| ■ 通告编号 | NS-2026-0018 | ■ 发布日期 | 2026–08–12 |
| ■ 漏洞危害 | 攻击者利用本次安全更新中的漏洞，可造成权限提升、远程代码执行等 | ||
| ■ TAG | 安全更新、Windows、Office、Azure、Visual Studio Code | ||
一、漏洞概述
8月12日，绿盟科技CERT监测到微软发布8月安全更新补丁，修复了421个安全问题，涉及Windows、Microsoft Office、Azure、Visual Studio Code、Microsoft Exchange Server等广泛使用的产品，其中包括权限提升、远程代码执行等高危漏洞类型。
本月微软月度更新修复的漏洞中，严重程度为关键（Critical）的漏洞有62个，重要（Important）漏洞有358个，中危（Moderate）漏洞有1个。其中包括1个已检测到在野利用的漏洞：
Windows Ancillary Function Driver for WinSock权限提升漏洞（CVE-2026-68820）
请相关用户尽快更新补丁进行防护，完整漏洞列表请参考附录。
参考链接：
https://msrc.microsoft.com/update-guide/releaseNote/2026-Aug
二、重点漏洞简述
根据产品流行度和漏洞重要性筛选出此次更新中包含影响较大的漏洞，请相关用户重点进行关注：
Windows Ancillary Function Driver for WinSock权限提升漏洞（CVE-2026-68820）:
由于Windows套接字驱动(afd.sys)存在释放后重使用(Use-After-Free)问题，经过身份验证的本地攻击者在系统上运行特制的恶意程序引发条件竞争，从而获得系统SYSTEM权限。该漏洞存在在野利用，CVSS评分7.0。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68820
Windows User Profile Service权限提升漏洞（CVE-2026-62832）：
Windows用户配置文件服务存在权限提升漏洞，经过身份验证的攻击者可构造特殊的符号链接指向另一个高权限用户的注册表配置单元文件，从而实现权限提升。CVSS评分7.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62832
Windows DHCP Server远程代码执行漏洞（CVE-2026-62823）：
由于Windows DHCP服务器中存在基于堆的缓冲区溢出漏洞，未经身份验证的攻击者可在相邻网络中执行代码，CVSS评分8.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62823
Windows 部署服务 TFTP 服务器远程代码执行漏洞（CVE-2026-62893）:
由于Windows部署服务TFTP服务器中存在释放后使用 (Use-After-Free) 问题，未经身份验证的攻击者可通过网络向TFTP服务发送特制请求，从而实现远程代码执行。CVSS评分9.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62893
Windows DNS Server远程代码执行漏洞（CVE-2026-62817）:
由于Windows DNS服务存在越界写入 (Out-of-bounds write) 漏洞，未经身份验证的攻击者可通过网络向DNS服务器发送特制的请求，从而在目标系统上执行任意代码。CVSS评分为8.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62817
Windows 可靠多播传输驱动程序 (RMCAST) 远程代码执行漏洞（CVE-2026-62816）:
由于Windows可靠多播传输驱动中存在堆缓冲区溢出 (Heap-based Buffer Overflow) 漏洞，相邻网络中未经身份验证的攻击者可通过发送一系列特制的PGM数据包，从而在目标系统上执行任意代码。CVSS评分8.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62816
Microsoft Excel远程代码执行漏洞（CVE-2026-68804）:
由于Microsoft Office Excel在解析文件时存在数字截断错误，攻击者可以构造特制的恶意文件，利用操控的数值触发堆缓冲区溢出，从而在目标系统上执行任意代码。CVSS评分7.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68804
Microsoft Office图形组件远程代码执行漏洞（CVE-2026-63526）:
由于Microsoft Office中的基于栈的缓冲区溢出漏洞，攻击者可通过发送特制的恶意Office文件诱导用户打开或预览窗格，从而执行任意代码。CVSS评分7.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63526
Windows GDI+权限提升漏洞（CVE-2026-62890/CVE-2026-62822）:
Windows GDI+ 存在堆缓冲区溢出漏洞，由于Windows GDI+在解析特定图形内容时未能正确验证输入数据的大小，经过身份验证的本地攻击者可利用此漏洞执行任意代码，从而获取系统SYSTEM权限。CVSS评分7.8/8.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62890
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62822
Windows DNS服务器远程代码执行漏洞（CVE-2026-62878）:
由于Windows DNS服务器中存在远程代码执行漏洞，未经身份验证的攻击者只需向目标DNS服务器发送特制的网络请求，从而执行任意代码。CVSS评分9.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62878
Microsoft Excel 远程代码执行漏洞（CVE-2026-68794/CVE-2026-68816）:
由于Microsoft Excel中存在缓冲区溢出漏洞，未经身份验证的攻击者可诱导用户打开特制的恶意文件，从而实现远程代码执行。CVSS评分7.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68794
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68816
Microsoft Office Word远程代码执行漏洞（CVE-2026-63518/CVE-2026-63525/CVE-2026-64907）:
由于Microsoft Office Word中存在缓冲区溢出或数值截断错误漏洞，未经身份验证的攻击者可诱导用户打开特制的恶意文件，从而实现远程代码执行。CVSS评分7.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63518
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63525
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64907
Microsoft Office 远程代码执行漏洞（CVE-2026-63515/CVE-2026-70130/CVE-2026-63532/CVE-2026-64898/CVE-2026-64903/CVE-2026-64909/CVE-2026-64910/CVE-2026-64911/CVE-2026-65657）:
由于Microsoft Office中存在越界读、缓冲区溢出、整数溢出、整数下溢、指针解引用不当或释放后使用等漏洞，未经身份验证的攻击者可诱导用户打开特制的恶意文件，从而实现远程代码执行。CVSS评分7.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63515
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70130
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63532
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64898
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64903
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64909
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64910
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64911
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65657
Microsoft SharePoint Server权限提升漏洞（CVE-2026-64921/CVE-2026-62827）:
由于Microsoft SharePoint Server中存在身份验证绕过漏洞，经过身份验证的攻击者可通过网络发送特制的请求，从而实现权限提升。CVSS评分8.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64921
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62827
Microsoft SharePoint Server远程代码执行漏洞（CVE-2026-65665）:
由于Microsoft SharePoint Server中存在不安全的反序列化漏洞，经过身份验证的攻击者可通过网络发送特制的请求，从而实现远程代码执行。CVSS评分8.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65665
Windows DNS Server远程代码执行漏洞（CVE-2026-65789/CVE-2026-62820）:
由于Windows DNS Server中存在释放后使用或竞态条件漏洞，未经身份验证的攻击者可通过网络向DNS服务发送特制数据包，从而实现远程代码执行。CVSS评分8.1。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65789
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62820
Windows SSTP 远程代码执行漏洞（CVE-2026-62889）:
由于Windows安全套接字隧道协议（SSTP）在处理特制网络流量时存在内存损坏漏洞，未经身份验证的攻击者可通过向SSTP服务发送特制的数据包触发条件竞争，从而在目标系统上执行任意代码。CVSS评分8.9。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62889
Windows Active Directory Certificate Services (AD CS)远程代码执行漏洞（CVE-2026-62818）:
由于Windows Active Directory证书服务中存在释放后重用漏洞，经过身份验证的攻击者可通过发送特制的网络请求，从而执行任意代码。CVSS评分8.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62818
Remote Desktop Client远程代码执行漏洞（CVE-2026-62824）:
由于远程桌面客户端在处理特制连接请求时存在基于栈的缓冲区溢出漏洞（CWE-121），未经身份验证的攻击者可通过诱使用户连接到恶意的远程桌面服务器，从而在用户系统上执行任意代码。CVSS评分8.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62824
Microsoft QUIC 远程代码执行漏洞（CVE-2026-62815）:
由于Microsoft QUIC协议实现中存在释放后用漏洞，未经身份验证的攻击者可通过向暴露的QUIC服务发送特制网络流量，从而在目标系统上执行任意代码。CVSS评分9.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62815
Microsoft Office SharePoint 欺骗漏洞（CVE-2026-70332 ）:
由于Microsoft Office SharePoint存在服务器端请求伪造漏洞（SSRF），由于在处理外部资源请求时缺乏充分的验证，未经身份验证的攻击者可欺骗服务器发起非预期的网络请求，从而探测敏感信息。CVSS评分7.3。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70332
Microsoft Exchange Server 权限提升漏洞（CVE-2026-62911）:
由于Microsoft Exchange Server处理认证请求时存在弱认证路径问题，攻击者可以利用捕获重放攻击绕过认证机制，从而在目标服务器上提升权限。CVSS评分8.0。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62911
Azure Active Directory 权限提升漏洞（CVE-2026-50481）:
由于Azure Active Directory存在修改假定不可变数据的漏洞，经过身份验证的攻击者可以利用该漏洞操纵系统中的关键数据，从而实现权限提升。CVSS评分9.9。
官方通告链接：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50481
三、影响范围
以下为部分重点关注漏洞的受影响产品版本，其他漏洞影响产品范围请参阅官方通告链接。
| 漏洞编号 | 受影响产品版本 |
| CVE-2026-62832 | Windows 11 Version 24H2 for ARM64-based Systems
Windows 11 Version 24H2 for x64-based Systems Windows 11 Version 25H2 for ARM64-based Systems Windows 11 Version 25H2 for x64-based Systems Windows Server 2022 Windows Server 2022 (Server Core installation) Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for x64-based Systems Windows 10 Version 22H2 for 32-bit Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for x64-based Systems Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 23H2 for x64-based Systems Windows 11 Version 26H1 for ARM64-based Systems Windows 11 version 26H1 for x64-based Systems |
| CVE-2026-62817 | Windows 11 Version 24H2 for ARM64-based Systems
Windows 11 Version 24H2 for x64-based Systems Windows 11 Version 25H2 for ARM64-based Systems Windows 11 Version 25H2 for x64-based Systems Windows Server 2022 Windows Server 2022 (Server Core installation) Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for x64-based Systems Windows 10 Version 22H2 for 32-bit Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for x64-based Systems Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 23H2 for x64-based Systems Windows 11 Version 26H1 for ARM64-based Systems Windows 11 version 26H1 for x64-based Systems Windows Server 2019 Windows Server 2019 (Server Core installation) |
| CVE-2026-62816
CVE-2026-62822 CVE-2026-62889 CVE-2026-62890 CVE-2026-68820 |
Windows 11 Version 24H2 for ARM64-based Systems
Windows 11 Version 24H2 for x64-based Systems Windows 11 Version 25H2 for ARM64-based Systems Windows 11 Version 25H2 for x64-based Systems Windows Server 2022 Windows Server 2022 (Server Core installation) Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for x64-based Systems Windows 10 Version 22H2 for 32-bit Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for x64-based Systems Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 23H2 for x64-based Systems Windows 11 Version 26H1 for ARM64-based Systems Windows 11 version 26H1 for x64-based Systems Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2019 Windows Server 2019 (Server Core installation) |
| CVE-2026-63526 | Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft Office 2016 (32-bit edition) Microsoft Office 2016 (64-bit edition) Microsoft Office 2019 for 32-bit editions Microsoft Office 2019 for 64-bit editions Microsoft Office 365 for Mac Microsoft Office LTSC 2021 for 32-bit editions Microsoft Office LTSC 2021 for 64-bit editions Microsoft Office LTSC 2024 for 32-bit editions Microsoft Office LTSC 2024 for 64-bit editions Microsoft Office LTSC for Mac 2021 Microsoft Office LTSC for Mac 2024 |
| CVE-2026-68794
CVE-2026-68804 CVE-2026-68816 |
Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft Office 2019 for 64-bit editions Microsoft Office 2019 for 32-bit editions Microsoft Office LTSC 2024 for 32-bit editions Microsoft Office LTSC 2021 for 32-bit editions Microsoft Office LTSC 2021 for 64-bit editions Microsoft Office LTSC for Mac 2021 Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft Excel 2016 (32-bit edition) Microsoft Office LTSC for Mac 2024 Microsoft Office LTSC 2024 for 64-bit editions Microsoft Office 365 for Mac Microsoft Excel 2016 (64-bit edition) |
| CVE-2026-63518 | Microsoft Office 365 for Mac
Microsoft Outlook 2016 (64-bit edition) Microsoft Outlook 2016 (32-bit edition) Microsoft Office LTSC for Mac 2024 Microsoft Office LTSC 2024 for 64-bit editions Microsoft Office LTSC 2024 for 32-bit editions Microsoft Office LTSC 2021 for 32-bit editions Microsoft Office LTSC 2021 for 64-bit editions Microsoft Office LTSC for Mac 2021 Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft Office 2019 for 64-bit editions Microsoft Office 2019 for 32-bit editions |
| CVE-2026-63525 | Microsoft Office LTSC 2021 for 64-bit editions
Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft Office 2019 for 64-bit editions Microsoft Office 2019 for 32-bit editions Microsoft Word 2016 (64-bit edition) Microsoft Word 2016 (32-bit edition) Microsoft Office LTSC 2024 for 64-bit editions Microsoft Office LTSC 2024 for 32-bit editions Microsoft Office LTSC 2021 for 32-bit editions |
| CVE-2026-64907 | Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft Office LTSC for Mac 2021 Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft Office 2019 for 64-bit editions Microsoft Office 2019 for 32-bit editions Microsoft Office 365 for Mac Microsoft Word 2016 (64-bit edition) Microsoft Word 2016 (32-bit edition) Microsoft Office LTSC for Mac 2024 Microsoft Office LTSC 2024 for 64-bit editions Microsoft Office LTSC 2024 for 32-bit editions Microsoft Office LTSC 2021 for 32-bit editions Microsoft Office LTSC 2021 for 64-bit editions |
| CVE-2026-63515
CVE-2026-63532 CVE-2026-64903 CVE-2026-64909 CVE-2026-63526 |
Microsoft Office 2016 (64-bit edition)
Microsoft Office 2016 (32-bit edition) Microsoft Office LTSC for Mac 2024 Microsoft Office LTSC 2024 for 64-bit editions Microsoft Office LTSC 2024 for 32-bit editions Microsoft Office LTSC 2021 for 32-bit editions Microsoft Office LTSC 2021 for 64-bit editions Microsoft Office LTSC for Mac 2021 Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft Office 2019 for 64-bit editions Microsoft Office 2019 for 32-bit editions Microsoft Office 365 for Mac |
| CVE-2026-64898
CVE-2026-64910 CVE-2026-64911 CVE-2026-65657 |
Microsoft Office LTSC for Mac 2024
Microsoft Office LTSC 2024 for 64-bit editions Microsoft Office LTSC 2024 for 32-bit editions Microsoft Office LTSC 2021 for 32-bit editions Microsoft Office LTSC 2021 for 64-bit editions Microsoft Office LTSC for Mac 2021 Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft Office 2019 for 64-bit editions Microsoft Office 2019 for 32-bit editions Microsoft Office 365 for Mac |
| CVE-2026-70130 | Microsoft Office LTSC 2024 for 64-bit editions
Microsoft Office LTSC 2024 for 32-bit editions Microsoft Office LTSC 2021 for 32-bit editions Microsoft Office LTSC 2021 for 64-bit editions Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft Office 2019 for 64-bit editions Microsoft Office 2019 for 32-bit editions |
| CVE-2026-62827
CVE-2026-64921 |
Microsoft SharePoint Server Subscription Edition
Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 |
| CVE-2026-65665 | Microsoft SharePoint Server Subscription Edition
Microsoft SharePoint Server 2019 |
| CVE-2026-70332 | Microsoft SharePoint Online |
| CVE-2026-62820
CVE-2026-65789 |
Windows Server 2022
Windows Server 2022 (Server Core installation) Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2019 Windows Server 2019 (Server Core installation) |
| CVE-2026-62818
CVE-2026-62823 CVE-2026-62878 CVE-2026-62893 |
Windows Server 2022
Windows Server 2022 (Server Core installation) Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2019 Windows Server 2019 (Server Core installation) |
| CVE-2026-62824 | Windows Server 2012 R2 (Server Core installation)
Windows Server 2012 R2 Windows Server 2012 (Server Core installation) Windows Server 2012 Windows Server 2016 (Server Core installation) Windows Server 2016 Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems |
| CVE-2026-62815 | Windows 11 Version 24H2 for ARM64-based Systems
Windows 11 Version 24H2 for x64-based Systems Windows 11 Version 25H2 for ARM64-based Systems Windows 11 Version 25H2 for x64-based Systems Windows Server 2022 Windows Server 2022 (Server Core installation) Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 23H2 for x64-based Systems Windows 11 Version 26H1 for ARM64-based Systems Windows 11 version 26H1 for x64-based Systems |
| CVE-2026-62911 | Microsoft Exchange Server 2019 Cumulative Update 14
Microsoft Exchange Server 2019 Cumulative Update 15 Microsoft Exchange Server Subscription Edition RTM Microsoft Exchange Server 2016 Cumulative Update 23 |
| CVE-2026-50481 | Azure Active Directory |
四、漏洞防护
4.1 补丁更新
目前微软官方已针对受支持的产品版本发布了修复以上漏洞的安全补丁，强烈建议受影响用户尽快安装补丁进行防护，官方下载链接：
https://msrc.microsoft.com/update-guide/releaseNote/2026-Aug
注：由于网络问题、计算机环境问题等原因，Windows Update的补丁更新可能出现失败。用户在安装补丁后，应及时检查补丁是否成功更新。
右键点击Windows图标，选择“设置(N)”，选择“更新和安全”-“Windows更新”，查看该页面上的提示信息，也可点击“查看更新历史记录”查看历史更新情况。
针对未成功安装的更新，可点击更新名称跳转到微软官方下载页面，建议用户点击该页面上的链接，转到“Microsoft更新目录”网站下载独立程序包并安装。
附录：漏洞列表
| 影响产品 | CVE编号 | 漏洞标题 | 严重程度 |
| Azure | CVE-2026-49163 | Application Insights Profiler权限提升漏洞 | Critical |
| Azure | CVE-2026-50481 | Azure Active Directory权限提升漏洞 | Critical |
| Microsoft Office | CVE-2026-50515 | Azure Service Bus远程代码执行漏洞 | Critical |
| Azure | CVE-2026-50516 | Microsoft Azure Kubernetes Service权限提升漏洞 | Critical |
| Azure | CVE-2026-56161 | Azure Logic Apps信息泄露漏洞 | Critical |
| Azure | CVE-2026-56162 | Azure SQL Database权限提升漏洞 | Critical |
| Azure | CVE-2026-59115 | Microsoft Entra Provisioning Service权限提升漏洞 | Critical |
| Microsoft Dynamics | CVE-2026-59118 | Copilot Cowork权限提升漏洞 | Critical |
| Windows | CVE-2026-62815 | Microsoft QUIC远程代码执行漏洞 | Critical |
| Windows | CVE-2026-62816 | Windows Reliable Multicast Transport Driver (RMCAST)远程代码执行漏洞 | Critical |
| Windows | CVE-2026-62817 | Windows DNS Server远程代码执行漏洞 | Critical |
| Windows | CVE-2026-62818 | Windows Active Directory Certificate Services (AD CS)远程代码执行漏洞 | Critical |
| Windows | CVE-2026-62819 | Windows Routing and Remote Access Service (RRAS)远程代码执行漏洞 | Critical |
| Windows | CVE-2026-62820 | Windows DNS Server远程代码执行漏洞 | Critical |
| Windows | CVE-2026-62822 | Windows GDI+远程代码执行漏洞 | Critical |
| Windows | CVE-2026-62823 | Windows DHCP Server远程代码执行漏洞 | Critical |
| Windows | CVE-2026-62824 | Remote Desktop Client远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-62827 | Microsoft SharePoint Server权限提升漏洞 | Critical |
| Azure | CVE-2026-62830 | Azure SRE Agent权限提升漏洞 | Critical |
| Microsoft Office | CVE-2026-62836 | Azure SQL Managed Instance权限提升漏洞 | Critical |
| Azure | CVE-2026-62869 | Azure Entra ID欺骗漏洞 | Critical |
| Azure | CVE-2026-62873 | Microsoft 365 Admin Center权限提升漏洞 | Critical |
| Windows | CVE-2026-62878 | Windows DNS Server远程代码执行漏洞 | Critical |
| Windows | CVE-2026-62889 | Windows Secure Socket Tunneling Protocol (SSTP)远程代码执行漏洞 | Critical |
| Windows | CVE-2026-62890 | Windows GDI+权限提升漏洞 | Critical |
| Windows | CVE-2026-62893 | Windows Deployment Services TFTP Server远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-62896 | Microsoft Teams权限提升漏洞 | Critical |
| Microsoft Exchange Server Subscription Edition RTM,Microsoft Exchange Server | CVE-2026-62911 | Microsoft Exchange Server权限提升漏洞 | Critical |
| Microsoft Office | CVE-2026-62918 | Microsoft Teams欺骗漏洞 | Critical |
| Device | CVE-2026-63508 | Microsoft Planetary Computer Pro权限提升漏洞 | Critical |
| Microsoft Office | CVE-2026-63513 | Microsoft Office Graphics Component远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-63515 | Microsoft Office远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-63518 | Microsoft Office Word远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-63519 | Microsoft Office Graphics Component远程代码执行漏洞 | Critical |
| Azure | CVE-2026-63522 | Azure SQL Database权限提升漏洞 | Critical |
| Microsoft Office | CVE-2026-63525 | Microsoft Office Word远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-63526 | Microsoft Office Graphics Component远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-63532 | Microsoft Office远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-64898 | Microsoft Office远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-64903 | Microsoft Office远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-64907 | Microsoft Office Word远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-64909 | Microsoft Office远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-64910 | Microsoft Office远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-64911 | Microsoft Office远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-64921 | Microsoft SharePoint Server权限提升漏洞 | Critical |
| Microsoft Office | CVE-2026-65657 | Microsoft Office远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-65664 | Microsoft Office Graphics Component远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-65665 | Microsoft SharePoint Server远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-65667 | Microsoft Teams权限提升漏洞 | Critical |
| Azure | CVE-2026-65668 | Microsoft Purview eDiscovery权限提升漏洞 | Critical |
| Windows | CVE-2026-65789 | Windows DNS Server远程代码执行漏洞 | Critical |
| Windows | CVE-2026-65791 | Windows iSCSI Target Service远程代码执行漏洞 | Critical |
| Windows | CVE-2026-66799 | Windows Key Guard权限提升漏洞 | Critical |
| Windows | CVE-2026-66802 | Windows Device Health Attestation (DHA)远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-66807 | Microsoft Office Graphics Component远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-68794 | Microsoft Excel远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-68804 | Microsoft Excel远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-68816 | Microsoft Excel远程代码执行漏洞 | Critical |
| Azure | CVE-2026-68823 | Azure Confidential Ledger远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-70130 | Microsoft Office远程代码执行漏洞 | Critical |
| Microsoft Office | CVE-2026-70332 | Microsoft Office SharePoint欺骗漏洞 | Critical |
| Windows | CVE-2026-71331 | Windows Device Health Attestation (DHA)远程代码执行漏洞 | Critical |
| Microsoft Dynamics | CVE-2026-40375 | Microsoft Dynamics Business Central信息泄露漏洞 | Important |
| Windows | CVE-2026-42976 | Remote Access Management service/API (RPC server)权限提升漏洞 | Important |
| Visual Studio Code | CVE-2026-47285 | Visual Studio Code信息泄露漏洞 | Important |
| Azure | CVE-2026-47299 | Azure Monitor Agent权限提升漏洞 | Important |
| Windows | CVE-2026-49179 | Windows Active Directory Domain Services远程代码执行漏洞 | Important |
| Windows | CVE-2026-50472 | Windows LUA File Virtualization Filter Driver权限提升漏洞 | Important |
| Windows | CVE-2026-54113 | Remote Procedure Call拒绝服务漏洞 | Important |
| System Center | CVE-2026-54123 | Microsoft Defender for Endpoint for Mac信息泄露漏洞 | Important |
| Python extension for Visual Studio Code | CVE-2026-54981 | Visual Studio Code Python Extension安全功能绕过漏洞 | Important |
| Windows | CVE-2026-54984 | Windows Imaging Component远程代码执行漏洞 | Important |
| Windows | CVE-2026-56174 | Windows Narrator Braille权限提升漏洞 | Important |
| Open Source Software | CVE-2026-57104 | Azure Storage Explorer权限提升漏洞 | Important |
| Microsoft Office | CVE-2026-57105 | Microsoft Office SharePoint欺骗漏洞 | Important |
| PowerShell | CVE-2026-58612 | PowerShell信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-58639 | Microsoft SharePoint Server欺骗漏洞 | Important |
| .NET 8.0 installed on Windows,.NET 8.0 installed on Mac OS,.NET 9.0 installed on Mac OS,.NET 9.0 installed on Linux,.NET 10.0 installed on Mac OS,.NET 9.0 installed on Windows,.NET 10.0 installed on Linux,.NET 8.0 installed on Linux | CVE-2026-58641 | .NET权限提升漏洞 | Important |
| Visual Studio Code | CVE-2026-58650 | Visual Studio Code安全功能绕过漏洞 | Important |
| Microsoft Office | CVE-2026-58651 | Microsoft Word远程代码执行漏洞 | Important |
| Visual Studio Code | CVE-2026-59113 | Visual Studio Code远程代码执行漏洞 | Important |
| PowerShell | CVE-2026-59119 | PowerShell权限提升漏洞 | Important |
| Windows | CVE-2026-59122 | Windows Telephony Service权限提升漏洞 | Important |
| Windows | CVE-2026-59124 | Microsoft High Performance Computing (HPC) Pack远程代码执行漏洞 | Important |
| Windows | CVE-2026-59125 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Important |
| Windows | CVE-2026-59126 | Windows Event Logging Service权限提升漏洞 | Important |
| Windows | CVE-2026-59127 | Windows Installer权限提升漏洞 | Important |
| Windows | CVE-2026-59128 | Windows Encrypting File System (EFS)信息泄露漏洞 | Important |
| Windows | CVE-2026-59130 | AMD Zen信息泄露漏洞 | Important |
| Windows | CVE-2026-59131 | AMD Zen信息泄露漏洞 | Important |
| Windows | CVE-2026-59132 | Windows TCP/IP拒绝服务漏洞 | Important |
| Windows | CVE-2026-59133 | Microsoft High Performance Computing (HPC) Pack权限提升漏洞 | Important |
| Windows | CVE-2026-59134 | Remote Desktop Client远程代码执行漏洞 | Important |
| Windows | CVE-2026-59135 | Microsoft Windows Search Component信息泄露漏洞 | Important |
| Windows | CVE-2026-59136 | Microsoft COM for Windows信息泄露漏洞 | Important |
| Windows | CVE-2026-59137 | Windows Event Logging Service信息泄露漏洞 | Important |
| Windows | CVE-2026-59138 | Microsoft Remote Registry Service拒绝服务漏洞 | Important |
| Windows | CVE-2026-61345 | Microsoft Remote Registry Service拒绝服务漏洞 | Important |
| Windows | CVE-2026-61346 | Windows Graphics Kernel权限提升漏洞 | Important |
| Windows | CVE-2026-61347 | Windows Event Logging Service信息泄露漏洞 | Important |
| Windows | CVE-2026-61348 | Windows Ancillary Function Driver for WinSock权限提升漏洞 | Important |
| Windows | CVE-2026-61349 | Windows Work Folder Service权限提升漏洞 | Important |
| Windows | CVE-2026-61350 | Windows NTFS信息泄露漏洞 | Important |
| Windows | CVE-2026-61352 | Remote Desktop Client远程代码执行漏洞 | Important |
| Windows | CVE-2026-61353 | Windows Telephony Service权限提升漏洞 | Important |
| Windows | CVE-2026-61355 | Windows Sensor Data Service权限提升漏洞 | Important |
| Windows | CVE-2026-61356 | Windows Remote Desktop Services权限提升漏洞 | Important |
| Windows | CVE-2026-61357 | Application Information Services权限提升漏洞 | Important |
| Windows | CVE-2026-61358 | Windows Accessibility Infrastructure (ATBroker.exe)权限提升漏洞 | Important |
| Windows | CVE-2026-61359 | Windows Storage权限提升漏洞 | Important |
| Windows | CVE-2026-61360 | Windows GDI信息泄露漏洞 | Important |
| Windows | CVE-2026-61361 | Windows DHCP Client远程代码执行漏洞 | Important |
| Windows | CVE-2026-61363 | Remote Desktop Client远程代码执行漏洞 | Important |
| Windows | CVE-2026-61364 | Windows Remote Desktop Services权限提升漏洞 | Important |
| Windows | CVE-2026-61365 | Windows Remote Desktop Services权限提升漏洞 | Important |
| Windows | CVE-2026-61366 | Windows Network Connection Broker权限提升漏洞 | Important |
| Windows | CVE-2026-61367 | Windows Remote Desktop Services权限提升漏洞 | Important |
| Windows | CVE-2026-61368 | Windows Hyper-V信息泄露漏洞 | Important |
| Windows | CVE-2026-61918 | Windows Remote Desktop Client信息泄露漏洞 | Important |
| Windows | CVE-2026-61920 | Windows DNS Server远程代码执行漏洞 | Important |
| Windows | CVE-2026-61921 | Windows Remote Desktop Client信息泄露漏洞 | Important |
| Windows | CVE-2026-61923 | Windows Display Enhancement Service权限提升漏洞 | Important |
| Windows | CVE-2026-61924 | Windows Remote Desktop Client信息泄露漏洞 | Important |
| Windows | CVE-2026-61925 | Windows Installer权限提升漏洞 | Important |
| Windows | CVE-2026-61926 | Windows USB Driver权限提升漏洞 | Important |
| Windows | CVE-2026-61927 | Windows Bind Filter Driver权限提升漏洞 | Important |
| Windows | CVE-2026-61928 | Windows Hello篡改漏洞 | Important |
| Windows | CVE-2026-61929 | Windows Kernel权限提升漏洞 | Important |
| Windows | CVE-2026-61930 | Windows Kernel权限提升漏洞 | Important |
| Windows | CVE-2026-61932 | Windows DWM Core Library权限提升漏洞 | Important |
| Windows | CVE-2026-61933 | Windows DWM Core Library信息泄露漏洞 | Important |
| Windows | CVE-2026-61934 | Windows Bind Filter Driver权限提升漏洞 | Important |
| Windows | CVE-2026-61936 | Windows Defender Firewall Service安全功能绕过漏洞 | Important |
| Windows | CVE-2026-61937 | Windows HTTP.sys权限提升漏洞 | Important |
| Windows | CVE-2026-61938 | Windows Installer权限提升漏洞 | Important |
| Windows | CVE-2026-61939 | Winlogon权限提升漏洞 | Important |
| Windows | CVE-2026-62688 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important |
| Windows | CVE-2026-62690 | Windows Push Notifications权限提升漏洞 | Important |
| Windows | CVE-2026-62692 | Windows Remote Desktop Services权限提升漏洞 | Important |
| Windows | CVE-2026-62693 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important |
| Windows | CVE-2026-62695 | Windows Storage权限提升漏洞 | Important |
| Windows | CVE-2026-62696 | Windows Program Compatibility Assistant Service权限提升漏洞 | Important |
| Windows | CVE-2026-62698 | Microsoft Digest Authentication权限提升漏洞 | Important |
| Windows | CVE-2026-62699 | Windows Universal Disk Format File System Driver (UDFS)远程代码执行漏洞 | Important |
| Windows | CVE-2026-62700 | Windows NTFS权限提升漏洞 | Important |
| Windows | CVE-2026-62701 | Windows Telephony Service权限提升漏洞 | Important |
| Windows | CVE-2026-62702 | Windows Graphics Kernel拒绝服务漏洞 | Important |
| Windows | CVE-2026-62703 | Windows DWM Core Library信息泄露漏洞 | Important |
| Windows | CVE-2026-62705 | Windows Bind Filter Driver权限提升漏洞 | Important |
| Windows | CVE-2026-62707 | Windows Modern Device Management (MDM)权限提升漏洞 | Important |
| Windows | CVE-2026-62708 | Windows Kernel权限提升漏洞 | Important |
| Windows | CVE-2026-62709 | Windows GDI+信息泄露漏洞 | Important |
| Windows | CVE-2026-62710 | Windows Device Association Service权限提升漏洞 | Important |
| Windows | CVE-2026-62711 | Windows Win32k权限提升漏洞 | Important |
| Windows | CVE-2026-62712 | Windows Win32k权限提升漏洞 | Important |
| Windows | CVE-2026-62713 | Windows Cloud Files Mini Filter Driver权限提升漏洞 | Important |
| Windows | CVE-2026-62714 | Windows DHCP Server信息泄露漏洞 | Important |
| Windows | CVE-2026-62715 | Windows DHCP Server信息泄露漏洞 | Important |
| Windows | CVE-2026-62716 | Windows DHCP Server信息泄露漏洞 | Important |
| Windows | CVE-2026-62717 | Windows Message Queuing权限提升漏洞 | Important |
| Windows | CVE-2026-62718 | Windows DHCP Server信息泄露漏洞 | Important |
| Windows | CVE-2026-62719 | Windows Message Queuing权限提升漏洞 | Important |
| Windows | CVE-2026-62720 | Windows DHCP Server信息泄露漏洞 | Important |
| Windows | CVE-2026-62721 | Windows User-Mode Power Service (UMPS)权限提升漏洞 | Important |
| Windows | CVE-2026-62722 | Windows Bind Filter Driver权限提升漏洞 | Important |
| Windows | CVE-2026-62723 | Windows Telephony Service权限提升漏洞 | Important |
| Windows | CVE-2026-62724 | Windows Telephony Service权限提升漏洞 | Important |
| Windows | CVE-2026-62725 | Windows Telephony Service权限提升漏洞 | Important |
| Windows | CVE-2026-62726 | Windows Telephony Service权限提升漏洞 | Important |
| Windows | CVE-2026-62728 | Windows Common Log File System Driver权限提升漏洞 | Important |
| Windows | CVE-2026-62729 | Windows Telephony Service权限提升漏洞 | Important |
| Windows | CVE-2026-62730 | Windows Wired AutoConfig Service信息泄露漏洞 | Important |
| Windows | CVE-2026-62732 | Windows Telephony Service权限提升漏洞 | Important |
| Windows | CVE-2026-62733 | Windows Win32k权限提升漏洞 | Important |
| Windows | CVE-2026-62734 | Windows Telephony Service权限提升漏洞 | Important |
| Windows | CVE-2026-62735 | Windows HTTP.sys权限提升漏洞 | Important |
| Windows | CVE-2026-62736 | Windows DHCP Client权限提升漏洞 | Important |
| Windows | CVE-2026-62737 | Windows Kernel权限提升漏洞 | Important |
| Windows | CVE-2026-62738 | Windows Management Instrumentation信息泄露漏洞 | Important |
| Windows | CVE-2026-62739 | Windows HTTP.sys权限提升漏洞 | Important |
| Windows | CVE-2026-62740 | Windows Imaging Component信息泄露漏洞 | Important |
| Windows | CVE-2026-62741 | Windows HTTP.sys权限提升漏洞 | Important |
| Windows | CVE-2026-62742 | Windows DHCP Server信息泄露漏洞 | Important |
| Windows | CVE-2026-62743 | Win32k信息泄露漏洞 | Important |
| Windows | CVE-2026-62745 | Windows DHCP Server信息泄露漏洞 | Important |
| Windows | CVE-2026-62746 | Win32k信息泄露漏洞 | Important |
| Windows | CVE-2026-62747 | Windows Device Association Service权限提升漏洞 | Important |
| Windows | CVE-2026-62748 | Windows Telephony Service权限提升漏洞 | Important |
| Windows | CVE-2026-62749 | Windows Kernel权限提升漏洞 | Important |
| Windows | CVE-2026-62750 | Windows HTTP Protocol Stack篡改漏洞 | Important |
| Windows | CVE-2026-62751 | Windows Projected File System权限提升漏洞 | Important |
| Windows | CVE-2026-62752 | Windows Kerberos权限提升漏洞 | Important |
| Windows | CVE-2026-62753 | Windows HTTP.sys权限提升漏洞 | Important |
| Windows | CVE-2026-62754 | Windows Kerberos权限提升漏洞 | Important |
| Windows | CVE-2026-62755 | Windows DHCP Client权限提升漏洞 | Important |
| Windows | CVE-2026-62757 | Windows Schannel安全功能绕过漏洞 | Important |
| Windows | CVE-2026-62758 | Windows Remote Access Connection Manager权限提升漏洞 | Important |
| Windows | CVE-2026-62761 | Windows DHCP Server权限提升漏洞 | Important |
| Windows | CVE-2026-62766 | Windows Kerberos权限提升漏洞 | Important |
| Windows | CVE-2026-62768 | Windows Installer权限提升漏洞 | Important |
| Windows | CVE-2026-62769 | Windows DNS权限提升漏洞 | Important |
| Windows | CVE-2026-62770 | Windows Shell权限提升漏洞 | Important |
| Windows | CVE-2026-62771 | Windows Cloud Files Mini Filter Driver权限提升漏洞 | Important |
| Windows | CVE-2026-62772 | Windows Container Isolation FS Filter Driver (unionfs.sys)权限提升漏洞 | Important |
| Windows | CVE-2026-62773 | Windows Kerberos权限提升漏洞 | Important |
| Windows | CVE-2026-62774 | Windows Graphics Kernel权限提升漏洞 | Important |
| Windows | CVE-2026-62775 | Windows Container Isolation FS Filter Driver (unionfs.sys)信息泄露漏洞 | Important |
| Windows | CVE-2026-62776 | Windows DHCP Server权限提升漏洞 | Important |
| Windows | CVE-2026-62777 | Windows License Manager权限提升漏洞 | Important |
| Windows | CVE-2026-62778 | Windows DNS权限提升漏洞 | Important |
| Windows | CVE-2026-62779 | Windows Schannel权限提升漏洞 | Important |
| Windows | CVE-2026-62780 | Windows Kernel权限提升漏洞 | Important |
| Windows | CVE-2026-62781 | RPC Runtime Library远程代码执行漏洞 | Important |
| Windows | CVE-2026-62782 | Windows SMB Client信息泄露漏洞 | Important |
| Windows | CVE-2026-62783 | Windows Remote Access Connection Manager权限提升漏洞 | Important |
| Windows | CVE-2026-62784 | Microsoft Local Security Authority Server (lsasrv)远程代码执行漏洞 | Important |
| Windows | CVE-2026-62785 | Windows LDAP – Lightweight Directory Access Protocol远程代码执行漏洞 | Important |
| Windows | CVE-2026-62786 | Win32k信息泄露漏洞 | Important |
| Windows | CVE-2026-62787 | Windows DNS Server远程代码执行漏洞 | Important |
| Windows | CVE-2026-62788 | Windows Kernel权限提升漏洞 | Important |
| Windows | CVE-2026-62790 | Windows SMBv3 Server远程代码执行漏洞 | Important |
| Windows | CVE-2026-62792 | Windows TCP/IP远程代码执行漏洞 | Important |
| Windows | CVE-2026-62793 | Windows NTFS信息泄露漏洞 | Important |
| Windows | CVE-2026-62795 | Windows LDAP – Lightweight Directory Access Protocol远程代码执行漏洞 | Important |
| Windows | CVE-2026-62796 | Windows NTFS信息泄露漏洞 | Important |
| Windows | CVE-2026-62797 | Windows NTFS权限提升漏洞 | Important |
| Windows | CVE-2026-62798 | Win32k信息泄露漏洞 | Important |
| Windows | CVE-2026-62799 | Windows SMB Client权限提升漏洞 | Important |
| Windows | CVE-2026-62800 | Windows SMBv3 Server远程代码执行漏洞 | Important |
| Windows | CVE-2026-62803 | Windows DHCP Server权限提升漏洞 | Important |
| Windows | CVE-2026-62807 | Windows DHCP Server权限提升漏洞 | Important |
| Windows | CVE-2026-62811 | Windows HTTP.sys权限提升漏洞 | Important |
| Windows | CVE-2026-62812 | Windows DHCP Server权限提升漏洞 | Important |
| Windows | CVE-2026-62814 | Windows DHCP Server信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-62829 | Microsoft SharePoint Server欺骗漏洞 | Important |
| Windows | CVE-2026-62832 | Windows User Profile Service权限提升漏洞 | Important |
| Microsoft Office | CVE-2026-62837 | Microsoft SharePoint Server信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-62839 | Microsoft SharePoint Server欺骗漏洞 | Important |
| Microsoft Office | CVE-2026-62842 | Microsoft Office Graphics Component信息泄露漏洞 | Important |
| Microsoft Visual Studio,.NET 8.0 installed on Windows,.NET 8.0 installed on Mac OS,.NET 9.0 installed on Mac OS,.NET 9.0 installed on Linux,.NET 10.0 installed on Mac OS,.NET 9.0 installed on Windows,.NET 10.0 installed on Linux,.NET 8.0 installed on Linux | CVE-2026-62871 | .NET权限提升漏洞 | Important |
| Microsoft .NET Framework | CVE-2026-62872 | .NET Framework权限提升漏洞 | Important |
| Windows | CVE-2026-62876 | Windows Win32k权限提升漏洞 | Important |
| Windows | CVE-2026-62877 | Windows Win32k权限提升漏洞 | Important |
| Windows | CVE-2026-62880 | Windows NTFS权限提升漏洞 | Important |
| Windows | CVE-2026-62881 | Windows DNS权限提升漏洞 | Important |
| Microsoft Office | CVE-2026-62882 | Microsoft Outlook欺骗漏洞 | Important |
| Windows | CVE-2026-62883 | Windows DNS权限提升漏洞 | Important |
| Windows | CVE-2026-62885 | Windows Win32k权限提升漏洞 | Important |
| Microsoft Visual Studio,.NET 8.0 installed on Windows,.NET 10.0 installed on Windows,.NET 8.0 installed on Mac OS,.NET 9.0 installed on Mac OS,.NET 9.0 installed on Linux,.NET 10.0 installed on Mac OS,.NET 9.0 installed on Windows,.NET 10.0 installed on Linux,.NET 8.0 installed on Linux | CVE-2026-62886 | .NET权限提升漏洞 | Important |
| Windows | CVE-2026-62887 | Windows NTFS信息泄露漏洞 | Important |
| Windows | CVE-2026-62888 | Windows DWM Core Library权限提升漏洞 | Important |
| Windows | CVE-2026-62892 | Capability Access Management Service (camsvc)权限提升漏洞 | Important |
| Windows | CVE-2026-62894 | Windows DWM Core Library权限提升漏洞 | Important |
| Microsoft Visual Studio,.NET 8.0 installed on Windows,.NET 10.0 installed on Windows,.NET 8.0 installed on Mac OS,.NET 9.0 installed on Mac OS,Microsoft .NET Framework,.NET 9.0 installed on Linux,.NET 10.0 installed on Mac OS,.NET 9.0 installed on Windows,.NET 10.0 installed on Linux,.NET 8.0 installed on Linux | CVE-2026-62897 | .NET Framework远程代码执行漏洞 | Important |
| Microsoft Visual Studio,.NET 8.0 installed on Windows,.NET 10.0 installed on Windows,.NET 8.0 installed on Mac OS,.NET 9.0 installed on Mac OS,.NET 9.0 installed on Linux,.NET 10.0 installed on Mac OS,.NET 9.0 installed on Windows,.NET 10.0 installed on Linux,.NET 8.0 installed on Linux | CVE-2026-62898 | Microsoft QUIC信息泄露漏洞 | Important |
| Microsoft Visual Studio,.NET 8.0 installed on Windows,.NET 8.0 installed on Mac OS,.NET 9.0 installed on Mac OS,.NET 9.0 installed on Linux,.NET 10.0 installed on Mac OS,.NET 9.0 installed on Windows,.NET 10.0 installed on Linux,.NET 8.0 installed on Linux | CVE-2026-62899 | .NET安全功能绕过漏洞 | Important |
| Microsoft Visual Studio,.NET 8.0 installed on Windows,.NET 8.0 installed on Mac OS,.NET 9.0 installed on Mac OS,.NET 9.0 installed on Linux,.NET 10.0 installed on Mac OS,.NET 9.0 installed on Windows,.NET 10.0 installed on Linux,.NET 8.0 installed on Linux | CVE-2026-62900 | .NET信息泄露漏洞 | Important |
| Microsoft Visual Studio,.NET 8.0 installed on Windows,.NET 8.0 installed on Mac OS,.NET 9.0 installed on Mac OS,.NET 9.0 installed on Linux,.NET 10.0 installed on Mac OS,.NET 9.0 installed on Windows,.NET 10.0 installed on Linux,.NET 8.0 installed on Linux | CVE-2026-62901 | .NET拒绝服务漏洞 | Important |
| Microsoft Visual Studio,.NET 8.0 installed on Windows,.NET 8.0 installed on Mac OS,.NET 9.0 installed on Mac OS,.NET 9.0 installed on Linux,.NET 10.0 installed on Mac OS,.NET 9.0 installed on Windows,.NET 10.0 installed on Linux,.NET 8.0 installed on Linux | CVE-2026-62902 | .NET信息泄露漏洞 | Important |
| Windows | CVE-2026-62908 | Windows Backup Engine权限提升漏洞 | Important |
| Microsoft Visual Studio,.NET 8.0 installed on Windows,.NET 10.0 installed on Windows,.NET 8.0 installed on Mac OS,.NET 9.0 installed on Mac OS,.NET 9.0 installed on Linux,.NET 10.0 installed on Mac OS,.NET 9.0 installed on Windows,.NET 10.0 installed on Linux,.NET 8.0 installed on Linux | CVE-2026-62909 | .NET权限提升漏洞 | Important |
| Microsoft Exchange Server,Microsoft Exchange Server Subscription Edition RTM | CVE-2026-62910 | Microsoft Exchange Server权限提升漏洞 | Important |
| Microsoft Exchange Server,Microsoft Exchange Server Subscription Edition RTM | CVE-2026-62912 | Microsoft Exchange Server拒绝服务漏洞 | Important |
| Microsoft Exchange Server Subscription Edition RTM,Microsoft Exchange Server | CVE-2026-62913 | Microsoft Exchange Server远程代码执行漏洞 | Important |
| Microsoft Exchange Server Subscription Edition RTM,Microsoft Exchange Server | CVE-2026-62914 | Microsoft Exchange Server欺骗漏洞 | Important |
| Microsoft Exchange Server Subscription Edition RTM,Microsoft Exchange Server | CVE-2026-62915 | Microsoft Exchange Server安全功能绕过漏洞 | Important |
| Microsoft Office | CVE-2026-62917 | Microsoft SharePoint Server欺骗漏洞 | Important |
| Microsoft Office | CVE-2026-63512 | Microsoft SharePoint Server篡改漏洞 | Important |
| Microsoft Office | CVE-2026-63514 | Microsoft SharePoint Server远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-63516 | Microsoft SharePoint Server欺骗漏洞 | Important |
| Microsoft Office | CVE-2026-63517 | Microsoft Office Graphics Component信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-63520 | Microsoft SharePoint Server远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-63521 | Microsoft Office Word信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-63524 | Microsoft Office信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-63527 | Microsoft Office Word远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-63528 | Microsoft Office Word信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-63529 | Microsoft Office信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-63530 | Microsoft Office Word信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-63531 | Microsoft Office Word信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-63533 | Microsoft Office远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-64897 | Microsoft SharePoint Server欺骗漏洞 | Important |
| Microsoft Office | CVE-2026-64899 | Microsoft Office信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-64900 | Microsoft SharePoint Server欺骗漏洞 | Important |
| Microsoft Office | CVE-2026-64901 | Microsoft SharePoint Server远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-64902 | Microsoft SharePoint Server欺骗漏洞 | Important |
| Microsoft Office | CVE-2026-64904 | Microsoft Office远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-64905 | Microsoft Office Word远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-64906 | Microsoft Access远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-64908 | Microsoft Access远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-64912 | Microsoft Access远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-64914 | Microsoft Access远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-64915 | Microsoft Office Word远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-64916 | Microsoft SharePoint Server欺骗漏洞 | Important |
| Microsoft Office | CVE-2026-64917 | Microsoft Office Word信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-64919 | Microsoft Access远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-64920 | Microsoft Access远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-64922 | Microsoft SharePoint Server欺骗漏洞 | Important |
| Microsoft Office | CVE-2026-65656 | Microsoft Office远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-65658 | Microsoft SharePoint Server远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-65660 | Microsoft SharePoint Server欺骗漏洞 | Important |
| Microsoft Office | CVE-2026-65661 | Microsoft Office远程代码执行漏洞 | Important |
| Windows | CVE-2026-65662 | Windows GDI信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-65663 | Microsoft SharePoint Server远程代码执行漏洞 | Important |
| Windows | CVE-2026-65671 | Remote Access API权限提升漏洞 | Important |
| Windows | CVE-2026-65672 | Remote Access API权限提升漏洞 | Important |
| Azure | CVE-2026-65673 | Microsoft Entra Connect权限提升漏洞 | Important |
| Microsoft Visual Studio Code CoPilot Chat Extension | CVE-2026-65675 | CoPilot Chat安全功能绕过漏洞 | Important |
| Windows | CVE-2026-65678 | Windows Win32k权限提升漏洞 | Important |
| Windows | CVE-2026-65679 | Windows iSCSI Target Service远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-65680 | Microsoft OneDrive for MacOS权限提升漏洞 | Important |
| Windows | CVE-2026-65681 | Windows iSCSI Target Service拒绝服务漏洞 | Important |
| Microsoft Office | CVE-2026-65767 | Microsoft Teams for Android and iOS欺骗漏洞 | Important |
| Microsoft Office | CVE-2026-65768 | Microsoft Teams远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-65769 | Microsoft Teams iOS信息泄露漏洞 | Important |
| Windows | CVE-2026-65773 | Windows Kernel权限提升漏洞 | Important |
| Windows | CVE-2026-65774 | Windows Installer权限提升漏洞 | Important |
| Windows | CVE-2026-65775 | Windows Win32k权限提升漏洞 | Important |
| Windows | CVE-2026-65776 | Windows Win32k权限提升漏洞 | Important |
| Windows | CVE-2026-65777 | Active Directory安全功能绕过漏洞 | Important |
| Windows | CVE-2026-65778 | Windows Autopilot权限提升漏洞 | Important |
| Windows | CVE-2026-65779 | Windows Autopilot权限提升漏洞 | Important |
| Windows | CVE-2026-65780 | Windows Autopilot权限提升漏洞 | Important |
| Windows | CVE-2026-65781 | Windows Autopilot权限提升漏洞 | Important |
| Windows | CVE-2026-65782 | Windows Autopilot权限提升漏洞 | Important |
| Windows | CVE-2026-65783 | Windows Autopilot权限提升漏洞 | Important |
| Windows | CVE-2026-65784 | Windows NTFS信息泄露漏洞 | Important |
| Windows | CVE-2026-65785 | Windows DHCP Client拒绝服务漏洞 | Important |
| Windows | CVE-2026-65786 | Desktop Window Manager权限提升漏洞 | Important |
| Windows | CVE-2026-65787 | Desktop Window Manager权限提升漏洞 | Important |
| Windows | CVE-2026-65788 | Desktop Window Manager权限提升漏洞 | Important |
| Windows | CVE-2026-65790 | Windows Message Queuing权限提升漏洞 | Important |
| Windows | CVE-2026-65794 | Windows SMB Client信息泄露漏洞 | Important |
| Windows | CVE-2026-65795 | Windows DNS权限提升漏洞 | Important |
| Windows | CVE-2026-65796 | Windows iSCSI Target Service拒绝服务漏洞 | Important |
| Windows | CVE-2026-65797 | Windows DNS权限提升漏洞 | Important |
| Windows | CVE-2026-65798 | Windows DNS权限提升漏洞 | Important |
| Windows | CVE-2026-65799 | Windows DNS权限提升漏洞 | Important |
| Azure | CVE-2026-65806 | Azure CycleCloud信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-65807 | Microsoft Excel远程代码执行漏洞 | Important |
| Microsoft .NET Framework | CVE-2026-65810 | .NET Framework权限提升漏洞 | Important |
| Power BI Report Server | CVE-2026-65811 | Power BI远程代码执行漏洞 | Important |
| Microsoft Exchange Server,Microsoft Exchange Server Subscription Edition RTM | CVE-2026-65813 | Microsoft Exchange Server权限提升漏洞 | Important |
| Windows | CVE-2026-65814 | Microsoft Windows Storage Port Driver权限提升漏洞 | Important |
| Microsoft Dynamics | CVE-2026-65815 | Microsoft Dynamics 365 On-Premises远程代码执行漏洞 | Important |
| Microsoft Dynamics | CVE-2026-66301 | Microsoft Dynamics 365 (On-Premises)信息泄露漏洞 | Important |
| Windows | CVE-2026-66804 | Microsoft Windows Cross Device Service权限提升漏洞 | Important |
| Microsoft Office | CVE-2026-66805 | Microsoft SharePoint Server远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-66806 | Microsoft Office Word信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-66808 | Microsoft SharePoint Server远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-66809 | Microsoft Office Graphics Component信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-66810 | Microsoft Office Word信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-68792 | Microsoft Office权限提升漏洞 | Important |
| Microsoft Office | CVE-2026-68793 | Microsoft Excel远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-68795 | Microsoft Excel远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-68796 | Microsoft Excel远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-68797 | Microsoft Excel信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-68798 | Microsoft Excel远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-68799 | Microsoft Excel信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-68800 | Microsoft Excel远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-68801 | Microsoft Excel远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-68802 | Microsoft Excel信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-68803 | Microsoft Excel远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-68805 | Microsoft Excel远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-68806 | Microsoft Excel远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-68807 | Microsoft Excel远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-68808 | Microsoft Excel信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-68809 | Powerpoint信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-68810 | Microsoft Excel远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-68811 | Microsoft Excel远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-68812 | Microsoft Excel远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-68813 | Microsoft Excel信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-68814 | Microsoft Excel远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-68815 | Microsoft Excel远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-68817 | Microsoft Excel远程代码执行漏洞 | Important |
| Windows | CVE-2026-68819 | Windows Network File System拒绝服务漏洞 | Important |
| Windows | CVE-2026-68820 | Windows Ancillary Function Driver for WinSock权限提升漏洞 | Important |
| Apps | CVE-2026-68821 | Windows Package Manager权限提升漏洞 | Important |
| Visual Studio Code | CVE-2026-69278 | Visual Studio Code安全功能绕过漏洞 | Important |
| Visual Studio Code | CVE-2026-69306 | Visual Studio Code安全功能绕过漏洞 | Important |
| Visual Studio Code | CVE-2026-69320 | Visual Studio Code远程代码执行漏洞 | Important |
| Windows | CVE-2026-70304 | Windows DNS权限提升漏洞 | Important |
| Microsoft Office | CVE-2026-70306 | Microsoft Office SharePoint欺骗漏洞 | Important |
| Windows | CVE-2026-70307 | Windows Ancillary Function Driver for WinSock权限提升漏洞 | Important |
| Microsoft Office | CVE-2026-70310 | Microsoft Word信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-70311 | Microsoft Office Word远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-70312 | Powerpoint信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-70313 | Microsoft PowerPoint远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-70314 | Microsoft Office信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-70315 | Microsoft Office信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-70316 | Powerpoint信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-70317 | Microsoft Office信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-70318 | Microsoft Excel信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-70319 | Microsoft Office Word信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-70320 | Powerpoint信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-70321 | Microsoft SharePoint远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-70322 | Powerpoint信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-70323 | Microsoft Office信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-70324 | Microsoft SharePoint权限提升漏洞 | Important |
| Microsoft Office | CVE-2026-70325 | Powerpoint信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-70326 | Microsoft SharePoint Server权限提升漏洞 | Important |
| Microsoft Office | CVE-2026-70327 | Microsoft Excel信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-70328 | Microsoft Excel信息泄露漏洞 | Important |
| Microsoft Office | CVE-2026-70329 | Microsoft Outlook远程代码执行漏洞 | Important |
| Windows | CVE-2026-70330 | Windows DNS权限提升漏洞 | Important |
| Visual Studio Code | CVE-2026-70335 | GitHub Copilot and Visual Studio Code权限提升漏洞 | Important |
| Visual Studio Code | CVE-2026-70336 | Visual Studio Code远程代码执行漏洞 | Important |
| PowerShell | CVE-2026-70337 | Microsoft PowerShell远程代码执行漏洞 | Important |
| PowerShell | CVE-2026-70338 | Microsoft PowerShell安全功能绕过漏洞 | Important |
| Microsoft Edge (Chromium-based) | CVE-2026-70339 | Microsoft Edge远程代码执行漏洞 | Important |
| Azure | CVE-2026-70340 | Azure CycleCloud权限提升漏洞 | Important |
| Windows | CVE-2026-70344 | Windows Installer权限提升漏洞 | Important |
| Windows | CVE-2026-70345 | Windows Installer权限提升漏洞 | Important |
| Windows | CVE-2026-70346 | Windows Installer权限提升漏洞 | Important |
| Windows | CVE-2026-70347 | Windows Installer权限提升漏洞 | Important |
| Windows | CVE-2026-70348 | Windows Management Services拒绝服务漏洞 | Important |
| Microsoft Visual Studio,.NET 8.0 installed on Windows,.NET 10.0 installed on Windows,.NET 8.0 installed on Mac OS,.NET 9.0 installed on Mac OS,Microsoft .NET Framework,.NET 9.0 installed on Linux,.NET 10.0 installed on Mac OS,.NET 9.0 installed on Windows,.NET 10.0 installed on Linux,.NET 8.0 installed on Linux | CVE-2026-70354 | .NET Core远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2026-70355 | Microsoft SharePoint Server权限提升漏洞 | Important |
| Windows | CVE-2026-72971 | Windows Container Isolation FS Filter Driver (unionfs.sys)篡改漏洞 | Important |
| Windows | CVE-2026-56179 | Windows Network Address Translation (NAT)欺骗漏洞 | Moderate |
声明
本安全公告仅用来描述可能存在的安全问题，绿盟科技不为此安全公告提供任何保证或承诺。由于传播、利用此安全公告所提供的信息而造成的任何直接或者间接的后果及损失，均由使用者本人负责，绿盟科技以及安全公告作者不为此承担任何责任。
绿盟科技拥有对此安全公告的修改和解释权。如欲转载或传播此安全公告，必须保证此安全公告的完整性，包括版权声明等全部内容。未经绿盟科技允许，不得任意修改或者增减此安全公告内容，不得以任何方式将其用于商业目的。