2026-10微软漏洞通告

作者：火绒安全
发布时间：2026-10-14
阅读量：802

微软官方发布了2026年10月的安全更新。本月更新公布了1413个漏洞，包含676个特权提升漏洞、317个远程执行代码漏洞、253个信息泄露漏洞、72个拒绝服务漏洞、安全功能绕过漏洞40个、篡改漏洞28个、27个身份假冒漏洞，其中76个漏洞级别为“Critical”（高危），1334个为“Important”（严重）。建议用户及时使用火绒安全软件(个人/企业)【漏洞修复】功能更新补丁。

涉及组件

.NET
.NET and Visual Studio
.NET Framework
Active Directory Certificate Services (AD CS)
Active Directory Federation Services (AD FS)
ASP.NET Core
Azure Active Directory
Azure API Center
Azure App Service
Azure Arc
Azure CycleCloud
Azure DevOps
Azure Event Grid
Azure HDInsight
Azure Key Vault
Azure Key Vault Client SDK
Azure SRE Agent
Azure Storage Library
Clipboard User Service
Configuration Manager
Connected Devices Platform Service (Cdpsvc)
Desktop Window Manager
Dynamics Business Central
Function Discovery Service (fdwsd.dll)
Graphic Fonts
HEVC Video Extensions
HID Class Driver
HID Parser Library
HTTP.sys
Internet Connection Sharing (ICS)
Internet Explorer
Kernel Streaming Service Driver
Linux Kernel
MessagePack-CSharp
Microsoft Account
Microsoft Azure Attestation service and Device Health Attestation Service
Microsoft Bluetooth Driver
Microsoft Bookings
Microsoft COM for Windows
Microsoft Configuration Manager
Microsoft Dataverse
Microsoft Defender
Microsoft Digest Authentication
Microsoft Dynamics 365 Business Central
Microsoft Excel
Microsoft Exchange Server
Microsoft Failover Cluster
Microsoft Failover Cluster Virtual Driver
Microsoft Graphics Component
Microsoft Input Method Editor (IME)
Microsoft Internet Information Services
Microsoft Internet Messaging API
Microsoft Local Security Authority (LSA) Server
Microsoft Microsoft Defender for Endpoint
Microsoft MPEG-2 Video Extension
Microsoft Office
Microsoft Office Access
Microsoft Office Click-To-Run
Microsoft Office Excel
Microsoft Office Graphics
Microsoft Office Graphics Component
Microsoft Office OneNote
Microsoft Office Outlook
Microsoft Office PowerPoint
Microsoft Office SharePoint
Microsoft Office Visio
Microsoft Office Word
Microsoft OpenSSH for Windows
Microsoft Partner Center
Microsoft PostScript Printer Driver
Microsoft Power Apps
Microsoft PowerShell
Microsoft PowerToys
Microsoft QUIC
Microsoft Scripting Engine
Microsoft SharePoint Server
Microsoft SQL Server
Microsoft Trace Data Helper
Microsoft Windows Codecs Library
Microsoft Windows Media Foundation
Microsoft Windows PDF
Microsoft Windows QoS Scheduler Driver
Microsoft Windows Search Component
Microsoft Windows VMSwitch
Microsoft XML
Network Device Enrollment Service (NDES)
Network Policy Server (NPS)
Python
Quality Windows Audio/Video Experience (QWAVE) service
Raw Image Extension
Reliable Multicast Transport Driver (RMCAST)
Remote Access Point-to-Point Protocol (PPP) EAP-TLS
Remote Desktop Client
Remote Desktop Display Driver
Remote Desktop Gateway Service
Remote Desktop Services Remote Code Execution Vulnerability
Role: DNS Server
RPC Endpoint Mapper Service
RPC Runtime
RPC Runtime Library
Secure Boot
Servicing Stack Updates
Skype for Business
Software Protection Platform (SPP)
SQL Server
SQLite
SysInternals
UEFI Secure Boot
Virtual Hard Disk (VHD) Miniport Driver
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Visual Studio Code
Visual Studio Tools for Applications and SQL Server Management Studio
Web Account Manager
Web Distributed Authoring and Versioning (WEBDAV)
WebDAV
Win32k
Windows Domain Name Service
Windows Active Directory Domain Services
Windows Advanced Rasterization Platform
Windows Aggregated Data Platform Service
Windows AI
Windows ALPC
Windows Ancillary Function Driver for WinSock
Windows Application Compatibility Cache
Windows AppX Deployment Extensions
Windows AppX Deployment Service
Windows Assigned Access
Windows Audio Service
Windows Autopilot
Windows Background Intelligent Transfer Service (BITS)
Windows Backup Engine
Windows Bind Filter Driver
Windows Biometric Service
Windows BitLocker
Windows Bluetooth A2DP driver
Windows Bluetooth Driver
Windows Bluetooth Port Driver
Windows Bluetooth Port Driver Remote Code Execution
Windows Bluetooth Service
Windows Broadcast DVR User Service
Windows Camera Frame Server Monitor
Windows Cash Drawer Protocol Provider
Windows CCFFilter Driver
Windows CD-ROM Driver
Windows CD-ROM File System Driver
Windows Certificates
Windows Client for NFS
Windows Client License Service
Windows Client Side Caching driver (csc.sys)
Windows Client-Side Caching (CSC) Service
Windows Clipboard Server
Windows Clipboard User Service
Windows Cloud Files Mini Filter Driver
Windows COM+ Event System Service
Windows Common Log File System Driver
Windows Composite Image File System
Windows Connected Devices Platform Service
Windows Connected User Experiences and Telemetry
Windows Console Driver
Windows Container Isolation FS Filter Driver
Windows Container Isolation FS Filter Driver (unionfs.sys)
Windows Core Messaging
Windows Credential Guard
Windows Credential Manager
Windows Credential Providers
Windows Cryptographic Services
Windows DCOM Server
Windows Defender Firewall Service
Windows Deployment Services
Windows Device Association Service
Windows Device Install Service
Windows Devices Human Interface
Windows DHCP Client
Windows DHCP Server
Windows Diagnostic Policy Service
Windows Direct Composition
Windows Distributed File System (DFS)
Windows DNS
Windows DNS Server
Windows DWM Core Library
Windows EAPHost Service
Windows Embedded Mode Service
Windows Encrypting File System (EFS)
Windows Enterprise App Management
Windows Error Reporting
Windows Error Reporting Service
Windows Event Logging Service
Windows Event Tracing
Windows Event Viewer
Windows exFAT File System
Windows Failover Cluster
Windows Fast FAT Driver
Windows Fast FAT File System Driver
Windows Fax and Scan Service
Windows GDI
Windows GDI+
Windows Geotag Broker
Windows Graphics Component
Windows Graphics Kernel
Windows Group Policy
Windows Health and Optimized Experiences Service
Windows Hello
Windows Host Guardian Service
Windows Human Interface Device
Windows Hyper-V
Windows IKE Extension
Windows Image Acquisition
Windows Imaging Component
Windows Input System
Windows Installer
Windows Internal System User Profile
Windows Internet (wininet.dll)
Windows Internet Information Services
Windows Internet Key Exchange (IKE) Extension
Windows IP Over USB Service
Windows iSCSI
Windows Kerberos
Windows Kernel
Windows kernel32.dll
Windows Kernel-Mode Driver
Windows Kernel-Mode Drivers
Windows Key Distribution Center
Windows Key Storage Provider
Windows libarchive
Windows Local Security Authority (LSA)
Windows Local Security Authority Subsystem Service (LSASS)
Windows Management Instrumentation
Windows Management Services
Windows Media
Windows Media Player
Windows Media Video Decoder
Windows Message Queuing
Windows Message Queuing Queue Manager
Windows MIDI Service Module
Windows Mobile Broadband
Windows Mobile Device Management
Windows Modern Device Management (MDM)
Windows NDIS
Windows NetBIOS
Windows Netlogon
Windows Network File System
Windows Network List Service
Windows Network Load Balancing
Windows Notification
Windows Now Playing Session Manager
Windows NTFS
Windows NTLM
Windows OLE
Windows OLE DB
Windows Overlay Filter
Windows Paint
Windows Partition Management Driver
Windows PCI Bus Driver
Windows Perception Simulation Service
Windows Performance Monitor
Windows Phone Service
Windows Portable Device Enumerator Service
Windows Portable Device File System Driver
Windows Portable Device MTP Driver
Windows Print Spooler Components
Windows Program Compatibility Assistant Service
Windows Projected File System
Windows Push Notifications
Windows Raw Image Extension
Windows Registry
Windows Reliable Multicast Transport Driver (RMCAST)
Windows Remote Access Connection Manager
Windows Remote Access Service Infrastructure
Windows Remote Desktop
Windows Remote Desktop Client
Windows Remote Desktop Gateway (RD Gateway)
Windows Remote Desktop Protocol
Windows Remote Desktop Services
Windows Remote POS Driver
Windows Resilient File System (ReFS)
Windows Resilient File System (ReFS) Deduplication Service
Windows Resource Management (MRM)
Windows Resume
Windows Rich Text Edit Control
Windows rndismp6.sys
Windows Routing and Remote Access Service (RRAS)
Windows Schannel
Windows Search Service
Windows Secure Kernel Mode
Windows Secure Socket Tunneling Protocol (SSTP)
Windows Security Account Manager
Windows Security App
Windows Security Center
Windows Security Support Provider Interface
Windows Sensor Data Service
Windows Server for NFS
Windows Server Update Service
Windows Setup and Deployment
Windows Setup Files Cleanup
Windows Shell
Windows Smart Card
Windows SmartScreen
Windows SMB Client
Windows SMB Server
Windows Spaceport.sys
Windows StateRepository API
Windows Storage
Windows Storage Port Driver
Windows Storage Spaces Controller
Windows Storage VSP Driver
Windows Storport Miniport Driver
Windows Subsystem for Linux
Windows Sysmain Service
Windows System Information Console
Windows TCP/IP
Windows TCP/IP Local
Windows Telephony Server
Windows Text Services Framework
Windows Text Shaping
Windows UI Immersive Server API
Windows Universal Disk Format File System Driver (UDFS)
Windows Universal Plug and Play (UPnP) Device Host
Windows Update
Windows Update Delivery Optimization
Windows Update Orchestrator Service
Windows Update Service
Windows Update Stack
Windows USB Driver
Windows USB Print Driver
Windows USB Video Driver
Windows User Profile Service
Windows VHD miniport driver
Windows Virtual Input
Windows Virtualization-Based Security (VBS) Enclave
Windows Volume Manager Extension Driver
Windows WalletService
Windows Wi-Fi Driver
Windows Win32 Kernel Subsystem
Windows Win32k
Windows Wired AutoConfig Service
Windows WLAN Service
Windows Work Folders
Windows Workstation Service
Winlogon

以下漏洞需特别注意

Windows Shell 安全功能绕过漏洞CVE-2026-96951

严重级别：高危 CVSS:8.8

被利用级别：检测到利用

此漏洞需要用户交互。该漏洞源于Windows Shell对命令中特殊元素的处理不当，存在命令注入缺陷，攻击者可利用该缺陷绕过Windows对互联网来源文件的部分安全检查，绕过网络来源标记相关的安全防护。触发该漏洞需要诱导用户与攻击者控制的内容交互，例如通过电子邮件或即时消息诱导用户打开特制文件，或点击指向攻击者网站的链接。成功利用后，攻击者可能绕过Windows的Mark of the Web（MOTW，网络来源标记）安全防护机制。

Microsoft QUIC 远程代码执行漏洞CVE-2026-100219

严重级别：严重 CVSS:9.8

被利用级别：有可能被利用

此漏洞不需要用户交互。该漏洞源于Microsoft QUIC组件在处理网络通信数据时继续访问已经释放的内存，导致程序访问无效内存，该内存访问缺陷可能被进一步利用，使攻击者在受影响系统上执行任意代码。触发该漏洞无需攻击者提供身份验证凭据，但要求目标系统存在使用受影响QUIC组件的网络服务，且攻击者能够通过网络访问该服务。成功利用后，攻击者可能在受影响系统上远程执行任意代码。

Windows 消息队列管理器远程代码执行漏洞CVE-2026-100202

严重级别：严重 CVSS:9.8

被利用级别：有可能被利用

此漏洞不需要用户交互。该漏洞源于Windows消息队列管理器在处理网络消息时继续访问已经释放的内存，该缺陷可能被攻击者利用，使受影响的服务执行任意代码。触发该漏洞无需攻击者具备身份验证凭据，但要求目标系统已启用Windows消息队列服务，且攻击者能够通过网络向该服务发送特制消息。成功利用后，攻击者可能在受影响系统上远程执行任意代码。

Windows 搜索组件特权提升漏洞CVE-2026-105010

严重级别：严重 CVSS:9.8

被利用级别：有可能被利用

此漏洞不需要用户交互。该漏洞源于Windows搜索组件在运行过程中继续访问已经释放的内存，导致程序访问无效内存，该内存访问缺陷可能被进一步利用，使攻击者突破原有的权限限制。攻击者无需身份验证，即可通过网络向受影响的服务发送特制数据包触发该漏洞，成功利用后，攻击者可能将其权限提升至SYSTEM。

Windows DHCP 服务器远程代码执行漏洞CVE-2026-96934

严重级别：严重 CVSS:9.8

被利用级别：有可能被利用

此漏洞不需要用户交互。该漏洞源于Windows DHCP配置协议服务器中，程序继续访问已经释放的内存，导致相关内存数据可能遭到破坏，攻击者可能利用该缺陷执行恶意代码。触发该漏洞要求目标系统运行受影响的服务，且攻击者能够通过网络向该服务发送特制数据包，成功利用后，攻击者可能在受影响系统上远程执行任意代码。

修复建议

1、通过火绒个人版/企业版【漏洞修复】功能修复漏洞。