【安全更新】微软8月安全更新多个产品高危漏洞通告

绿盟科技CERT · 2026-08-13 10:11 · 6 阅读

NS-CERT 2026-08-13 10:11 四川

8月12日，绿盟科技CERT监测到微软发布8月安全更新补丁，修复了421个安全问题，涉及Windows、Microsoft Office、Azure、Visual Studio Code、Microsoft Exchange Server等广泛使用的产品，其中包括权限提升、远程代码执行等高危漏洞类型。

通告编号 NS-2026-0018

2026-08-12

TAG：	安全更新、Windows、Office、Azure、Visual Studio Code
漏洞危害：	攻击者利用本次安全更新中的漏洞，可造成权限提升、远程代码执行等
版本：	1.0

漏洞概述

本月微软月度更新修复的漏洞中，严重程度为关键（Critical）的漏洞有62个，重要（Important）漏洞有358个，中危（Moderate）漏洞有1个。其中包括1个已检测到在野利用的漏洞：

Windows Ancillary Function Driver for WinSock权限提升漏洞（CVE-2026-68820）

请相关用户尽快更新补丁进行防护，完整漏洞列表请参考附录。

参考链接：

https://msrc.microsoft.com/update-guide/releaseNote/2026-Aug

SEE MORE →

2重点漏洞简述

根据产品流行度和漏洞重要性筛选出此次更新中包含影响较大的漏洞，请相关用户重点进行关注：

Windows Ancillary Function Driver for WinSock权限提升漏洞（CVE-2026-68820）:

由于Windows套接字驱动(afd.sys)存在释放后重使用(Use-After-Free)问题，经过身份验证的本地攻击者在系统上运行特制的恶意程序引发条件竞争，从而获得系统SYSTEM权限。该漏洞存在在野利用，CVSS评分7.0。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68820

Windows User Profile Service权限提升漏洞（CVE-2026-62832）：

Windows用户配置文件服务存在权限提升漏洞，经过身份验证的攻击者可构造特殊的符号链接指向另一个高权限用户的注册表配置单元文件，从而实现权限提升。CVSS评分7.8。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62832

Windows DHCP Server远程代码执行漏洞（CVE-2026-62823）：

由于Windows DHCP服务器中存在基于堆的缓冲区溢出漏洞，未经身份验证的攻击者可在相邻网络中执行代码，CVSS评分8.8。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62823

Windows 部署服务 TFTP 服务器远程代码执行漏洞（CVE-2026-62893）:

由于Windows部署服务TFTP服务器中存在释放后使用 (Use-After-Free) 问题，未经身份验证的攻击者可通过网络向TFTP服务发送特制请求，从而实现远程代码执行。CVSS评分9.8。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62893

Windows DNS Server远程代码执行漏洞（CVE-2026-62817）:

由于Windows DNS服务存在越界写入 (Out-of-bounds write) 漏洞，未经身份验证的攻击者可通过网络向DNS服务器发送特制的请求，从而在目标系统上执行任意代码。CVSS评分为8.8。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62817

Windows 可靠多播传输驱动程序 (RMCAST) 远程代码执行漏洞（CVE-2026-62816）:

由于Windows可靠多播传输驱动中存在堆缓冲区溢出 (Heap-based Buffer Overflow) 漏洞，相邻网络中未经身份验证的攻击者可通过发送一系列特制的PGM数据包，从而在目标系统上执行任意代码。CVSS评分8.8。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62816

Microsoft Excel远程代码执行漏洞（CVE-2026-68804）:

由于Microsoft Office Excel在解析文件时存在数字截断错误，攻击者可以构造特制的恶意文件，利用操控的数值触发堆缓冲区溢出，从而在目标系统上执行任意代码。CVSS评分7.8。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68804

Microsoft Office图形组件远程代码执行漏洞（CVE-2026-63526）:

由于Microsoft Office中的基于栈的缓冲区溢出漏洞，攻击者可通过发送特制的恶意Office文件诱导用户打开或预览窗格，从而执行任意代码。CVSS评分7.8。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63526

Windows GDI+权限提升漏洞（CVE-2026-62890/CVE-2026-62822）:

Windows GDI+ 存在堆缓冲区溢出漏洞，由于Windows GDI+在解析特定图形内容时未能正确验证输入数据的大小，经过身份验证的本地攻击者可利用此漏洞执行任意代码，从而获取系统SYSTEM权限。CVSS评分7.8/8.8。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62890

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62822

Windows DNS服务器远程代码执行漏洞（CVE-2026-62878）:

由于Windows DNS服务器中存在远程代码执行漏洞，未经身份验证的攻击者只需向目标DNS服务器发送特制的网络请求，从而执行任意代码。CVSS评分9.8。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62878

Microsoft Excel 远程代码执行漏洞（CVE-2026-68794/CVE-2026-68816）:

由于Microsoft Excel中存在缓冲区溢出漏洞，未经身份验证的攻击者可诱导用户打开特制的恶意文件，从而实现远程代码执行。CVSS评分7.8。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68794

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68816

Microsoft Office Word远程代码执行漏洞（CVE-2026-63518/CVE-2026-63525/CVE-2026-64907）:

由于Microsoft Office Word中存在缓冲区溢出或数值截断错误漏洞，未经身份验证的攻击者可诱导用户打开特制的恶意文件，从而实现远程代码执行。CVSS评分7.8。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63518

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63525

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64907

Microsoft Office 远程代码执行漏洞（CVE-2026-63515/CVE-2026-70130/CVE-2026-63532/CVE-2026-64898/CVE-2026-64903/CVE-2026-64909/CVE-2026-64910/CVE-2026-64911/CVE-2026-65657）:

由于Microsoft Office中存在越界读、缓冲区溢出、整数溢出、整数下溢、指针解引用不当或释放后使用等漏洞，未经身份验证的攻击者可诱导用户打开特制的恶意文件，从而实现远程代码执行。CVSS评分7.8。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63515

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70130

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63532

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64898

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64903

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64909

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64910

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64911

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65657

Microsoft SharePoint Server权限提升漏洞（CVE-2026-64921/CVE-2026-62827）:

由于Microsoft SharePoint Server中存在身份验证绕过漏洞，经过身份验证的攻击者可通过网络发送特制的请求，从而实现权限提升。CVSS评分8.8。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64921

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62827

Microsoft SharePoint Server远程代码执行漏洞（CVE-2026-65665）:

由于Microsoft SharePoint Server中存在不安全的反序列化漏洞，经过身份验证的攻击者可通过网络发送特制的请求，从而实现远程代码执行。CVSS评分8.8。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65665

Windows DNS Server远程代码执行漏洞（CVE-2026-65789/CVE-2026-62820）:

由于Windows DNS Server中存在释放后使用或竞态条件漏洞，未经身份验证的攻击者可通过网络向DNS服务发送特制数据包，从而实现远程代码执行。CVSS评分8.1。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65789

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62820

Windows SSTP 远程代码执行漏洞（CVE-2026-62889）:

由于Windows安全套接字隧道协议（SSTP）在处理特制网络流量时存在内存损坏漏洞，未经身份验证的攻击者可通过向SSTP服务发送特制的数据包触发条件竞争，从而在目标系统上执行任意代码。CVSS评分8.9。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62889

Windows Active Directory Certificate Services (AD CS)远程代码执行漏洞（CVE-2026-62818）:

由于Windows Active Directory证书服务中存在释放后重用漏洞，经过身份验证的攻击者可通过发送特制的网络请求，从而执行任意代码。CVSS评分8.8。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62818

Remote Desktop Client远程代码执行漏洞（CVE-2026-62824）:

由于远程桌面客户端在处理特制连接请求时存在基于栈的缓冲区溢出漏洞（CWE-121），未经身份验证的攻击者可通过诱使用户连接到恶意的远程桌面服务器，从而在用户系统上执行任意代码。CVSS评分8.8。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62824

Microsoft QUIC 远程代码执行漏洞（CVE-2026-62815）:

由于Microsoft QUIC协议实现中存在释放后用漏洞，未经身份验证的攻击者可通过向暴露的QUIC服务发送特制网络流量，从而在目标系统上执行任意代码。CVSS评分9.8。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62815

Microsoft Office SharePoint 欺骗漏洞（CVE-2026-70332 ）:

由于Microsoft Office SharePoint存在服务器端请求伪造漏洞（SSRF），由于在处理外部资源请求时缺乏充分的验证，未经身份验证的攻击者可欺骗服务器发起非预期的网络请求，从而探测敏感信息。CVSS评分7.3。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70332

Microsoft Exchange Server 权限提升漏洞（CVE-2026-62911）:

由于Microsoft Exchange Server处理认证请求时存在弱认证路径问题，攻击者可以利用捕获重放攻击绕过认证机制，从而在目标服务器上提升权限。CVSS评分8.0。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62911

Azure Active Directory 权限提升漏洞（CVE-2026-50481）:

由于Azure Active Directory存在修改假定不可变数据的漏洞，经过身份验证的攻击者可以利用该漏洞操纵系统中的关键数据，从而实现权限提升。CVSS评分9.9。

官方通告链接：

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50481

3影响范围

以下为部分重点关注漏洞的受影响产品版本，其他漏洞影响产品范围请参阅官方通告链接。

漏洞编号

受影响产品版本

CVE-2026-62832

CVE-2026-62817

Windows 11 Version 24H2 for ARM64-based Systems
Windows 11 Version 24H2 for x64-based Systems
Windows 11 Version 25H2 for ARM64-based Systems
Windows 11 Version 25H2 for x64-based Systems
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows Server 2025
Windows Server 2025 (Server Core installation)
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 22H2 for 32-bit Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems
Windows 11 Version 23H2 for ARM64-based Systems
Windows 11 Version 23H2 for x64-based Systems
Windows 11 Version 26H1 for ARM64-based Systems
Windows 11 version 26H1 for x64-based Systems
Windows Server 2019
Windows Server 2019 (Server Core installation)

CVE-2026-62816
CVE-2026-62822
CVE-2026-62889
CVE-2026-62890
CVE-2026-68820

Windows 11 Version 24H2 for ARM64-based Systems
Windows 11 Version 24H2 for x64-based Systems
Windows 11 Version 25H2 for ARM64-based Systems
Windows 11 Version 25H2 for x64-based Systems
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows Server 2025
Windows Server 2025 (Server Core installation)
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 22H2 for 32-bit Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems
Windows 11 Version 23H2 for ARM64-based Systems
Windows 11 Version 23H2 for x64-based Systems
Windows 11 Version 26H1 for ARM64-based Systems
Windows 11 version 26H1 for x64-based Systems
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)
Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows Server 2019
Windows Server 2019 (Server Core installation)

CVE-2026-63526

Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft 365 Apps for Enterprise for 64-bit Systems
Microsoft Office 2016 (32-bit edition)
Microsoft Office 2016 (64-bit edition)
Microsoft Office 2019 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Microsoft Office 365 for Mac
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Office LTSC 2024 for 32-bit editions
Microsoft Office LTSC 2024 for 64-bit editions
Microsoft Office LTSC for Mac 2021
Microsoft Office LTSC for Mac 2024

CVE-2026-68794
CVE-2026-68804
CVE-2026-68816

Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft Office 2019 for 64-bit editions
Microsoft Office 2019 for 32-bit editions
Microsoft Office LTSC 2024 for 32-bit editions
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Office LTSC for Mac 2021
Microsoft 365 Apps for Enterprise for 64-bit Systems
Microsoft Excel 2016 (32-bit edition)
Microsoft Office LTSC for Mac 2024
Microsoft Office LTSC 2024 for 64-bit editions
Microsoft Office 365 for Mac
Microsoft Excel 2016 (64-bit edition)

CVE-2026-63518

Microsoft Office 365 for Mac
Microsoft Outlook 2016 (64-bit edition)
Microsoft Outlook 2016 (32-bit edition)
Microsoft Office LTSC for Mac 2024
Microsoft Office LTSC 2024 for 64-bit editions
Microsoft Office LTSC 2024 for 32-bit editions
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Office LTSC for Mac 2021
Microsoft 365 Apps for Enterprise for 64-bit Systems
Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft Office 2019 for 64-bit editions
Microsoft Office 2019 for 32-bit editions

CVE-2026-63525

Microsoft Office LTSC 2021 for 64-bit editions
Microsoft 365 Apps for Enterprise for 64-bit Systems
Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft Office 2019 for 64-bit editions
Microsoft Office 2019 for 32-bit editions
Microsoft Word 2016 (64-bit edition)
Microsoft Word 2016 (32-bit edition)
Microsoft Office LTSC 2024 for 64-bit editions
Microsoft Office LTSC 2024 for 32-bit editions
Microsoft Office LTSC 2021 for 32-bit editions

CVE-2026-64907

Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft Office LTSC for Mac 2021
Microsoft 365 Apps for Enterprise for 64-bit Systems
Microsoft Office 2019 for 64-bit editions
Microsoft Office 2019 for 32-bit editions
Microsoft Office 365 for Mac
Microsoft Word 2016 (64-bit edition)
Microsoft Word 2016 (32-bit edition)
Microsoft Office LTSC for Mac 2024
Microsoft Office LTSC 2024 for 64-bit editions
Microsoft Office LTSC 2024 for 32-bit editions
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office LTSC 2021 for 64-bit editions

CVE-2026-63515
CVE-2026-63532
CVE-2026-64903
CVE-2026-64909
CVE-2026-63526

Microsoft Office 2016 (64-bit edition)
Microsoft Office 2016 (32-bit edition)
Microsoft Office LTSC for Mac 2024
Microsoft Office LTSC 2024 for 64-bit editions
Microsoft Office LTSC 2024 for 32-bit editions
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Office LTSC for Mac 2021
Microsoft 365 Apps for Enterprise for 64-bit Systems
Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft Office 2019 for 64-bit editions
Microsoft Office 2019 for 32-bit editions
Microsoft Office 365 for Mac

CVE-2026-64898
CVE-2026-64910
CVE-2026-64911
CVE-2026-65657

Microsoft Office LTSC for Mac 2024
Microsoft Office LTSC 2024 for 64-bit editions
Microsoft Office LTSC 2024 for 32-bit editions
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Office LTSC for Mac 2021
Microsoft 365 Apps for Enterprise for 64-bit Systems
Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft Office 2019 for 64-bit editions
Microsoft Office 2019 for 32-bit editions
Microsoft Office 365 for Mac

CVE-2026-70130

Microsoft Office LTSC 2024 for 64-bit editions
Microsoft Office LTSC 2024 for 32-bit editions
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft 365 Apps for Enterprise for 64-bit Systems
Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft Office 2019 for 64-bit editions
Microsoft Office 2019 for 32-bit editions

CVE-2026-62827
CVE-2026-64921

Microsoft SharePoint Server Subscription Edition
Microsoft SharePoint Server 2019
Microsoft SharePoint Enterprise Server 2016

CVE-2026-65665

Microsoft SharePoint Server Subscription Edition
Microsoft SharePoint Server 2019

CVE-2026-70332

Microsoft SharePoint Online

CVE-2026-62820
CVE-2026-65789

Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows Server 2025
Windows Server 2025 (Server Core installation)
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows Server 2019
Windows Server 2019 (Server Core installation)

CVE-2026-62818
CVE-2026-62823
CVE-2026-62878
CVE-2026-62893

Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows Server 2025
Windows Server 2025 (Server Core installation)
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)
Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows Server 2019
Windows Server 2019 (Server Core installation)

CVE-2026-62824

Windows Server 2012 R2 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 (Server Core installation)
Windows Server 2012
Windows Server 2016 (Server Core installation)
Windows Server 2016
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems

CVE-2026-62815

CVE-2026-62911

Microsoft Exchange Server 2019 Cumulative Update 14
Microsoft Exchange Server 2019 Cumulative Update 15
Microsoft Exchange Server Subscription Edition RTM
Microsoft Exchange Server 2016 Cumulative Update 23

CVE-2026-50481

Azure Active Directory

4漏洞防护

4.1 补丁更新

目前微软官方已针对受支持的产品版本发布了修复以上漏洞的安全补丁，强烈建议受影响用户尽快安装补丁进行防护，官方下载链接：

https://msrc.microsoft.com/update-guide/releaseNote/2026-Aug

注：由于网络问题、计算机环境问题等原因，Windows Update的补丁更新可能出现失败。用户在安装补丁后，应及时检查补丁是否成功更新。

右键点击Windows图标，选择“设置(N)”，选择“更新和安全”-“Windows更新”，查看该页面上的提示信息，也可点击“查看更新历史记录”查看历史更新情况。

针对未成功安装的更新，可点击更新名称跳转到微软官方下载页面，建议用户点击该页面上的链接，转到“Microsoft更新目录”网站下载独立程序包并安装。

附录漏洞列表

影响产品

CVE编号

漏洞标题

严重程度

Azure

CVE-2026-49163

Application Insights Profiler权限提升漏洞

Critical

Azure

CVE-2026-50481

Azure Active Directory权限提升漏洞

Critical

Microsoft Office

CVE-2026-50515

Azure Service Bus远程代码执行漏洞

Critical

Azure

CVE-2026-50516

Microsoft Azure Kubernetes Service权限提升漏洞

Critical

Azure

CVE-2026-56161

Azure Logic Apps信息泄露漏洞

Critical

Azure

CVE-2026-56162

Azure SQL Database权限提升漏洞

Critical

Azure

CVE-2026-59115

Microsoft Entra Provisioning Service权限提升漏洞

Critical

Microsoft Dynamics

CVE-2026-59118

Copilot Cowork权限提升漏洞

Critical

Windows

CVE-2026-62815

Microsoft QUIC远程代码执行漏洞

Critical

Windows

CVE-2026-62816

Windows Reliable Multicast Transport Driver (RMCAST)远程代码执行漏洞

Critical

Windows

CVE-2026-62817

Windows DNS Server远程代码执行漏洞

Critical

Windows

CVE-2026-62818

Windows Active Directory Certificate Services (AD CS)远程代码执行漏洞

Critical

Windows

CVE-2026-62819

Windows Routing and Remote Access Service (RRAS)远程代码执行漏洞

Critical

Windows

CVE-2026-62820

Windows DNS Server远程代码执行漏洞

Critical

Windows

CVE-2026-62822

Windows GDI+远程代码执行漏洞

Critical

Windows

CVE-2026-62823

Windows DHCP Server远程代码执行漏洞

Critical

Windows

CVE-2026-62824

Remote Desktop Client远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-62827

Microsoft SharePoint Server权限提升漏洞

Critical

Azure

CVE-2026-62830

Azure SRE Agent权限提升漏洞

Critical

Microsoft Office

CVE-2026-62836

Azure SQL Managed Instance权限提升漏洞

Critical

Azure

CVE-2026-62869

Azure Entra ID欺骗漏洞

Critical

Azure

CVE-2026-62873

Microsoft 365 Admin Center权限提升漏洞

Critical

Windows

CVE-2026-62878

Windows DNS Server远程代码执行漏洞

Critical

Windows

CVE-2026-62889

Windows Secure Socket Tunneling Protocol (SSTP)远程代码执行漏洞

Critical

Windows

CVE-2026-62890

Windows GDI+权限提升漏洞

Critical

Windows

CVE-2026-62893

Windows Deployment Services TFTP Server远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-62896

Microsoft Teams权限提升漏洞

Critical

Microsoft Exchange Server Subscription Edition RTM,Microsoft Exchange Server

CVE-2026-62911

Microsoft Exchange Server权限提升漏洞

Critical

Microsoft Office

CVE-2026-62918

Microsoft Teams欺骗漏洞

Critical

Device

CVE-2026-63508

Microsoft Planetary Computer Pro权限提升漏洞

Critical

Microsoft Office

CVE-2026-63513

Microsoft Office Graphics Component远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-63515

Microsoft Office远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-63518

Microsoft Office Word远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-63519

Microsoft Office Graphics Component远程代码执行漏洞

Critical

Azure

CVE-2026-63522

Azure SQL Database权限提升漏洞

Critical

Microsoft Office

CVE-2026-63525

Microsoft Office Word远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-63526

Microsoft Office Graphics Component远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-63532

Microsoft Office远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-64898

Microsoft Office远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-64903

Microsoft Office远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-64907

Microsoft Office Word远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-64909

Microsoft Office远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-64910

Microsoft Office远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-64911

Microsoft Office远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-64921

Microsoft SharePoint Server权限提升漏洞

Critical

Microsoft Office

CVE-2026-65657

Microsoft Office远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-65664

Microsoft Office Graphics Component远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-65665

Microsoft SharePoint Server远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-65667

Microsoft Teams权限提升漏洞

Critical

Azure

CVE-2026-65668

Microsoft Purview eDiscovery权限提升漏洞

Critical

Windows

CVE-2026-65789

Windows DNS Server远程代码执行漏洞

Critical

Windows

CVE-2026-65791

Windows iSCSI Target Service远程代码执行漏洞

Critical

Windows

CVE-2026-66799

Windows Key Guard权限提升漏洞

Critical

Windows

CVE-2026-66802

Windows Device Health Attestation (DHA)远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-66807

Microsoft Office Graphics Component远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-68794

Microsoft Excel远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-68804

Microsoft Excel远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-68816

Microsoft Excel远程代码执行漏洞

Critical

Azure

CVE-2026-68823

Azure Confidential Ledger远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-70130

Microsoft Office远程代码执行漏洞

Critical

Microsoft Office

CVE-2026-70332

Microsoft Office SharePoint欺骗漏洞

Critical

Windows

CVE-2026-71331

Windows Device Health Attestation (DHA)远程代码执行漏洞

Critical

Microsoft Dynamics

CVE-2026-40375

Microsoft Dynamics Business Central信息泄露漏洞

Important

Windows

CVE-2026-42976

Remote Access Management service/API (RPC server)权限提升漏洞

Important

Visual Studio Code

CVE-2026-47285

Visual Studio Code信息泄露漏洞

Important

Azure

CVE-2026-47299

Azure Monitor Agent权限提升漏洞

Important

Windows

CVE-2026-49179

Windows Active Directory Domain Services远程代码执行漏洞

Important

Windows

CVE-2026-50472

Windows LUA File Virtualization Filter Driver权限提升漏洞

Important

Windows

CVE-2026-54113

Remote Procedure Call拒绝服务漏洞

Important

System Center

CVE-2026-54123

Microsoft Defender for Endpoint for Mac信息泄露漏洞

Important

Python extension for Visual Studio Code

CVE-2026-54981

Visual Studio Code Python Extension安全功能绕过漏洞

Important

Windows

CVE-2026-54984

Windows Imaging Component远程代码执行漏洞

Important

Windows

CVE-2026-56174

Windows Narrator Braille权限提升漏洞

Important

Open Source Software

CVE-2026-57104

Azure Storage Explorer权限提升漏洞

Important

Microsoft Office

CVE-2026-57105

Microsoft Office SharePoint欺骗漏洞

Important

PowerShell

CVE-2026-58612

PowerShell信息泄露漏洞

Important

Microsoft Office

CVE-2026-58639

Microsoft SharePoint Server欺骗漏洞

Important

.NET 8.0 installed on Windows,.NET 8.0 installed on Mac OS,.NET 9.0 installed on Mac OS,.NET 9.0 installed on Linux,.NET 10.0 installed on Mac OS,.NET 9.0 installed on Windows,.NET 10.0 installed on Linux,.NET 8.0 installed on Linux

CVE-2026-58641

.NET权限提升漏洞

Important

Visual Studio Code

CVE-2026-58650

Visual Studio Code安全功能绕过漏洞

Important

Microsoft Office

CVE-2026-58651

Microsoft Word远程代码执行漏洞

Important

Visual Studio Code

CVE-2026-59113

Visual Studio Code远程代码执行漏洞

Important

PowerShell

CVE-2026-59119

PowerShell权限提升漏洞

Important

Windows

CVE-2026-59122

Windows Telephony Service权限提升漏洞

Important

Windows

CVE-2026-59124

Microsoft High Performance Computing (HPC) Pack远程代码执行漏洞

Important

Windows

CVE-2026-59125

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Important

Windows

CVE-2026-59126

Windows Event Logging Service权限提升漏洞

Important

Windows

CVE-2026-59127

Windows Installer权限提升漏洞

Important

Windows

CVE-2026-59128

Windows Encrypting File System (EFS)信息泄露漏洞

Important

Windows

CVE-2026-59130

AMD Zen信息泄露漏洞

Important

Windows

CVE-2026-59131

AMD Zen信息泄露漏洞

Important

Windows

CVE-2026-59132

Windows TCP/IP拒绝服务漏洞

Important

Windows

CVE-2026-59133

Microsoft High Performance Computing (HPC) Pack权限提升漏洞

Important

Windows

CVE-2026-59134

Remote Desktop Client远程代码执行漏洞

Important

Windows

CVE-2026-59135

Microsoft Windows Search Component信息泄露漏洞

Important

Windows

CVE-2026-59136

Microsoft COM for Windows信息泄露漏洞

Important

Windows

CVE-2026-59137

Windows Event Logging Service信息泄露漏洞

Important

Windows

CVE-2026-59138

Microsoft Remote Registry Service拒绝服务漏洞

Important

Windows

CVE-2026-61345

Microsoft Remote Registry Service拒绝服务漏洞

Important

Windows

CVE-2026-61346

Windows Graphics Kernel权限提升漏洞

Important

Windows

CVE-2026-61347

Windows Event Logging Service信息泄露漏洞

Important

Windows

CVE-2026-61348

Windows Ancillary Function Driver for WinSock权限提升漏洞

Important

Windows

CVE-2026-61349

Windows Work Folder Service权限提升漏洞

Important

Windows

CVE-2026-61350

Windows NTFS信息泄露漏洞

Important

Windows

CVE-2026-61352

Remote Desktop Client远程代码执行漏洞

Important

Windows

CVE-2026-61353

Windows Telephony Service权限提升漏洞

Important

Windows

CVE-2026-61355

Windows Sensor Data Service权限提升漏洞

Important

Windows

CVE-2026-61356

Windows Remote Desktop Services权限提升漏洞

Important

Windows

CVE-2026-61357

Application Information Services权限提升漏洞

Important

Windows

CVE-2026-61358

Windows Accessibility Infrastructure (ATBroker.exe)权限提升漏洞

Important

Windows

CVE-2026-61359

Windows Storage权限提升漏洞

Important

Windows

CVE-2026-61360

Windows GDI信息泄露漏洞

Important

Windows

CVE-2026-61361

Windows DHCP Client远程代码执行漏洞

Important

Windows

CVE-2026-61363

Remote Desktop Client远程代码执行漏洞

Important

Windows

CVE-2026-61364

Windows Remote Desktop Services权限提升漏洞

Important

Windows

CVE-2026-61365

Windows Remote Desktop Services权限提升漏洞

Important

Windows

CVE-2026-61366

Windows Network Connection Broker权限提升漏洞

Important

Windows

CVE-2026-61367

Windows Remote Desktop Services权限提升漏洞

Important

Windows

CVE-2026-61368

Windows Hyper-V信息泄露漏洞

Important

Windows

CVE-2026-61918

Windows Remote Desktop Client信息泄露漏洞

Important

Windows

CVE-2026-61920

Windows DNS Server远程代码执行漏洞

Important

Windows

CVE-2026-61921

Windows Remote Desktop Client信息泄露漏洞

Important

Windows

CVE-2026-61923

Windows Display Enhancement Service权限提升漏洞

Important

Windows

CVE-2026-61924

Windows Remote Desktop Client信息泄露漏洞

Important

Windows

CVE-2026-61925

Windows Installer权限提升漏洞

Important

Windows

CVE-2026-61926

Windows USB Driver权限提升漏洞

Important

Windows

CVE-2026-61927

Windows Bind Filter Driver权限提升漏洞

Important

Windows

CVE-2026-61928

Windows Hello篡改漏洞

Important

Windows

CVE-2026-61929

Windows Kernel权限提升漏洞

Important

Windows

CVE-2026-61930

Windows Kernel权限提升漏洞

Important

Windows

CVE-2026-61932

Windows DWM Core Library权限提升漏洞

Important

Windows

CVE-2026-61933

Windows DWM Core Library信息泄露漏洞

Important

Windows

CVE-2026-61934

Windows Bind Filter Driver权限提升漏洞

Important

Windows

CVE-2026-61936

Windows Defender Firewall Service安全功能绕过漏洞

Important

Windows

CVE-2026-61937

Windows HTTP.sys权限提升漏洞

Important

Windows

CVE-2026-61938

Windows Installer权限提升漏洞

Important

Windows

CVE-2026-61939

Winlogon权限提升漏洞

Important

Windows

CVE-2026-62688

Windows MIDI Service Module Elevation of Privileges Vulnerability

Important

Windows

CVE-2026-62690

Windows Push Notifications权限提升漏洞

Important

Windows

CVE-2026-62692

Windows Remote Desktop Services权限提升漏洞

Important

Windows

CVE-2026-62693

Windows MIDI Service Module Elevation of Privileges Vulnerability

Important

Windows

CVE-2026-62695

Windows Storage权限提升漏洞

Important

Windows

CVE-2026-62696

Windows Program Compatibility Assistant Service权限提升漏洞

Important

Windows

CVE-2026-62698

Microsoft Digest Authentication权限提升漏洞

Important

Windows

CVE-2026-62699

Windows Universal Disk Format File System Driver (UDFS)远程代码执行漏洞

Important

Windows

CVE-2026-62700

Windows NTFS权限提升漏洞

Important

Windows

CVE-2026-62701

Windows Telephony Service权限提升漏洞

Important

Windows

CVE-2026-62702

Windows Graphics Kernel拒绝服务漏洞

Important

Windows

CVE-2026-62703

Windows DWM Core Library信息泄露漏洞

Important

Windows

CVE-2026-62705

Windows Bind Filter Driver权限提升漏洞

Important

Windows

CVE-2026-62707

Windows Modern Device Management (MDM)权限提升漏洞

Important

Windows

CVE-2026-62708

Windows Kernel权限提升漏洞

Important

Windows

CVE-2026-62709

Windows GDI+信息泄露漏洞

Important

Windows

CVE-2026-62710

Windows Device Association Service权限提升漏洞

Important

Windows

CVE-2026-62711

Windows Win32k权限提升漏洞

Important

Windows

CVE-2026-62712

Windows Win32k权限提升漏洞

Important

Windows

CVE-2026-62713

Windows Cloud Files Mini Filter Driver权限提升漏洞

Important

Windows

CVE-2026-62714

Windows DHCP Server信息泄露漏洞

Important

Windows

CVE-2026-62715

Windows DHCP Server信息泄露漏洞

Important

Windows

CVE-2026-62716

Windows DHCP Server信息泄露漏洞

Important

Windows

CVE-2026-62717

Windows Message Queuing权限提升漏洞

Important

Windows

CVE-2026-62718

Windows DHCP Server信息泄露漏洞

Important

Windows

CVE-2026-62719

Windows Message Queuing权限提升漏洞

Important

Windows

CVE-2026-62720

Windows DHCP Server信息泄露漏洞

Important

Windows

CVE-2026-62721

Windows User-Mode Power Service (UMPS)权限提升漏洞

Important

Windows

CVE-2026-62722

Windows Bind Filter Driver权限提升漏洞

Important

Windows

CVE-2026-62723

Windows Telephony Service权限提升漏洞

Important

Windows

CVE-2026-62724

Windows Telephony Service权限提升漏洞

Important

Windows

CVE-2026-62725

Windows Telephony Service权限提升漏洞

Important

Windows

CVE-2026-62726

Windows Telephony Service权限提升漏洞

Important

Windows

CVE-2026-62728

Windows Common Log File System Driver权限提升漏洞

Important

Windows

CVE-2026-62729

Windows Telephony Service权限提升漏洞

Important

Windows

CVE-2026-62730

Windows Wired AutoConfig Service信息泄露漏洞

Important

Windows

CVE-2026-62732

Windows Telephony Service权限提升漏洞

Important

Windows

CVE-2026-62733

Windows Win32k权限提升漏洞

Important

Windows

CVE-2026-62734

Windows Telephony Service权限提升漏洞

Important

Windows

CVE-2026-62735

Windows HTTP.sys权限提升漏洞

Important

Windows

CVE-2026-62736

Windows DHCP Client权限提升漏洞

Important

Windows

CVE-2026-62737

Windows Kernel权限提升漏洞

Important

Windows

CVE-2026-62738

Windows Management Instrumentation信息泄露漏洞

Important

Windows

CVE-2026-62739

Windows HTTP.sys权限提升漏洞

Important

Windows

CVE-2026-62740

Windows Imaging Component信息泄露漏洞

Important

Windows

CVE-2026-62741

Windows HTTP.sys权限提升漏洞

Important

Windows

CVE-2026-62742

Windows DHCP Server信息泄露漏洞

Important

Windows

CVE-2026-62743

Win32k信息泄露漏洞

Important

Windows

CVE-2026-62745

Windows DHCP Server信息泄露漏洞

Important

Windows

CVE-2026-62746

Win32k信息泄露漏洞

Important

Windows

CVE-2026-62747

Windows Device Association Service权限提升漏洞

Important

Windows

CVE-2026-62748

Windows Telephony Service权限提升漏洞

Important

Windows

CVE-2026-62749

Windows Kernel权限提升漏洞

Important

Windows

CVE-2026-62750

Windows HTTP Protocol Stack篡改漏洞

Important

Windows

CVE-2026-62751

Windows Projected File System权限提升漏洞

Important

Windows

CVE-2026-62752

Windows Kerberos权限提升漏洞

Important

Windows

CVE-2026-62753

Windows HTTP.sys权限提升漏洞

Important

Windows

CVE-2026-62754

Windows Kerberos权限提升漏洞

Important

Windows

CVE-2026-62755

Windows DHCP Client权限提升漏洞

Important

Windows

CVE-2026-62757

Windows Schannel安全功能绕过漏洞

Important

Windows

CVE-2026-62758

Windows Remote Access Connection Manager权限提升漏洞

Important

Windows

CVE-2026-62761

Windows DHCP Server权限提升漏洞

Important

Windows

CVE-2026-62766

Windows Kerberos权限提升漏洞

Important

Windows

CVE-2026-62768

Windows Installer权限提升漏洞

Important

Windows

CVE-2026-62769

Windows DNS权限提升漏洞

Important

Windows

CVE-2026-62770

Windows Shell权限提升漏洞

Important

Windows

CVE-2026-62771

Windows Cloud Files Mini Filter Driver权限提升漏洞

Important

Windows

CVE-2026-62772

Windows Container Isolation FS Filter Driver (unionfs.sys)权限提升漏洞

Important

Windows

CVE-2026-62773

Windows Kerberos权限提升漏洞

Important

Windows

CVE-2026-62774

Windows Graphics Kernel权限提升漏洞

Important

Windows

CVE-2026-62775

Windows Container Isolation FS Filter Driver (unionfs.sys)信息泄露漏洞

Important

Windows

CVE-2026-62776

Windows DHCP Server权限提升漏洞

Important

Windows

CVE-2026-62777

Windows License Manager权限提升漏洞

Important

Windows

CVE-2026-62778

Windows DNS权限提升漏洞

Important

Windows

CVE-2026-62779

Windows Schannel权限提升漏洞

Important

Windows

CVE-2026-62780

Windows Kernel权限提升漏洞

Important

Windows

CVE-2026-62781

RPC Runtime Library远程代码执行漏洞

Important

Windows

CVE-2026-62782

Windows SMB Client信息泄露漏洞

Important

Windows

CVE-2026-62783

Windows Remote Access Connection Manager权限提升漏洞

Important

Windows

CVE-2026-62784

Microsoft Local Security Authority Server (lsasrv)远程代码执行漏洞

Important

Windows

CVE-2026-62785

Windows LDAP - Lightweight Directory Access Protocol远程代码执行漏洞

Important

Windows

CVE-2026-62786

Win32k信息泄露漏洞

Important

Windows

CVE-2026-62787

Windows DNS Server远程代码执行漏洞

Important

Windows

CVE-2026-62788

Windows Kernel权限提升漏洞

Important

Windows

CVE-2026-62790

Windows SMBv3 Server远程代码执行漏洞

Important

Windows

CVE-2026-62792

Windows TCP/IP远程代码执行漏洞

Important

Windows

CVE-2026-62793

Windows NTFS信息泄露漏洞

Important

Windows

CVE-2026-62795

Windows LDAP - Lightweight Directory Access Protocol远程代码执行漏洞

Important

Windows

CVE-2026-62796

Windows NTFS信息泄露漏洞

Important

Windows

CVE-2026-62797

Windows NTFS权限提升漏洞

Important

Windows

CVE-2026-62798

Win32k信息泄露漏洞

Important

Windows

CVE-2026-62799

Windows SMB Client权限提升漏洞

Important

Windows

CVE-2026-62800

Windows SMBv3 Server远程代码执行漏洞

Important

Windows

CVE-2026-62803

Windows DHCP Server权限提升漏洞

Important

Windows

CVE-2026-62807

Windows DHCP Server权限提升漏洞

Important

Windows

CVE-2026-62811

Windows HTTP.sys权限提升漏洞

Important

Windows

CVE-2026-62812

Windows DHCP Server权限提升漏洞

Important

Windows

CVE-2026-62814

Windows DHCP Server信息泄露漏洞

Important

Microsoft Office

CVE-2026-62829

Microsoft SharePoint Server欺骗漏洞

Important

Windows

CVE-2026-62832

Windows User Profile Service权限提升漏洞

Important

Microsoft Office

CVE-2026-62837

Microsoft SharePoint Server信息泄露漏洞

Important

Microsoft Office

CVE-2026-62839

Microsoft SharePoint Server欺骗漏洞

Important

Microsoft Office

CVE-2026-62842

Microsoft Office Graphics Component信息泄露漏洞

Important

Microsoft Visual Studio,.NET 8.0 installed on Windows,.NET 8.0 installed on Mac OS,.NET 9.0 installed on Mac OS,.NET 9.0 installed on Linux,.NET 10.0 installed on Mac OS,.NET 9.0 installed on Windows,.NET 10.0 installed on Linux,.NET 8.0 installed on Linux

CVE-2026-62871

.NET权限提升漏洞

Important

Microsoft .NET Framework

CVE-2026-62872

.NET Framework权限提升漏洞

Important

Windows

CVE-2026-62876

Windows Win32k权限提升漏洞

Important

Windows

CVE-2026-62877

Windows Win32k权限提升漏洞

Important

Windows

CVE-2026-62880

Windows NTFS权限提升漏洞

Important

Windows

CVE-2026-62881

Windows DNS权限提升漏洞

Important

Microsoft Office

CVE-2026-62882

Microsoft Outlook欺骗漏洞

Important

Windows

CVE-2026-62883

Windows DNS权限提升漏洞

Important

Windows

CVE-2026-62885

Windows Win32k权限提升漏洞

Important

Microsoft Visual Studio,.NET 8.0 installed on Windows,.NET 10.0 installed on Windows,.NET 8.0 installed on Mac OS,.NET 9.0 installed on Mac OS,.NET 9.0 installed on Linux,.NET 10.0 installed on Mac OS,.NET 9.0 installed on Windows,.NET 10.0 installed on Linux,.NET 8.0 installed on Linux

CVE-2026-62886

.NET权限提升漏洞

Important

Windows

CVE-2026-62887

Windows NTFS信息泄露漏洞

Important

Windows

CVE-2026-62888

Windows DWM Core Library权限提升漏洞

Important

Windows

CVE-2026-62892

Capability Access Management Service (camsvc)权限提升漏洞

Important

Windows

CVE-2026-62894

Windows DWM Core Library权限提升漏洞

Important

Microsoft Visual Studio,.NET 8.0 installed on Windows,.NET 10.0 installed on Windows,.NET 8.0 installed on Mac OS,.NET 9.0 installed on Mac OS,Microsoft .NET Framework,.NET 9.0 installed on Linux,.NET 10.0 installed on Mac OS,.NET 9.0 installed on Windows,.NET 10.0 installed on Linux,.NET 8.0 installed on Linux

CVE-2026-62897

.NET Framework远程代码执行漏洞

Important

CVE-2026-62898

Microsoft QUIC信息泄露漏洞

Important

CVE-2026-62899

.NET安全功能绕过漏洞

Important

CVE-2026-62900

.NET信息泄露漏洞

Important

CVE-2026-62901

.NET拒绝服务漏洞

Important

CVE-2026-62902

.NET信息泄露漏洞

Important

Windows

CVE-2026-62908

Windows Backup Engine权限提升漏洞

Important

CVE-2026-62909

.NET权限提升漏洞

Important

Microsoft Exchange Server,Microsoft Exchange Server Subscription Edition RTM

CVE-2026-62910

Microsoft Exchange Server权限提升漏洞

Important

Microsoft Exchange Server,Microsoft Exchange Server Subscription Edition RTM

CVE-2026-62912

Microsoft Exchange Server拒绝服务漏洞

Important

Microsoft Exchange Server Subscription Edition RTM,Microsoft Exchange Server

CVE-2026-62913

Microsoft Exchange Server远程代码执行漏洞

Important

Microsoft Exchange Server Subscription Edition RTM,Microsoft Exchange Server

CVE-2026-62914

Microsoft Exchange Server欺骗漏洞

Important

Microsoft Exchange Server Subscription Edition RTM,Microsoft Exchange Server

CVE-2026-62915

Microsoft Exchange Server安全功能绕过漏洞

Important

Microsoft Office

CVE-2026-62917

Microsoft SharePoint Server欺骗漏洞

Important

Microsoft Office

CVE-2026-63512

Microsoft SharePoint Server篡改漏洞

Important

Microsoft Office

CVE-2026-63514

Microsoft SharePoint Server远程代码执行漏洞

Important

Microsoft Office

CVE-2026-63516

Microsoft SharePoint Server欺骗漏洞

Important

Microsoft Office

CVE-2026-63517

Microsoft Office Graphics Component信息泄露漏洞

Important

Microsoft Office

CVE-2026-63520

Microsoft SharePoint Server远程代码执行漏洞

Important

Microsoft Office

CVE-2026-63521

Microsoft Office Word信息泄露漏洞

Important

Microsoft Office

CVE-2026-63524

Microsoft Office信息泄露漏洞

Important

Microsoft Office

CVE-2026-63527

Microsoft Office Word远程代码执行漏洞

Important

Microsoft Office

CVE-2026-63528

Microsoft Office Word信息泄露漏洞

Important

Microsoft Office

CVE-2026-63529

Microsoft Office信息泄露漏洞

Important

Microsoft Office

CVE-2026-63530

Microsoft Office Word信息泄露漏洞

Important

Microsoft Office

CVE-2026-63531

Microsoft Office Word信息泄露漏洞

Important

Microsoft Office

CVE-2026-63533

Microsoft Office远程代码执行漏洞

Important

Microsoft Office

CVE-2026-64897

Microsoft SharePoint Server欺骗漏洞

Important

Microsoft Office

CVE-2026-64899

Microsoft Office信息泄露漏洞

Important

Microsoft Office

CVE-2026-64900

Microsoft SharePoint Server欺骗漏洞

Important

Microsoft Office

CVE-2026-64901

Microsoft SharePoint Server远程代码执行漏洞

Important

Microsoft Office

CVE-2026-64902

Microsoft SharePoint Server欺骗漏洞

Important

Microsoft Office

CVE-2026-64904

Microsoft Office远程代码执行漏洞

Important

Microsoft Office

CVE-2026-64905

Microsoft Office Word远程代码执行漏洞

Important

Microsoft Office

CVE-2026-64906

Microsoft Access远程代码执行漏洞

Important

Microsoft Office

CVE-2026-64908

Microsoft Access远程代码执行漏洞

Important

Microsoft Office

CVE-2026-64912

Microsoft Access远程代码执行漏洞

Important

Microsoft Office

CVE-2026-64914

Microsoft Access远程代码执行漏洞

Important

Microsoft Office

CVE-2026-64915

Microsoft Office Word远程代码执行漏洞

Important

Microsoft Office

CVE-2026-64916

Microsoft SharePoint Server欺骗漏洞

Important

Microsoft Office

CVE-2026-64917

Microsoft Office Word信息泄露漏洞

Important

Microsoft Office

CVE-2026-64919

Microsoft Access远程代码执行漏洞

Important

Microsoft Office

CVE-2026-64920

Microsoft Access远程代码执行漏洞

Important

Microsoft Office

CVE-2026-64922

Microsoft SharePoint Server欺骗漏洞

Important

Microsoft Office

CVE-2026-65656

Microsoft Office远程代码执行漏洞

Important

Microsoft Office

CVE-2026-65658

Microsoft SharePoint Server远程代码执行漏洞

Important

Microsoft Office

CVE-2026-65660

Microsoft SharePoint Server欺骗漏洞

Important

Microsoft Office

CVE-2026-65661

Microsoft Office远程代码执行漏洞

Important

Windows

CVE-2026-65662

Windows GDI信息泄露漏洞

Important

Microsoft Office

CVE-2026-65663

Microsoft SharePoint Server远程代码执行漏洞

Important

Windows

CVE-2026-65671

Remote Access API权限提升漏洞

Important

Windows

CVE-2026-65672

Remote Access API权限提升漏洞

Important

Azure

CVE-2026-65673

Microsoft Entra Connect权限提升漏洞

Important

Microsoft Visual Studio Code CoPilot Chat Extension

CVE-2026-65675

CoPilot Chat安全功能绕过漏洞

Important

Windows

CVE-2026-65678

Windows Win32k权限提升漏洞

Important

Windows

CVE-2026-65679

Windows iSCSI Target Service远程代码执行漏洞

Important

Microsoft Office

CVE-2026-65680

Microsoft OneDrive for MacOS权限提升漏洞

Important

Windows

CVE-2026-65681

Windows iSCSI Target Service拒绝服务漏洞

Important

Microsoft Office

CVE-2026-65767

Microsoft Teams for Android and iOS欺骗漏洞

Important

Microsoft Office

CVE-2026-65768

Microsoft Teams远程代码执行漏洞

Important

Microsoft Office

CVE-2026-65769

Microsoft Teams iOS信息泄露漏洞

Important

Windows

CVE-2026-65773

Windows Kernel权限提升漏洞

Important

Windows

CVE-2026-65774

Windows Installer权限提升漏洞

Important

Windows

CVE-2026-65775

Windows Win32k权限提升漏洞

Important

Windows

CVE-2026-65776

Windows Win32k权限提升漏洞

Important

Windows

CVE-2026-65777

Active Directory安全功能绕过漏洞

Important

Windows

CVE-2026-65778

Windows Autopilot权限提升漏洞

Important

Windows

CVE-2026-65779

Windows Autopilot权限提升漏洞

Important

Windows

CVE-2026-65780

Windows Autopilot权限提升漏洞

Important

Windows

CVE-2026-65781

Windows Autopilot权限提升漏洞

Important

Windows

CVE-2026-65782

Windows Autopilot权限提升漏洞

Important

Windows

CVE-2026-65783

Windows Autopilot权限提升漏洞

Important

Windows

CVE-2026-65784

Windows NTFS信息泄露漏洞

Important

Windows

CVE-2026-65785

Windows DHCP Client拒绝服务漏洞

Important

Windows

CVE-2026-65786

Desktop Window Manager权限提升漏洞

Important

Windows

CVE-2026-65787

Desktop Window Manager权限提升漏洞

Important

Windows

CVE-2026-65788

Desktop Window Manager权限提升漏洞

Important

Windows

CVE-2026-65790

Windows Message Queuing权限提升漏洞

Important

Windows

CVE-2026-65794

Windows SMB Client信息泄露漏洞

Important

Windows

CVE-2026-65795

Windows DNS权限提升漏洞

Important

Windows

CVE-2026-65796

Windows iSCSI Target Service拒绝服务漏洞

Important

Windows

CVE-2026-65797

Windows DNS权限提升漏洞

Important

Windows

CVE-2026-65798

Windows DNS权限提升漏洞

Important

Windows

CVE-2026-65799

Windows DNS权限提升漏洞

Important

Azure

CVE-2026-65806

Azure CycleCloud信息泄露漏洞

Important

Microsoft Office

CVE-2026-65807

Microsoft Excel远程代码执行漏洞

Important

Microsoft .NET Framework

CVE-2026-65810

.NET Framework权限提升漏洞

Important

Power BI Report Server

CVE-2026-65811

Power BI远程代码执行漏洞

Important

Microsoft Exchange Server,Microsoft Exchange Server Subscription Edition RTM

CVE-2026-65813

Microsoft Exchange Server权限提升漏洞

Important

Windows

CVE-2026-65814

Microsoft Windows Storage Port Driver权限提升漏洞

Important

Microsoft Dynamics

CVE-2026-65815

Microsoft Dynamics 365 On-Premises远程代码执行漏洞

Important

Microsoft Dynamics

CVE-2026-66301

Microsoft Dynamics 365 (On-Premises)信息泄露漏洞

Important

Windows

CVE-2026-66804

Microsoft Windows Cross Device Service权限提升漏洞

Important

Microsoft Office

CVE-2026-66805

Microsoft SharePoint Server远程代码执行漏洞

Important

Microsoft Office

CVE-2026-66806

Microsoft Office Word信息泄露漏洞

Important

Microsoft Office

CVE-2026-66808

Microsoft SharePoint Server远程代码执行漏洞

Important

Microsoft Office

CVE-2026-66809

Microsoft Office Graphics Component信息泄露漏洞

Important

Microsoft Office

CVE-2026-66810

Microsoft Office Word信息泄露漏洞

Important

Microsoft Office

CVE-2026-68792

Microsoft Office权限提升漏洞

Important

Microsoft Office

CVE-2026-68793

Microsoft Excel远程代码执行漏洞

Important

Microsoft Office

CVE-2026-68795

Microsoft Excel远程代码执行漏洞

Important

Microsoft Office

CVE-2026-68796

Microsoft Excel远程代码执行漏洞

Important

Microsoft Office

CVE-2026-68797

Microsoft Excel信息泄露漏洞

Important

Microsoft Office

CVE-2026-68798

Microsoft Excel远程代码执行漏洞

Important

Microsoft Office

CVE-2026-68799

Microsoft Excel信息泄露漏洞

Important

Microsoft Office

CVE-2026-68800

Microsoft Excel远程代码执行漏洞

Important

Microsoft Office

CVE-2026-68801

Microsoft Excel远程代码执行漏洞

Important

Microsoft Office

CVE-2026-68802

Microsoft Excel信息泄露漏洞

Important

Microsoft Office

CVE-2026-68803

Microsoft Excel远程代码执行漏洞

Important

Microsoft Office

CVE-2026-68805

Microsoft Excel远程代码执行漏洞

Important

Microsoft Office

CVE-2026-68806

Microsoft Excel远程代码执行漏洞

Important

Microsoft Office

CVE-2026-68807

Microsoft Excel远程代码执行漏洞

Important

Microsoft Office

CVE-2026-68808

Microsoft Excel信息泄露漏洞

Important

Microsoft Office

CVE-2026-68809

Powerpoint信息泄露漏洞

Important

Microsoft Office

CVE-2026-68810

Microsoft Excel远程代码执行漏洞

Important

Microsoft Office

CVE-2026-68811

Microsoft Excel远程代码执行漏洞

Important

Microsoft Office

CVE-2026-68812

Microsoft Excel远程代码执行漏洞

Important

Microsoft Office

CVE-2026-68813

Microsoft Excel信息泄露漏洞

Important

Microsoft Office

CVE-2026-68814

Microsoft Excel远程代码执行漏洞

Important

Microsoft Office

CVE-2026-68815

Microsoft Excel远程代码执行漏洞

Important

Microsoft Office

CVE-2026-68817

Microsoft Excel远程代码执行漏洞

Important

Windows

CVE-2026-68819

Windows Network File System拒绝服务漏洞

Important

Windows

CVE-2026-68820

Windows Ancillary Function Driver for WinSock权限提升漏洞

Important

Apps

CVE-2026-68821

Windows Package Manager权限提升漏洞

Important

Visual Studio Code

CVE-2026-69278

Visual Studio Code安全功能绕过漏洞

Important

Visual Studio Code

CVE-2026-69306

Visual Studio Code安全功能绕过漏洞

Important

Visual Studio Code

CVE-2026-69320

Visual Studio Code远程代码执行漏洞

Important

Windows

CVE-2026-70304

Windows DNS权限提升漏洞

Important

Microsoft Office

CVE-2026-70306

Microsoft Office SharePoint欺骗漏洞

Important

Windows

CVE-2026-70307

Windows Ancillary Function Driver for WinSock权限提升漏洞

Important

Microsoft Office

CVE-2026-70310

Microsoft Word信息泄露漏洞

Important

Microsoft Office

CVE-2026-70311

Microsoft Office Word远程代码执行漏洞

Important

Microsoft Office

CVE-2026-70312

Powerpoint信息泄露漏洞

Important

Microsoft Office

CVE-2026-70313

Microsoft PowerPoint远程代码执行漏洞

Important

Microsoft Office

CVE-2026-70314

Microsoft Office信息泄露漏洞

Important

Microsoft Office

CVE-2026-70315

Microsoft Office信息泄露漏洞

Important

Microsoft Office

CVE-2026-70316

Powerpoint信息泄露漏洞

Important

Microsoft Office

CVE-2026-70317

Microsoft Office信息泄露漏洞

Important

Microsoft Office

CVE-2026-70318

Microsoft Excel信息泄露漏洞

Important

Microsoft Office

CVE-2026-70319

Microsoft Office Word信息泄露漏洞

Important

Microsoft Office

CVE-2026-70320

Powerpoint信息泄露漏洞

Important

Microsoft Office

CVE-2026-70321

Microsoft SharePoint远程代码执行漏洞

Important

Microsoft Office

CVE-2026-70322

Powerpoint信息泄露漏洞

Important

Microsoft Office

CVE-2026-70323

Microsoft Office信息泄露漏洞

Important

Microsoft Office

CVE-2026-70324

Microsoft SharePoint权限提升漏洞

Important

Microsoft Office

CVE-2026-70325

Powerpoint信息泄露漏洞

Important

Microsoft Office

CVE-2026-70326

Microsoft SharePoint Server权限提升漏洞

Important

Microsoft Office

CVE-2026-70327

Microsoft Excel信息泄露漏洞

Important

Microsoft Office

CVE-2026-70328

Microsoft Excel信息泄露漏洞

Important

Microsoft Office

CVE-2026-70329

Microsoft Outlook远程代码执行漏洞

Important

Windows

CVE-2026-70330

Windows DNS权限提升漏洞

Important

Visual Studio Code

CVE-2026-70335

GitHub Copilot and Visual Studio Code权限提升漏洞

Important

Visual Studio Code

CVE-2026-70336

Visual Studio Code远程代码执行漏洞

Important

PowerShell

CVE-2026-70337

Microsoft PowerShell远程代码执行漏洞

Important

PowerShell

CVE-2026-70338

Microsoft PowerShell安全功能绕过漏洞

Important

Microsoft Edge (Chromium-based)

CVE-2026-70339

Microsoft Edge远程代码执行漏洞

Important

Azure

CVE-2026-70340

Azure CycleCloud权限提升漏洞

Important

Windows

CVE-2026-70344

Windows Installer权限提升漏洞

Important

Windows

CVE-2026-70345

Windows Installer权限提升漏洞

Important

Windows

CVE-2026-70346

Windows Installer权限提升漏洞

Important

Windows

CVE-2026-70347

Windows Installer权限提升漏洞

Important

Windows

CVE-2026-70348

Windows Management Services拒绝服务漏洞

Important

CVE-2026-70354

.NET Core远程代码执行漏洞

Important

Microsoft Office

CVE-2026-70355

Microsoft SharePoint Server权限提升漏洞

Important

Windows

CVE-2026-72971

Windows Container Isolation FS Filter Driver (unionfs.sys)篡改漏洞

Important

Windows

CVE-2026-56179

Windows Network Address Translation (NAT)欺骗漏洞

Moderate

END

声明

本安全公告仅用来描述可能存在的安全问题，绿盟科技不为此安全公告提供任何保证或承诺。由于传播、利用此安全公告所提供的信息而造成的任何直接或者间接的后果及损失，均由使用者本人负责，绿盟科技以及安全公告作者不为此承担任何责任。

绿盟科技CERT∣微信公众号

长按识别二维码，关注网络安全威胁信息

跳转微信打开

【安全更新】微软8月安全更新多个产品高危漏洞通告

4.1 补丁更新

相关推荐 换一批

相关推荐