE-2023-36777 信息泄露漏洞
- 2024-05-17Microsoft Exchange Server CVE-2023-36756 远程代码执行漏洞
- 2024-05-16Microsoft SharePoint 远程代码执行漏洞
- 2024-04-26Microsoft OLE COleCache CVE-2023-29325 释放后重用漏洞
- 2024-04-26Microsoft OLE COleCache CVE-2023-29325 释放后重用漏洞
- 2024-04-18Microsoft Word RTF CVE-2023-21716堆损坏漏洞
- 2024-04-11Microsoft SharePoint Server CVE-2020-0693 跨站脚本漏洞
- 2024-04-11Microsoft Speech Application Programming Interface 缓冲区溢出漏洞
- 2024-04-11Microsoft Outlook CVE-2024-21413 远程代码执行漏洞
- 2024-04-11Microsoft Outlook CVE-2024-21413 远程代码执行漏洞
- 2024-04-11Microsoft Outlook CVE-2024-21413 远程代码执行漏洞
- 2024-04-11Microsoft Outlook CVE-2023-23397 权限提升漏洞
- 2024-04-03Microsoft .NET Framework XPS文件解析远程代码执行漏洞
- 2024-03-29Microsoft Visual Studio Code Remote Containers 插件远程代码执行漏洞
- 2024-03-21Microsoft SharePoint Server GenerateProxyAssembly 命令注入漏洞
- 2024-03-21Microsoft Office Excel WebCharts 越界写漏洞
- 2024-03-21Microsoft Exchange Server CVE-2023-36778 远程代码执行漏洞
- 2024-03-21Microsoft Exchange PowerShell Remoting GsmWriter不安全的反序列化漏洞
- 2024-03-21Microsoft Message Queuing远程代码执行漏洞
- 2024-03-21Microsoft Message Queuing远程代码执行漏洞
- 2024-03-21Microsoft Message Queuing远程代码执行漏洞
- 2024-03-21Microsoft Office Excel FCommitHtmlPivotCacheElement 释放后重用漏洞
- 2024-03-21Microsoft Office Excel FreePhisxdb CVE-2023-32029 远程代码执行漏洞
- 2024-03-21Microsoft Exchange PowerShell CVE-2023-36050 不安全的反序列化漏洞
- 2024-03-21Microsoft PowerShell CVE-2022-41076 代码执行漏洞
- 2024-03-21Microsoft PowerShell CVE-2022-41076 代码执行漏洞
- 2024-03-14Microsoft Exchange Server CVE-2023-36035 欺骗漏洞
- 2024-03-07Microsoft IIS 5.0 CVE-2000-0778 源代码泄露漏洞
- 2024-03-07Microsoft Browser CVE-2015-6140 内存损坏漏洞
- 2024-02-29Microsoft Edge Chakra JavaScript引擎CVE-2017-0141内存损坏漏洞
- 2024-02-29Microsoft Edge Array.join CVE-2016-7189类型混淆漏洞
- 2024-02-29Microsoft Exchange Server CVE-2023-36757 欺骗攻击漏洞
- 2024-02-22Microsoft-Outlook远程代码执行漏洞CVE-2024-21413
- 2024-02-22Microsoft SharePoint Workflow IsGoodWorkflowCore CVE-2022-44690 不安全的反序列化漏洞
- 2024-02-22Microsoft Outlook outlmime.dll Content-Type 拒绝服务漏洞
- 2024-02-22Microsoft SharePoint Workflow IsGoodWorkflowCore 不安全的反序列化漏洞
- 2024-02-22Microsoft Exchange Autodiscover 远程代码执行漏洞
- 2024-02-22Microsoft Exchange Autodiscover 远程代码执行漏洞
- 2024-02-22Microsoft Exchange Autodiscover 远程代码执行漏洞
- 2024-02-22Microsoft SharePoint Server ChartWebPartDataStorage 不安全的反序列化漏洞
- 2024-02-22Microsoft Visual Studio Code Markdown Preview Enhanced扩展命令注入漏洞
- 2024-02-22Microsoft IIS Cachuri TREE_HASH_TABLE 拒绝服务漏洞
- 2024-02-22Microsoft Exchange Server CVE-2022-41080 服务端请求伪造漏洞
- 2024-02-13Microsoft Office 远程代码执行漏洞
- 2024-02-07Microsoft SharePoint Server AdRotator NTLM Relay攻击权限提升漏洞
- 2024-02-07Microsoft Exchange Server 任意文件写入漏洞
- 2024-02-07Microsoft Exchange Server CVE-2023-21529 远程代码执行漏洞
- 2024-02-07Microsoft Exchange Server CVE-2023-36745 远程代码执行漏洞
- 2024-02-07Microsoft Outlook CVE-2023-23397 权限提升漏洞
- 2024-02-07Microsoft SharePoint CVE-2023-33157 代码执行漏洞
- 2024-02-07Microsoft Outlook CVE-2023-23397 权限提升漏洞
- 2024-02-07Microsoft Exchange Server CVE-2023-36744 远程代码执行漏洞
- 2024-02-07Microsoft SharePoint Server 不安全的反序列化漏洞
- 2024-02-07Microsoft Office CVE-2023-36413 安全功能绕过漏洞
- 2024-02-07Microsoft Exchange PowerShell Remoting Command 不安全反序列化漏洞
- 2024-02-07Microsoft Network File System CVE-2023-24941 远程代码执行漏洞
- 2024-01-18Microsoft Internet Explorer和Edge内存损坏漏洞(CVE-2017-0228)
- 2024-01-09Microsoft Office 远程代码执行漏洞
- 2023-12-20Microsoft Exchange Server 弱口令漏洞
- 2023-10-13Microsoft SharePoint Authorization 接口权限绕过漏洞（CVE-2023-29357）
- 2023-10-13Microsoft SharePoint Authorization 接口权限绕过漏洞（CVE-2023-29357）
- 2023-08-09Microsoft Exchange Server 远程代码执行漏洞
- 2023-03-14Microsoft ICMP远程代码执行漏洞
- 2022-06-04Microsoft 支持诊断工具（MSDT）远程代码执行漏洞
- 2021-11-15Microsoft Exchange XSS漏洞(CVE-2021-41349)
- 2021-11-10Microsoft Exchange Server 远程代码执行漏洞
- 2021-11-10Microsoft Exchange Server 安全漏洞
- 2021-09-15Microsoft MSHTML 远程代码执行漏洞
- 2021-08-09Microsoft Exchange ACL绕过漏洞(CVE-2021-34473)
- 2021-05-12Microsoft Exchange Server 代码注入漏洞
- 2021-03-03Microsoft Exchange Server 远程代码执行漏洞
- 2021-01-19Microsoft Server Message Block 安全漏洞(CVE-2020-0796)
- 2021-01-19Microsoft IIS 6.0 远程代码执行漏洞（CVE-2017-7269）
- 2021-01-13Microsoft Defender 远程代码执行漏洞
- 2020-09-12Microsoft OneDrive 后置链接漏洞
- 2020-09-12Microsoft OneDrive 后置链接漏洞
- 2020-08-17(CVE-2020-1337) Microsoft Windows Print Spooler 权限提升漏洞
- 2020-08-17(CVE-2020-1488) Microsoft Windows AppX Deployment Extensions 权限提升漏洞
- 2018-12-12Microsoft Edge Chakra脚本引擎内存损坏漏洞（CNVD-2019-07384）
- 2017-02-26Microsoft Internet Explorer和Edge远程代码执行漏洞（CNVD-2017-02514）
- 2016-10-14Microsoft Video Control 远程代码执行漏洞
- 2016-10-14Microsoft Internet Explorer和Edge 远程代码执行漏洞
- 2016-10-14Microsoft Edge 脚本引擎远程代码执行漏洞
- 2016-07-13Microsoft Office 远程代码执行漏洞
- 2016-05-11Microsoft Office图形远程代码执行漏洞
- 2015-08-15Microsoft Office图形组件远程代码执行漏洞
- 2015-07-31Microsoft Internet Explorer CAttrArray 释放后重用漏洞
- 2015-07-15Microsoft SQL Server 远程代码执行漏洞
- 2015-02-11Microsoft Excel 远程代码执行漏洞
- 2015-02-11Microsoft Office 远程代码执行漏洞
- 2015-02-11Microsoft Word OneTableDocumentStream 远程代码执行漏洞
- 2014-08-13Microsoft OneNote 远程代码执行漏洞
- 2013-11-06多个Microsoft产品图形组件远程代码执行漏洞
- 2013-09-18Microsoft Internet Explorer 远程代码执行漏洞
- 2012-12-12Microsoft Internet Explorer CMarkup 释放后使用远程代码执行漏洞
- 2012-12-12Microsoft Internet Explorer InjectHTMLStream 释放后使用远程代码执行漏洞
- 2012-12-12Microsoft Word RTF File ‘listoverridecount’远程代码执行漏洞
- 2012-07-11Microsoft IE 缓存对象远程代码执行漏洞
- 2012-07-11Microsoft IE属性删除远程代码执行漏洞
- 2012-06-13Microsoft Internet Explorer开发工具栏远程代码执行漏洞
- 2012-06-13Microsoft Internet Explorer ‘ame ID’属性远程代码执行漏洞
- 2012-06-13Microsoft Internet Explorer Title元素远程代码执行漏洞
- 2012-04-11Microsoft Internet Explorer 打印特性远程代码执行漏洞
- 2012-04-11Microsoft Internet Explorer VML样式远程代码执行漏洞
- 2012-04-11Microsoft .NET Framework参数验证远程代码执行漏洞
- 2012-04-11Microsoft Internet Explorer JScript9 远程代码执行漏洞
- 2012-01-11Microsoft DirectX DirectShow Filters远程代码执行漏洞
- 2011-12-14Microsoft Publisher越界数组索引远程代码执行漏洞
- 2011-12-14Microsoft Publisher无效指针远程代码执行漏洞
- 2011-10-12Microsoft IE Scroll事件远程代码执行漏洞
- 2011-09-15Microsoft Office Excel数组索引远程代码执行漏洞
- 2011-09-15Microsoft Office Excel数据解析远程代码执行漏洞
- 2011-08-11Microsoft Internet Explorer Telnet URI处理器远程代码执行漏洞
- 2011-06-17Microsoft Internet Explorer Link属性远程代码执行漏洞
- 2011-06-17Microsoft Excel错误记录解析远程代码执行漏洞
- 2011-04-14Microsoft Office Excel缓冲区分配整数溢出远程代码执行漏洞
- 2011-04-14Microsoft PowerPoint无效'PersistDirectoryEntry'记录远程代码执行漏洞
- 2011-04-14Microsoft PowerPoint无效'TimeColorBehaviorContainer'记录远程代码执行漏洞
- 2011-02-11Microsoft Internet Explorer内存远程代码执行漏洞
- 2010-10-14Microsoft Word 远程代码执行漏洞
- 2010-10-14Microsoft Word指针远程代码执行漏洞
- 2010-07-15Microsoft Office Access ActiveX控件远程代码执行漏洞
- 2010-06-09Microsoft Office COM对象验证远程代码执行漏洞
- 2010-06-09Microsoft Internet Explorer Developer Toolbar远程代码执行漏洞
- 2010-06-09Microsoft IIS认证令牌处理远程代码执行漏洞
- 2010-06-09Microsoft Office Excel DBQueryExt记录ADO对象解析远程代码执行漏洞
- 2010-06-09Microsoft IE未初始化内存远程代码执行漏洞
- 2010-06-09Microsoft Internet Explorer Developer Toolbar HTML元素远程代码执行漏洞
- 2009-12-10Microsoft IE CAttrArray对象远程代码执行漏洞