2026-11微软漏洞通告

作者：火绒安全
发布时间：2026-11-11
阅读量：1316

微软官方发布了2026年11月的安全更新。本月更新公布了1094个漏洞，包含535个特权提升漏洞、297个远程执行代码漏洞、156个信息泄露漏洞、46个拒绝服务漏洞、安全功能绕过漏洞27个、22个身份假冒漏洞、篡改漏洞11个，其中64个漏洞级别为“Critical”（高危），1029个为“Important”（严重）。建议用户及时使用火绒安全软件(个人/企业)【漏洞修复】功能更新补丁。

涉及组件

.NET
Active Directory Domain Services
ActiveSyncProvider
AMD Zen
ASP.NET Core
Aspire
Azure CLI
Azure Confidential Clean Rooms
Azure CycleCloud
Azure DevOps
Azure DevOps Server
Azure File Sync
Azure Firmware
Azure Front Door (AFD)
Azure Local
Azure Managed Grafana
Azure NFS mount helper (aznfs)
Azure OpenAI
Azure Pipelines
Connected Devices Platform Service (Cdpsvc)
Data Deduplication
Data Sharing Service Client
Desktop Window Manager
Entra Device Registration
Github Copilot
Graphic Fonts
HEIF Image Extensions
HID class driver
HID Parser Library
JDBC Driver for SQL Server
Kernel Transaction Manager
Mailslot File System
Microsoft 365 Agents SDK
Microsoft Account
Microsoft ActiveX Installer Service
Microsoft Authentication Library (MSAL) for Node.js
Microsoft Authentication Library for JavaScript
Microsoft Azure Kubernetes Service
Microsoft Bluetooth Driver
Microsoft Color Management
Microsoft Configuration Manager
Microsoft Defender
Microsoft Dynamics 365 (on-premises)
Microsoft Edge (Chromium-based)
Microsoft Entra Private Network Connector
Microsoft Exchange Server
Microsoft Graph
Microsoft Graphics Component
Microsoft High Performance Computing (HPC) Pack
Microsoft Input Method Editor (IME)
Microsoft JScript
Microsoft Local Security Authority Server (lsasrv)
Microsoft MCP Gateway
Microsoft Office
Microsoft Office Access
Microsoft Office Excel
Microsoft Office Outlook
Microsoft Office PowerPoint
Microsoft Office SharePoint
Microsoft Office Visio
Microsoft Office Word
Microsoft PowerShell
Microsoft PowerShell Core
Microsoft QUIC
Microsoft Remote Registry Service
Microsoft Streaming Service
Microsoft Teams
Microsoft Teams for Android
Microsoft Trace Data Helper
Microsoft WDAC OLE DB provider for SQL
Microsoft Windows App Store
Microsoft Windows Codecs Library
Microsoft Windows Media Foundation
Microsoft Windows SCSI Class System File
Microsoft Windows Search Component
Microsoft Windows Speech
Microsoft XPS Document Converter
Quality Windows Audio/Video Experience (QWAVE) service
Reliable Multicast Transport Driver (RMCAST)
Remote Desktop Client
Remote Desktop Gateway Service
Role: DNS Server
RPC Runtime
Secondary Logon
Servicing Stack Updates
Software Protection Platform (SPP)
SQL Server
Storport.sys Driver
vhdmp.sys
Virtual Hard Disk (VHD) Miniport Driver
Visual Studio
Visual Studio Code
Visual Studio Code - GitHub Pull Requests and Issues Extension
Windows Active Directory
Windows Active Directory Certificate Services
Windows Admin Center
Windows Advanced Rasterization Platform
Windows Ancillary Function Driver for WinSock
Windows App Readiness Service
Windows AppContainer
Windows AppX Deployment Service
Windows AppX Package Manager
Windows Audio Service
Windows Autopilot
Windows Background Intelligent Transfer Service (BITS)
Windows Backup Engine
Windows Bind Filter Driver
Windows Biometric Service
Windows BitLocker
Windows Bluetooth A2DP driver
Windows Bluetooth Port Driver
Windows Bluetooth Service
Windows Broadcast DVR User Service
Windows Broker Infrastructure Service
Windows Brokering File System
Windows Camera Frame Server Monitor
Windows CD-ROM Driver
Windows Client for NFS
Windows Clipboard Virtual Channel Extension
Windows Cloud Files Mini Filter Driver
Windows CNG Key Isolation Service
Windows COM
Windows COM+ Event System Service
Windows Composite Image File System
Windows Connected User Experiences and Telemetry
Windows Connection Manager Service
Windows Container Isolation FS Filter Driver (unionfs.sys)
Windows Container Manager Service
Windows Cred SSProvider Protocol
Windows Credential Manager
Windows Credential User Interface
Windows Defender Firewall Service
Windows Deployment Services
Windows Device Association Service
Windows Device Inventory
Windows Devices Human Interface
Windows DHCP Client
Windows DHCP Server
Windows Diagnostic Policy Service
Windows DIAL Client
Windows DirectX
Windows Distributed File System (DFS)
Windows Distributed Transaction Coordinator
Windows DNS
Windows DPAPI (Data Protection Application Programming Interface)
Windows DWM Core Library
Windows Encrypting File System (EFS)
Windows Enhanced Storage
Windows Error Reporting
Windows eSCL Scanner
Windows Event Collector Service
Windows Event Logging Service
Windows Event Viewer
Windows exFAT File System
Windows Failover Cluster
Windows Fast FAT Driver
Windows Feedback Hub
Windows File Server Resource Management Service
Windows FileCrypt Driver
Windows Filter Manager
Windows Filtering Platform (WFP)
Windows FTP Service
Windows Function Discovery Resource Publication
Windows Function Discovery SSDP Provider
Windows GDI
Windows Graphics Kernel
Windows HTTP.sys
Windows Hyper-V
Windows IKE Extension
Windows Image Acquisition
Windows Imaging Component
Windows Input System
Windows Installer
Windows Internet (wininet.dll)
Windows Internet Connection Sharing (ICS)
Windows Internet Information Services
Windows Inventory Backup
Windows IP Translation Configuration Service
Windows iSCSI
Windows iSCSI Target Service
Windows Kerberos
Windows Kernel
Windows Kernel-Mode Drivers
Windows Language Experience Service
Windows Layer-2 Bridge Network Driver
Windows LDAP - Lightweight Directory Access Protocol
Windows Link Layer Topology Discovery Protocol
Windows Link-Layer Discovery Protocol (LLDP)
Windows Local Security Authority Subsystem Service (LSASS)
Windows Local Session Manager (LSM)
Windows LUAFV
Windows Management Instrumentation
Windows Management Services
Windows Maps
Windows Media Player
Windows Message Queuing
Windows Message Queuing Queue Manager
Windows Microsoft Account Sign-in Assistant
Windows Microsoft DirectMusic
Windows MIDI Service Module
Windows Mobile Device Management
Windows Modern Device Management (MDM)
Windows Multiple Provider Router
Windows NetBIOS
Windows Network Address Translation (NAT)
Windows Network Connected Devices Auto-Setup Service
Windows Network Connection Broker
Windows Network File System
Windows NTFS
Windows NTLM
Windows ODBC Driver
Windows OLE
Windows OLE DB
Windows Overlay Filter
Windows Partition Management Driver
Windows PCI Bus Driver
Windows Performance Counters
Windows Performance Monitor
Windows Phone Service
Windows Point-to-Point Protocol over Ethernet (PPPoE)
Windows PowerShell
Windows Print Spooler Components
Windows PrintWorkflowUserSvc
Windows Program Compatibility Assistant Service
Windows Projected File System
Windows Projected File System Filter Driver
Windows Push Notification Core
Windows Push Notifications
Windows Raw Image Extension
Windows Redirected Drive Buffering
Windows Remote Access API
Windows Remote Access Connection Manager
Windows Remote Assistance
Windows Remote Desktop
Windows Remote Desktop Services
Windows Remote Procedure Call
Windows Remote Procedure Call Runtime
Windows Resilient File System (ReFS)
Windows Rich Text Edit Control
Windows RNDIS
Windows Sandbox
Windows Schannel
Windows Secure Kernel Mode
Windows Secure Socket Tunneling Protocol (SSTP)
Windows Security Account Manager
Windows Security Center
Windows Sensor Data Service
Windows Server for NFS
Windows Setup and Deployment
Windows Shell
Windows Smart Card
Windows SMB
Windows SMB Client
Windows SMB Server
Windows SMB Server Network Transport Driver (srvnet.sys)
Windows SSDP Service
Windows State Repository Service
Windows StateRepository API
Windows Storage
Windows Storage Spaces Controller
Windows Storport Miniport Driver
Windows Subsystem for Linux
Windows System Events Broker
Windows Task Scheduler
Windows TCP/IP
Windows Telephony Service
Windows Text Services Framework
Windows TPM
Windows Universal Disk Format File System Driver (UDFS)
Windows Update Stack
Windows USB Audio Class driver (usbaudio.sys)
Windows USB Driver
Windows USB Hub Driver
Windows USB Scanner Driver
Windows USB Video Driver
Windows User Manager Service
Windows USM Communication Manager
Windows Virtual Filtering Platform (VFP)
Windows VMSwitch
Windows Volume Shadow Copy
Windows Win32K
Windows WinHTTP
Windows Wireless Networking
Windows WLAN Service
Windows Xbox Live Networking Service
Windows XWizard Framework
Winlogon
Winsock
Xbox

以下漏洞需特别注意

Windows 搜索远程代码执行漏洞 CVE-2026-116928

严重级别：严重 CVSS:9.8

被利用级别：被利用可能性较低

此漏洞无需用户交互。该漏洞源于Windows搜索组件中的越界写入缺陷。在涉及Microsoft Exchange Server的攻击场景中，由于Exchange为邮件附件建立索引时会自动调用该组件解析内容，攻击者可通过发送包含特制附件的电子邮件，在收件人未打开邮件或附件的情况下导致越界写入并触发漏洞。成功利用后，攻击者可在受影响系统上远程执行代码。

Windows Xbox Live 网络服务远程代码执行漏洞 CVE-2026-112967

严重级别：严重 CVSS:9.8

被利用级别：被利用可能性较低

此漏洞无需身份验证或用户交互。该漏洞源于Windows Xbox Live网络服务中的堆缓冲区溢出缺陷。能够通过网络访问相关服务端点的攻击者，可通过调用相关端点利用该漏洞。成功利用后，攻击者可在受影响系统上远程执行代码。

Windows 轻量级目录访问协议（LDAP）远程代码执行漏洞 CVE-2026-119958

严重级别：严重 CVSS:9.8

被利用级别：被利用可能性较低

此漏洞无需用户交互。该漏洞源于Windows LDAP组件中的越界写入缺陷。攻击者可通过网络向受影响服务发起一组特制的协议调用来利用该漏洞。成功利用后，攻击者可使用受影响目录服务的运行权限，在目标系统上执行任意代码。

Windows Active Directory 域服务远程代码执行漏洞

CVE-2026-118146

严重级别：高危 CVSS:8.8

被利用级别：很有可能被利用