CNNVD关于微软多个安全漏洞的通报
近日,微软官方发布了多个安全漏洞的公告,全部为影响微软产品本身的漏洞,共211个。微软Microsoft Windows、Microsoft Windows Media、Microsoft Windows BitLocker、Microsoft Azure Kubernetes Service等多个产品和系统受漏洞影响。目前,微软官方已经发布了漏洞修复补丁,建议用户及时确认是否受到漏洞影响,尽快采取修补措施。
一、 漏洞介绍
2026年6月9日,微软发布了2026年6月份安全更新,共211个漏洞的补丁程序,CNNVD对这些漏洞进行了收录。本次更新主要涵盖了Microsoft Windows、Microsoft Windows Media、Microsoft Windows BitLocker、Microsoft Azure Kubernetes Service、Microsoft Kinect、Microsoft Azure Stack Edge等。CNNVD对其危害等级进行了评价,其中超危漏洞4个,高危漏洞54个,中危漏洞153个。微软多个产品和系统版本受漏洞影响,具体影响范围可访问微软官方网站查询:
https://portal.msrc.microsoft.com/zh-cn/security-guidance
二、漏洞详情
此次更新共211个漏洞的补丁程序,包括200个新增漏洞的补丁程序和11个更新漏洞的补丁程序。
此次更新共包括200个新增漏洞的补丁程序,其中超危漏洞4个,高危漏洞48个,中危漏洞148个。
序号 | 漏洞名称 | CNNVD编号 | CVE编号 | 危害等级 | 官方链接 |
1 | Microsoft HTTP.sys 安全漏洞 | CNNVD-202606-2189 | CVE-2026-47291 | 超危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47291 |
2 | Microsoft Windows Kernel 安全漏洞 | CNNVD-202606-2199 | CVE-2026-45657 | 超危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45657 |
3 | Microsoft Windows DHCP Server 安全漏洞 | CNNVD-202606-2230 | CVE-2026-45602 | 超危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45602 |
4 | Microsoft Windows DHCP Server 安全漏洞 | CNNVD-202606-2289 | CVE-2026-44815 | 超危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44815 |
5 | Microsoft PC Manager 访问控制错误漏洞 | CNNVD-202606-2053 | CVE-2026-50512 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50512 |
6 | Microsoft PC Manager 后置链接漏洞 | CNNVD-202606-2054 | CVE-2026-50511 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50511 |
7 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202606-2104 | CVE-2026-48576 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48576 |
8 | Microsoft Windows Kernel 资源管理错误漏洞 | CNNVD-202606-2105 | CVE-2026-48583 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48583 |
9 | Microsoft HTTP.sys 资源管理错误漏洞 | CNNVD-202606-2107 | CVE-2026-49160 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49160 |
10 | Microsoft Windows Media 安全漏洞 | CNNVD-202606-2108 | CVE-2026-48574 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48574 |
11 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202606-2109 | CVE-2026-48573 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48573 |
12 | Microsoft Visual Studio Code 输入验证错误漏洞 | CNNVD-202606-2110 | CVE-2026-48569 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48569 |
13 | Microsoft Windows 代码问题漏洞 | CNNVD-202606-2112 | CVE-2026-48565 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48565 |
14 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202606-2114 | CVE-2026-48570 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48570 |
15 | Microsoft Windows Boot Manager 安全漏洞 | CNNVD-202606-2172 | CVE-2026-47656 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47656 |
16 | Microsoft Remote Desktop Client 资源管理错误漏洞 | CNNVD-202606-2175 | CVE-2026-47653 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47653 |
17 | Microsoft Hyper-V 安全漏洞 | CNNVD-202606-2177 | CVE-2026-47652 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47652 |
18 | Microsoft Windows BitLocker 访问控制错误漏洞 | CNNVD-202606-2197 | CVE-2026-45658 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45658 |
19 | Microsoft Windows 安全漏洞 | CNNVD-202606-2200 | CVE-2026-45656 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45656 |
20 | Microsoft Windows Secure Boot 访问控制错误漏洞 | CNNVD-202606-2204 | CVE-2026-45654 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45654 |
21 | Microsoft Windows Kernel 安全漏洞 | CNNVD-202606-2206 | CVE-2026-45653 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45653 |
22 | Microsoft Office Word 安全漏洞 | CNNVD-202606-2210 | CVE-2026-45643 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45643 |
23 | Microsoft DWM Core Library 资源管理错误漏洞 | CNNVD-202606-2220 | CVE-2026-45637 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45637 |
24 | Microsoft Windows Ancillary Function Driver for WinSock 竞争条件问题漏洞 | CNNVD-202606-2227 | CVE-2026-45601 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45601 |
25 | Microsoft Windows Ancillary Function Driver for WinSock 竞争条件问题漏洞 | CNNVD-202606-2229 | CVE-2026-45603 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45603 |
26 | Microsoft Windows 资源管理错误漏洞 | CNNVD-202606-2231 | CVE-2026-45599 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45599 |
27 | Microsoft Windows Ancillary Function Driver for WinSock 竞争条件问题漏洞 | CNNVD-202606-2232 | CVE-2026-45598 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45598 |
28 | Microsoft Windows Ancillary Function Driver for WinSock 竞争条件问题漏洞 | CNNVD-202606-2234 | CVE-2026-45596 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45596 |
29 | Microsoft Windows 竞争条件问题漏洞 | CNNVD-202606-2235 | CVE-2026-45597 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45597 |
30 | Microsoft ASP.NET Core 资源管理错误漏洞 | CNNVD-202606-2237 | CVE-2026-45591 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591 |
31 | Microsoft Windows 输入验证错误漏洞 | CNNVD-202606-2238 | CVE-2026-45593 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45593 |
32 | Microsoft Office SharePoint 代码问题漏洞 | CNNVD-202606-2271 | CVE-2026-45484 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45484 |
33 | Microsoft DWM Core Library 资源管理错误漏洞 | CNNVD-202606-2288 | CVE-2026-44813 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44813 |
34 | Microsoft Windows Cryptographic Services 授权问题漏洞 | CNNVD-202606-2294 | CVE-2026-44810 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44810 |
35 | Microsoft Windows Common Log File System Driver 资源管理错误漏洞 | CNNVD-202606-2297 | CVE-2026-44809 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44809 |
36 | Microsoft Win32k 输入验证错误漏洞 | CNNVD-202606-2299 | CVE-2026-44803 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44803 |
37 | Microsoft DWM Core Library 资源管理错误漏洞 | CNNVD-202606-2301 | CVE-2026-44804 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44804 |
38 | Microsoft Remote Desktop Client 资源管理错误漏洞 | CNNVD-202606-2302 | CVE-2026-44801 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44801 |
39 | Microsoft Remote Desktop Client 安全漏洞 | CNNVD-202606-2304 | CVE-2026-42992 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42992 |
40 | Microsoft Winlogon 后置链接漏洞 | CNNVD-202606-2307 | CVE-2026-42989 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42989 |
41 | Microsoft Windows Deployment Services 资源管理错误漏洞 | CNNVD-202606-2308 | CVE-2026-42987 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42987 |
42 | Microsoft Remote Desktop Client 资源管理错误漏洞 | CNNVD-202606-2310 | CVE-2026-42985 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42985 |
43 | Microsoft Windows NT OS Kernel 安全漏洞 | CNNVD-202606-2315 | CVE-2026-42980 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42980 |
44 | Microsoft Windows Push Notifications 竞争条件问题漏洞 | CNNVD-202606-2316 | CVE-2026-42977 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42977 |
45 | Microsoft Windows Push Notifications 竞争条件问题漏洞 | CNNVD-202606-2320 | CVE-2026-42979 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42979 |
46 | Microsoft Remote Desktop Client 竞争条件问题漏洞 | CNNVD-202606-2328 | CVE-2026-42913 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42913 |
47 | Microsoft Windows Telephony Server 竞争条件问题漏洞 | CNNVD-202606-2329 | CVE-2026-42912 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42912 |
48 | Microsoft Windows Ancillary Function Driver for WinSock 资源管理错误漏洞 | CNNVD-202606-2330 | CVE-2026-42911 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42911 |
49 | Microsoft Windows NT OS Kernel 输入验证错误漏洞 | CNNVD-202606-2332 | CVE-2026-42916 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42916 |
50 | Microsoft Windows 缓冲区错误漏洞 | CNNVD-202606-2333 | CVE-2026-42910 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42910 |
51 | Microsoft Remote Desktop Client 竞争条件问题漏洞 | CNNVD-202606-2334 | CVE-2026-42909 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42909 |
52 | Microsoft Function Discovery Service 竞争条件问题漏洞 | CNNVD-202606-2343 | CVE-2026-42836 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42836 |
53 | Microsoft Windows BitLocker 访问控制错误漏洞 | CNNVD-202606-2086 | CVE-2026-50507 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50507 |
54 | Microsoft Office SharePoint 跨站脚本漏洞 | CNNVD-202606-2116 | CVE-2026-48562 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48562 |
55 | Microsoft Office SharePoint 代码问题漏洞 | CNNVD-202606-2117 | CVE-2026-48560 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48560 |
56 | Microsoft Visual Studio Code 安全漏洞 | CNNVD-202606-2195 | CVE-2026-47287 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47287 |
57 | Microsoft Windows DHCP Server 缓冲区错误漏洞 | CNNVD-202606-2222 | CVE-2026-45608 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45608 |
58 | Microsoft Windows 缓冲区错误漏洞 | CNNVD-202606-2226 | CVE-2026-45604 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45604 |
59 | Microsoft Windows 安全漏洞 | CNNVD-202606-2233 | CVE-2026-45595 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45595 |
60 | Microsoft Windows 信息泄露漏洞 | CNNVD-202606-2239 | CVE-2026-45594 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45594 |
61 | Microsoft Windows 资源管理错误漏洞 | CNNVD-202606-2303 | CVE-2026-44805 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44805 |
62 | Microsoft Hyper-V 信息泄露漏洞 | CNNVD-202606-2322 | CVE-2026-42972 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42972 |
63 | Microsoft Windows Push Notifications 信息泄露漏洞 | CNNVD-202606-2323 | CVE-2026-42971 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42971 |
64 | Microsoft Windows Telephony Server 缓冲区错误漏洞 | CNNVD-202606-2326 | CVE-2026-42968 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42968 |
65 | Microsoft Windows Shell 信息泄露漏洞 | CNNVD-202606-2337 | CVE-2026-42907 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42907 |
66 | Microsoft Windows 信息泄露漏洞 | CNNVD-202606-2088 | CVE-2026-50508 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50508 |
67 | Microsoft PC Manager 访问控制错误漏洞 | CNNVD-202606-2101 | CVE-2026-49161 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49161 |
68 | Microsoft Windows Secure Boot 访问控制错误漏洞 | CNNVD-202606-2102 | CVE-2026-48578 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48578 |
69 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202606-2106 | CVE-2026-48575 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48575 |
70 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202606-2111 | CVE-2026-48568 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48568 |
71 | Microsoft Remote Desktop Client 资源管理错误漏洞 | CNNVD-202606-2113 | CVE-2026-48563 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48563 |
72 | Microsoft DWM Core Library 缓冲区错误漏洞 | CNNVD-202606-2115 | CVE-2026-48566 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48566 |
73 | Microsoft Remote Desktop Client 资源管理错误漏洞 | CNNVD-202606-2171 | CVE-2026-47654 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47654 |
74 | Microsoft Windows Storage 代码问题漏洞 | CNNVD-202606-2178 | CVE-2026-47648 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47648 |
75 | Microsoft Azure Stack Edge 安全漏洞 | CNNVD-202606-2179 | CVE-2026-47643 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47643 |
76 | Microsoft Office SharePoint 跨站脚本漏洞 | CNNVD-202606-2180 | CVE-2026-47639 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47639 |
77 | Microsoft Office SharePoint 跨站脚本漏洞 | CNNVD-202606-2181 | CVE-2026-47638 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47638 |
78 | Microsoft Office SharePoint 跨站脚本漏洞 | CNNVD-202606-2182 | CVE-2026-47637 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47637 |
79 | Microsoft Office SharePoint 输入验证错误漏洞 | CNNVD-202606-2183 | CVE-2026-47641 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47641 |
80 | Microsoft Office SharePoint 跨站脚本漏洞 | CNNVD-202606-2184 | CVE-2026-47640 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47640 |
81 | Microsoft Office SharePoint 跨站脚本漏洞 | CNNVD-202606-2185 | CVE-2026-47636 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47636 |
82 | Microsoft Office 安全漏洞 | CNNVD-202606-2186 | CVE-2026-47635 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47635 |
83 | Microsoft Office SharePoint 注入漏洞 | CNNVD-202606-2187 | CVE-2026-47634 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47634 |
84 | Microsoft Office SharePoint 授权问题漏洞 | CNNVD-202606-2188 | CVE-2026-47298 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47298 |
85 | Microsoft Exchange Server 跨站脚本漏洞 | CNNVD-202606-2190 | CVE-2026-47631 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47631 |
86 | Microsoft Windows Kerberos 输入验证错误漏洞 | CNNVD-202606-2191 | CVE-2026-47288 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47288 |
87 | Microsoft Visual Studio Code 代码注入漏洞 | CNNVD-202606-2192 | CVE-2026-47292 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47292 |
88 | Microsoft Office ClickToRun 资源管理错误漏洞 | CNNVD-202606-2193 | CVE-2026-47293 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47293 |
89 | Microsoft Remote Desktop Client 安全漏洞 | CNNVD-202606-2194 | CVE-2026-47289 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47289 |
90 | Microsoft Visual Studio Code 访问控制错误漏洞 | CNNVD-202606-2196 | CVE-2026-47281 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47281 |
91 | Microsoft Visual Studio Code 信息泄露漏洞 | CNNVD-202606-2198 | CVE-2026-47284 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47284 |
92 | Microsoft Windows BitLocker 安全漏洞 | CNNVD-202606-2203 | CVE-2026-45655 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45655 |
93 | Microsoft Bing 安全漏洞 | CNNVD-202606-2205 | CVE-2026-45650 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45650 |
94 | Microsoft Office 访问控制错误漏洞 | CNNVD-202606-2207 | CVE-2026-45649 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45649 |
95 | Microsoft Office 安全漏洞 | CNNVD-202606-2208 | CVE-2026-45645 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45645 |
96 | Microsoft Live Share Canvas SDK 跨站脚本漏洞 | CNNVD-202606-2209 | CVE-2026-45644 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45644 |
97 | Microsoft Defender for Endpoint 安全漏洞 | CNNVD-202606-2211 | CVE-2026-45647 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45647 |
98 | Microsoft Active Directory Domain Services 安全漏洞 | CNNVD-202606-2212 | CVE-2026-45648 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45648 |
99 | Microsoft Azure 输入验证错误漏洞 | CNNVD-202606-2213 | CVE-2026-45642 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45642 |
100 | Microsoft Hyper-V 安全漏洞 | CNNVD-202606-2214 | CVE-2026-45641 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45641 |
101 | Microsoft Windows Bluetooth Service 资源管理错误漏洞 | CNNVD-202606-2215 | CVE-2026-45640 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45640 |
102 | Microsoft Windows 缓冲区错误漏洞 | CNNVD-202606-2216 | CVE-2026-45639 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45639 |
103 | Microsoft Windows 安全漏洞 | CNNVD-202606-2217 | CVE-2026-45635 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45635 |
104 | Microsoft Windows DHCP Server 缓冲区错误漏洞 | CNNVD-202606-2218 | CVE-2026-45634 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45634 |
105 | Microsoft Windows NTFS 输入验证错误漏洞 | CNNVD-202606-2219 | CVE-2026-45636 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45636 |
106 | Microsoft Windows Ancillary Function Driver for WinSock 安全漏洞 | CNNVD-202606-2221 | CVE-2026-45638 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45638 |
107 | Microsoft Hyper-V 缓冲区错误漏洞 | CNNVD-202606-2223 | CVE-2026-45607 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45607 |
108 | Microsoft UxTheme 缓冲区错误漏洞 | CNNVD-202606-2224 | CVE-2026-45606 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45606 |
109 | Microsoft Windows Bluetooth Service 资源管理错误漏洞 | CNNVD-202606-2225 | CVE-2026-45605 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45605 |
110 | Microsoft Windows 安全漏洞 | CNNVD-202606-2228 | CVE-2026-45600 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45600 |
111 | Microsoft Windows 输入验证错误漏洞 | CNNVD-202606-2236 | CVE-2026-45592 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45592 |
112 | Microsoft Windows 后置链接漏洞 | CNNVD-202606-2240 | CVE-2026-45586 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45586 |
113 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202606-2241 | CVE-2026-45588 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45588 |
114 | Microsoft Exchange Server 代码问题漏洞 | CNNVD-202606-2242 | CVE-2026-45504 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45504 |
115 | Microsoft Exchange Server 代码注入漏洞 | CNNVD-202606-2243 | CVE-2026-45583 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45583 |
116 | Microsoft Exchange Server 跨站脚本漏洞 | CNNVD-202606-2244 | CVE-2026-45500 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45500 |
117 | Microsoft Exchange Server 代码问题漏洞 | CNNVD-202606-2245 | CVE-2026-45501 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45501 |
118 | Microsoft .NET 后置链接漏洞 | CNNVD-202606-2246 | CVE-2026-45491 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491 |
119 | Microsoft .NET 授权问题漏洞 | CNNVD-202606-2247 | CVE-2026-45490 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45490 |
120 | Microsoft Exchange Server 授权问题漏洞 | CNNVD-202606-2248 | CVE-2026-45503 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45503 |
121 | Microsoft Exchange Server 代码问题漏洞 | CNNVD-202606-2249 | CVE-2026-45502 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45502 |
122 | Microsoft Office SharePoint 跨站脚本漏洞 | CNNVD-202606-2250 | CVE-2026-45481 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45481 |
123 | Microsoft Office Project Server 跨站脚本漏洞 | CNNVD-202606-2251 | CVE-2026-45483 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45483 |
124 | Microsoft Office Word 资源管理错误漏洞 | CNNVD-202606-2252 | CVE-2026-45486 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45486 |
125 | Microsoft Azure 资源管理错误漏洞 | CNNVD-202606-2253 | CVE-2026-45476 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45476 |
126 | Microsoft Office SharePoint 跨站脚本漏洞 | CNNVD-202606-2254 | CVE-2026-45479 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45479 |
127 | Microsoft GitHub Copilot and Visual Studio Code 路径遍历漏洞 | CNNVD-202606-2255 | CVE-2026-45482 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45482 |
128 | Microsoft Office 安全漏洞 | CNNVD-202606-2256 | CVE-2026-45475 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45475 |
129 | Microsoft Office 资源管理错误漏洞 | CNNVD-202606-2257 | CVE-2026-45474 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45474 |
130 | Microsoft Office Word 安全漏洞 | CNNVD-202606-2258 | CVE-2026-45471 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45471 |
131 | Microsoft Office 资源管理错误漏洞 | CNNVD-202606-2259 | CVE-2026-45472 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45472 |
132 | Microsoft Office 缓冲区错误漏洞 | CNNVD-202606-2260 | CVE-2026-45485 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45485 |
133 | Microsoft Office SharePoint 跨站脚本漏洞 | CNNVD-202606-2261 | CVE-2026-45467 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45467 |
134 | Microsoft Office Word 安全漏洞 | CNNVD-202606-2262 | CVE-2026-45466 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45466 |
135 | Microsoft Office Excel 安全漏洞 | CNNVD-202606-2263 | CVE-2026-45469 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45469 |
136 | Microsoft Office SharePoint 跨站脚本漏洞 | CNNVD-202606-2264 | CVE-2026-45468 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45468 |
137 | Microsoft Office SharePoint 跨站脚本漏洞 | CNNVD-202606-2265 | CVE-2026-45465 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45465 |
138 | Microsoft Office SharePoint 跨站脚本漏洞 | CNNVD-202606-2266 | CVE-2026-45464 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45464 |
139 | Microsoft Office 安全漏洞 | CNNVD-202606-2267 | CVE-2026-45463 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45463 |
140 | Microsoft Office SharePoint 跨站脚本漏洞 | CNNVD-202606-2268 | CVE-2026-45462 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45462 |
141 | Microsoft Office Excel 安全漏洞 | CNNVD-202606-2269 | CVE-2026-45459 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45459 |
142 | Microsoft Office 资源管理错误漏洞 | CNNVD-202606-2270 | CVE-2026-45461 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45461 |
143 | Microsoft Office Word 缓冲区错误漏洞 | CNNVD-202606-2272 | CVE-2026-45457 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45457 |
144 | Microsoft Office 资源管理错误漏洞 | CNNVD-202606-2273 | CVE-2026-45458 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45458 |
145 | Microsoft Office 安全漏洞 | CNNVD-202606-2274 | CVE-2026-45460 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45460 |
146 | Microsoft Office 安全漏洞 | CNNVD-202606-2275 | CVE-2026-45456 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45456 |
147 | Microsoft Office Excel 缓冲区错误漏洞 | CNNVD-202606-2276 | CVE-2026-45455 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45455 |
148 | Microsoft Office SharePoint 跨站脚本漏洞 | CNNVD-202606-2277 | CVE-2026-45453 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45453 |
149 | Microsoft Office SharePoint 路径遍历漏洞 | CNNVD-202606-2280 | CVE-2026-45454 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45454 |
150 | Microsoft Office 安全漏洞 | CNNVD-202606-2281 | CVE-2026-44824 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44824 |
151 | Microsoft Office Excel 安全漏洞 | CNNVD-202606-2282 | CVE-2026-44823 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44823 |
152 | Microsoft Office 缓冲区错误漏洞 | CNNVD-202606-2283 | CVE-2026-44821 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44821 |
153 | Microsoft Office Excel 缓冲区错误漏洞 | CNNVD-202606-2285 | CVE-2026-44822 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44822 |
154 | Microsoft Office Excel 缓冲区错误漏洞 | CNNVD-202606-2286 | CVE-2026-44820 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44820 |
155 | Microsoft Office Excel 安全漏洞 | CNNVD-202606-2287 | CVE-2026-44817 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44817 |
156 | Microsoft Office 安全漏洞 | CNNVD-202606-2290 | CVE-2026-44819 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44819 |
157 | Microsoft Office Excel 竞争条件问题漏洞 | CNNVD-202606-2291 | CVE-2026-44818 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44818 |
158 | Microsoft DWM Core Library 安全漏洞 | CNNVD-202606-2292 | CVE-2026-44814 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44814 |
159 | Microsoft DWM Core Library 输入验证错误漏洞 | CNNVD-202606-2293 | CVE-2026-44811 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44811 |
160 | Microsoft Win32k 输入验证错误漏洞 | CNNVD-202606-2295 | CVE-2026-44812 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44812 |
161 | Microsoft DWM Core Library 安全漏洞 | CNNVD-202606-2296 | CVE-2026-44808 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44808 |
162 | Microsoft DWM Core Library 资源管理错误漏洞 | CNNVD-202606-2298 | CVE-2026-44807 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44807 |
163 | Microsoft DWM Core Library 资源管理错误漏洞 | CNNVD-202606-2300 | CVE-2026-44802 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44802 |
164 | Microsoft Remote Desktop Client 安全漏洞 | CNNVD-202606-2305 | CVE-2026-42993 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42993 |
165 | Microsoft Windows Push Notifications 竞争条件问题漏洞 | CNNVD-202606-2306 | CVE-2026-42991 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42991 |
166 | Microsoft Remote Desktop Client 安全漏洞 | CNNVD-202606-2309 | CVE-2026-44799 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44799 |
167 | Microsoft Graphics Component 资源管理错误漏洞 | CNNVD-202606-2311 | CVE-2026-42986 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42986 |
168 | Microsoft Windows 数字错误漏洞 | CNNVD-202606-2312 | CVE-2026-42981 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42981 |
169 | Microsoft Windows Kernel 资源管理错误漏洞 | CNNVD-202606-2313 | CVE-2026-42984 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42984 |
170 | Microsoft DWM Core Library 资源管理错误漏洞 | CNNVD-202606-2314 | CVE-2026-42983 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42983 |
171 | Microsoft Windows 安全漏洞 | CNNVD-202606-2317 | CVE-2026-45487 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45487 |
172 | Microsoft Windows 输入验证错误漏洞 | CNNVD-202606-2318 | CVE-2026-42974 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42974 |
173 | Microsoft Windows Push Notifications 信息泄露漏洞 | CNNVD-202606-2319 | CVE-2026-42973 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42973 |
174 | Microsoft Windows Push Notifications 竞争条件问题漏洞 | CNNVD-202606-2321 | CVE-2026-42978 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42978 |
175 | Microsoft Windows Push Notifications 安全漏洞 | CNNVD-202606-2324 | CVE-2026-42969 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42969 |
176 | Microsoft Windows Push Notifications 信息泄露漏洞 | CNNVD-202606-2325 | CVE-2026-42970 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42970 |
177 | Microsoft Windows Kerberos 缓冲区错误漏洞 | CNNVD-202606-2327 | CVE-2026-42914 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42914 |
178 | Microsoft Windows TCP/IP 安全漏洞 | CNNVD-202606-2331 | CVE-2026-42915 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42915 |
179 | Microsoft Windows 缓冲区错误漏洞 | CNNVD-202606-2335 | CVE-2026-42908 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42908 |
180 | Microsoft Windows Shell 信息泄露漏洞 | CNNVD-202606-2336 | CVE-2026-42906 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42906 |
181 | Microsoft Windows Kerberos 代码问题漏洞 | CNNVD-202606-2338 | CVE-2026-42903 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42903 |
182 | Microsoft PowerToys 授权问题漏洞 | CNNVD-202606-2339 | CVE-2026-42902 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42902 |
183 | Microsoft Windows TCP/IP 安全漏洞 | CNNVD-202606-2340 | CVE-2026-42904 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42904 |
184 | Microsoft Windows 资源管理错误漏洞 | CNNVD-202606-2341 | CVE-2026-42905 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42905 |
185 | Microsoft Windows 缓冲区错误漏洞 | CNNVD-202606-2342 | CVE-2026-42837 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42837 |
186 | Microsoft Teams 注入漏洞 | CNNVD-202606-2344 | CVE-2026-42835 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42835 |
187 | Microsoft Windows 访问控制错误漏洞 | CNNVD-202606-2345 | CVE-2026-42829 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42829 |
188 | Microsoft Projected File System 安全漏洞 | CNNVD-202606-2350 | CVE-2026-42828 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42828 |
189 | Microsoft Windows DNS 安全漏洞 | CNNVD-202606-2357 | CVE-2026-41108 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41108 |
190 | Microsoft Azure Stack Edge 跨站脚本漏洞 | CNNVD-202606-2358 | CVE-2026-41098 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41098 |
191 | Microsoft Kinect 访问控制错误漏洞 | CNNVD-202606-2362 | CVE-2026-41092 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41092 |
192 | Microsoft Windows Attestation 安全漏洞 | CNNVD-202606-2367 | CVE-2026-33828 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33828 |
193 | Microsoft Windows Ancillary Function Driver for WinSock 资源管理错误漏洞 | CNNVD-202606-2368 | CVE-2026-34335 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34335 |
194 | Microsoft Office SharePoint 跨站脚本漏洞 | CNNVD-202606-2370 | CVE-2026-33113 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33113 |
195 | Microsoft Azure Kubernetes Service 路径遍历漏洞 | CNNVD-202606-2373 | CVE-2026-32193 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32193 |
196 | Microsoft Nuance PowerScribe 代码问题漏洞 | CNNVD-202606-2377 | CVE-2026-26142 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26142 |
197 | Microsoft Dynamics 365 安全漏洞 | CNNVD-202606-2503 | CVE-2026-40371 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40371 |
198 | Microsoft Visual Studio Code 输入验证错误漏洞 | CNNVD-202606-2507 | CVE-2026-40376 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40376 |
199 | Microsoft Windows Universal Disk Format File System Driver 安全漏洞 | CNNVD-202606-2584 | CVE-2026-40409 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40409 |
200 | Microsoft Windows Universal Disk Format File System Driver 安全漏洞 | CNNVD-202606-2585 | CVE-2026-40404 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40404 |
此次更新共包括11个更新漏洞的补丁程序,其中高危漏洞6个,中危漏洞5个。
序号 | 漏洞名称 | CNNVD编号 | CVE编号 | 危害等级 | 官方链接 |
1 | Microsoft Windows Cloud Files Mini Filter Driver 安全漏洞 | CNNVD-202012-661 | CVE-2020-17103 | 高危 | https://msrc.microsoft.com/update-guide/zh-CN/vulnerability/CVE-2020-17103 |
2 | Microsoft Windows Remote Desktop Protocol 资源管理错误漏洞 | CNNVD-202410-758 | CVE-2024-43582 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43582 |
3 | Microsoft Windows Remote Desktop Services 安全漏洞 | CNNVD-202412-1244 | CVE-2024-49123 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49123 |
4 | Microsoft Windows Remote Desktop Services 资源管理错误漏洞 | CNNVD-202412-1288 | CVE-2024-49075 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49075 |
5 | Microsoft Windows Remote Desktop Services 资源管理错误漏洞 | CNNVD-202501-1974 | CVE-2025-21330 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21330 |
6 | Microsoft Exchange Server 跨站脚本漏洞 | CNNVD-202605-3458 | CVE-2026-42897 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42897 |
7 | Microsoft Edge 安全漏洞 | CNNVD-202604-2185 | CVE-2026-33118 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33118 |
8 | Microsoft M365 Copilot 访问控制错误漏洞 | CNNVD-202605-2607 | CVE-2026-41100 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41100 |
9 | Microsoft Edge for Android 安全漏洞 | CNNVD-202605-2620 | CVE-2026-35429 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35429 |
10 | Microsoft Rich Text Edit Control 资源管理错误漏洞 | CNNVD-202605-2704 | CVE-2026-21530 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21530 |
11 | Microsoft Windows BitLocker 命令注入漏洞 | CNNVD-202605-4268 | CVE-2026-45585 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45585 |
三、修复建议
目前,微软官方已经发布补丁修复了上述漏洞,建议用户及时确认漏洞影响,尽快采取修补措施。