¡¾Îó²îͨ¸æ¡¿Î¢Èí3Ô¶à¸öÇå¾²Îó²î
Ðû²¼Ê±¼ä 2026-03-11Ò»¡¢Îó²î¸ÅÊö
2026Äê3ÔÂ11ÈÕ£¬×ðÁú¿¹ÙÍøÈë¿ÚÇå¾²Ó¦¼±ÏìÓ¦ÖÐÐÄ£¨VSRC£©¼à²âµ½Î¢ÈíÐû²¼ÁË3ÔÂÇå¾²¸üУ¬±¾´Î¸üÐÂÐÞ¸´ÁË83¸öÎó²î£¬º¸ÇÌØȨÌáÉý¡¢Ô¶³Ì´úÂëÖ´ÐС¢ÐÅϢй¶µÈ¶àÖÖÎó²îÀàÐÍ ¡£Îó²î¼¶±ðÂþÑÜÈçÏ£º8¸öÑÏÖؼ¶±ðÎó²î£¬75¸öÖ÷Òª¼¶±ðÎó²î£¨Îó²î¼¶±ðÒÀ¾Ý΢Èí¹Ù·½Êý¾Ý£© ¡£
ÆäÖУ¬6¸öÎó²î±»Î¢Èí±ê¼ÇΪ¡°¸ü¿ÉÄܱ»Ê¹Óá±¼°¡°¼ì²âʹÓÃÇéÐΡ±£¬Åú×¢ÕâЩÎó²î±£´æ½Ï¸ßµÄʹÓÃΣº¦£¬½¨ÒéÓÅÏÈÐÞ¸´ÒÔ½µµÍDZÔÚÇå¾²Íþв ¡£
CVE-ID | CVE ÎÊÌâ | Îó²î¼¶±ð |
CVE-2026-23668 | Windows ͼÐÎ×é¼þÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-24289 | Windows ÄÚºËÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-24291 | Windows ¸¨Öú¹¦Ð§»ù´¡ÉèÊ© (ATBroker.exe) ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-24294 | Windows SMB Server Elevation of Privilege Vulnerability | Ö÷Òª |
CVE-2026-25187 | Winlogon ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-26132 | Windows ÄÚºËÌØȨÌáÉýÎó²î | Ö÷Òª |
΢Èí3Ô¸üÐÂÐÞ¸´µÄÍêÕûÎó²îÁбíÈçÏ£º
CVE-ID | CVE ÎÊÌâ | Îó²î¼¶±ð |
CVE-2026-20967 | System Center Operations Manager (SCOM) ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-21262 | SQL ·þÎñÆ÷ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-21536 | Microsoft ×°±¸¶¨¼ÛÍýÏëÔ¶³Ì´úÂëÖ´ÐÐÎó²î | ÑÏÖØ |
CVE-2026-23651 | Microsoft ACI ±£ÃÜÈÝÆ÷ÌØȨÌáÉýÎó²î | ÑÏÖØ |
CVE-2026-23654 | GitHub£ºZero Shot SCFoundation Ô¶³Ì´úÂëÖ´ÐÐÎó²î | Ö÷Òª |
CVE-2026-23656 | Windows Ó¦ÓÃ×°ÖóÌÐòÓÕÆÎó²î | Ö÷Òª |
CVE-2026-23660 | Azure ÃÅ»§ÖÐµÄ Windows Admin Center ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-23661 | Azure IoT Explorer ÐÅϢй¶Îó²î | Ö÷Òª |
CVE-2026-23662 | Azure IoT Explorer ÐÅϢй¶Îó²î | Ö÷Òª |
CVE-2026-23664 | Azure IoT Explorer ÐÅϢй¶Îó²î | Ö÷Òª |
CVE-2026-23665 | Linux Azure Õï¶ÏÀ©Õ¹ (LAD) ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-23667 | ¹ã²¥DVR ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-23668 | Windows ͼÐÎ×é¼þÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-23669 | Windows ´òÓ¡ºǫ́´¦Öóͷ£³ÌÐòÔ¶³ÌÖ´ÐдúÂëÎó²î | Ö÷Òª |
CVE-2026-23671 | Windows À¶ÑÀ RFCOMM ÐÒéÇý¶¯³ÌÐòÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-23672 | Windows ͨÓôÅÅÌÃûÌÃÎļþϵͳÇý¶¯³ÌÐò (UDFS) ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-23673 | Windows Resilient Îļþϵͳ (ReFS) ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-23674 | MapUrlToZone Çå¾²¹¦Ð§ÈƹýÎó²î | Ö÷Òª |
CVE-2026-24282 | ÍÆËÍÐÂÎÅ·ÓÉ·þÎñÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-24283 | ¶àUNC Ìṩ³ÌÐòÄÚºËÇý¶¯³ÌÐòÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-24285 | Win32k ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-24287 | Windows ÄÚºËÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-24288 | Windows Òƶ¯¿í´øÇý¶¯³ÌÐòÔ¶³Ì´úÂëÖ´ÐÐÎó²î | Ö÷Òª |
CVE-2026-24289 | Windows ÄÚºËÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-24290 | Windows ͶӰÎļþϵͳÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-24291 | Windows ¸¨Öú¹¦Ð§»ù´¡ÉèÊ© (ATBroker.exe) ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-24292 | Windows »¥Áª×°±¸Æ½Ì¨·þÎñÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-24293 | WinSock µÄ Windows ¸¨Öú¹¦Ð§Çý¶¯³ÌÐòÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-24294 | Windows SMB Server Elevation of Privilege Vulnerability | Ö÷Òª |
CVE-2026-24295 | Windows ×°±¸¹ØÁª·þÎñÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-24296 | Windows ×°±¸¹ØÁª·þÎñÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-24297 | Windows Kerberos Çå¾²¹¦Ð§ÈƹýÎó²î | Ö÷Òª |
CVE-2026-25165 | Õë¶ÔWindows ÌØȨÌáÉýÎó²îµÄÐÔÄܼÆÊýÆ÷ | Ö÷Òª |
CVE-2026-25166 | Windows ϵͳӳÏñ¹ÜÀíÆ÷ÆÀ¹ÀºÍ°²ÅŹ¤¾ß°ü (ADK) Ô¶³Ì´úÂëÖ´ÐÐÎó²î | Ö÷Òª |
CVE-2026-25167 | Microsoft ´úÀíÎļþϵͳÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-25168 | Windows ͼÐÎ×é¼þ¾Ü¾ø·þÎñÎó²î | Ö÷Òª |
CVE-2026-25169 | Windows ͼÐÎ×é¼þ¾Ü¾ø·þÎñÎó²î | Ö÷Òª |
CVE-2026-25170 | Windows Hyper-V ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-25171 | Windows Éí·ÝÑéÖ¤ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-25172 | Windows ·ÓɺÍÔ¶³Ì»á¼û·þÎñ (RRAS) Ô¶³Ì´úÂëÖ´ÐÐÎó²î | Ö÷Òª |
CVE-2026-25173 | Windows ·ÓɺÍÔ¶³Ì»á¼û·þÎñ (RRAS) Ô¶³Ì´úÂëÖ´ÐÐÎó²î | Ö÷Òª |
CVE-2026-25174 | Windows ¿ÉÀ©Õ¹Îļþ·ÖÅɱíÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-25175 | Windows NTFS ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-25176 | WinSock µÄ Windows ¸¨Öú¹¦Ð§Çý¶¯³ÌÐòÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-25177 | Active Directory Domain Services Elevation of Privilege Vulnerability | Ö÷Òª |
CVE-2026-25178 | WinSock µÄ Windows ¸¨Öú¹¦Ð§Çý¶¯³ÌÐòÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-25179 | WinSock µÄ Windows ¸¨Öú¹¦Ð§Çý¶¯³ÌÐòÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-25180 | Windows ͼÐÎ×é¼þÐÅϢй¶Îó²î | Ö÷Òª |
CVE-2026-25181 | GDI+ ÐÅϢй¶Îó²î | Ö÷Òª |
CVE-2026-25185 | Windows Shell Á´½Ó´¦Öóͷ£ÓÕÆÎó²î | Ö÷Òª |
CVE-2026-25186 | Windows ¸¨Öú¹¦Ð§»ù´¡ÉèÊ© (ATBroker.exe) ÐÅϢй¶Îó²î | Ö÷Òª |
CVE-2026-25187 | Winlogon ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-25188 | Windows µç»°·þÎñÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-25189 | Windows DWM ½¹µã¿âÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-25190 | GDI Ô¶³ÌÖ´ÐдúÂëÎó²î | Ö÷Òª |
CVE-2026-26105 | Microsoft SharePoint Server ÓÕÆÎó²î | Ö÷Òª |
CVE-2026-26106 | Microsoft SharePoint Server Ô¶³ÌÖ´ÐдúÂëÎó²î | Ö÷Òª |
CVE-2026-26107 | Microsoft Excel Ô¶³ÌÖ´ÐдúÂëÎó²î | Ö÷Òª |
CVE-2026-26108 | Microsoft Excel Ô¶³ÌÖ´ÐдúÂëÎó²î | Ö÷Òª |
CVE-2026-26109 | Microsoft Excel Ô¶³ÌÖ´ÐдúÂëÎó²î | Ö÷Òª |
CVE-2026-26110 | Microsoft Office Ô¶³ÌÖ´ÐдúÂëÎó²î | ÑÏÖØ |
CVE-2026-26111 | Windows ·ÓɺÍÔ¶³Ì»á¼û·þÎñ (RRAS) Ô¶³Ì´úÂëÖ´ÐÐÎó²î | Ö÷Òª |
CVE-2026-26112 | Microsoft Excel Ô¶³ÌÖ´ÐдúÂëÎó²î | Ö÷Òª |
CVE-2026-26113 | Microsoft Office Ô¶³ÌÖ´ÐдúÂëÎó²î | ÑÏÖØ |
CVE-2026-26114 | Microsoft SharePoint Server Ô¶³ÌÖ´ÐдúÂëÎó²î | Ö÷Òª |
CVE-2026-26115 | SQL ·þÎñÆ÷ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-26116 | SQL ·þÎñÆ÷ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-26117 | ÒÑÆôÓÃArc µÄ·þÎñÆ÷ - Azure Connected Machine Agent ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-26118 | Azure MCP ·þÎñÆ÷¹¤¾ßÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-26121 | Azure IOT Explorer ÓÕÆÎó²î | Ö÷Òª |
CVE-2026-26122 | Microsoft ACI ±£ÃÜÈÝÆ÷ÐÅϢй¶Îó²î | ÑÏÖØ |
CVE-2026-26123 | Microsoft Authenticator ÐÅϢй¶Îó²î | Ö÷Òª |
CVE-2026-26124 | Microsoft ACI ±£ÃÜÈÝÆ÷ÌØȨÌáÉýÎó²î | ÑÏÖØ |
CVE-2026-26125 | Ö§¸¶ÓªÒµÁ÷³Ìе÷³ÌÐò·þÎñÌØȨÌáÉýÎó²î | ÑÏÖØ |
CVE-2026-26127 | .NET ¾Ü¾ø·þÎñÎó²î | Ö÷Òª |
CVE-2026-26128 | Windows SMB Server Elevation of Privilege Vulnerability | Ö÷Òª |
CVE-2026-26130 | ASP.NET Core ¾Ü¾ø·þÎñÎó²î | Ö÷Òª |
CVE-2026-26131 | .NET ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-26132 | Windows ÄÚºËÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-26134 | Microsoft Office ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-26141 | »ìÏý¸¨Öú½ÇÉ«À©Õ¹£¨ÆôÓÃArc µÄ Windows VM£©ÌØȨÌáÉýÎó²î | Ö÷Òª |
CVE-2026-26144 | Microsoft Excel ÐÅϢй¶Îó²î | ÑÏÖØ |
CVE-2026-26148 | Õë¶ÔLinux ÌØȨÌáÉýÎó²îµÄ Microsoft Azure AD SSH µÇ¼À©Õ¹ | Ö÷Òª |
¶þ¡¢Ó°Ïì¹æÄ£
ÊÜÓ°ÏìµÄ²úÆ·/¹¦Ð§/·þÎñ/×é¼þ°üÀ¨£º
System Center Operations Manager
SQL Server
Microsoft Devices Pricing Program
Azure Compute Gallery
GitHub Repo: zero-shot-scfoundation
Windows App Installer
Azure Portal Windows Admin Center
Azure IoT Explorer
Azure Linux Virtual Machines
Broadcast DVR
Microsoft Graphics Component
Windows Print Spooler Components
Windows Bluetooth RFCOM Protocol Driver
Windows Universal Disk Format File System Driver (UDFS)
Windows Resilient File System (ReFS)
Windows MapUrlToZone
Push Message Routing Service
Windows File Server
Windows Win32K
Windows Kernel
Windows Mobile Broadband
Windows Projected File System
Windows Accessibility Infrastructure (ATBroker.exe)
Connected Devices Platform Service (Cdpsvc)
Windows Ancillary Function Driver for WinSock
Windows SMB Server
Windows Device Association Service
Windows Kerberos
Windows Performance Counters
Windows System Image Manager
Microsoft Brokering File System
Role: Windows Hyper-V
Windows Authentication Methods
Windows Routing and Remote Access Service (RRAS)
Windows Extensible File Allocation
Windows NTFS
Active Directory Domain Services
Windows GDI+
Windows Shell Link Processing
Winlogon
Windows Telephony Service
Windows DWM Core Library
Windows GDI
Microsoft Office SharePoint
Microsoft Office Excel
Microsoft Office
Azure Windows Virtual Machine Agent
Azure MCP Server
Microsoft Authenticator
Payment Orchestrator Service
.NET
ASP.NET Core
Azure Arc
Azure Entra ID
Èý¡¢Çå¾²²½·¥
3.1 Éý¼¶°æ±¾
ÏÖÔÚ΢ÈíÒÑÐû²¼Ïà¹ØÇå¾²¸üУ¬½¨ÒéÊÜÓ°ÏìµÄÓû§¾¡¿ìÐÞ¸´ ¡£
£¨Ò»£©Windows Update×Ô¶¯¸üÐÂ
Microsoft UpdateĬÈÏÆôÓ㬵±ÏµÍ³¼ì²âµ½¿ÉÓøüÐÂʱ£¬½«»á×Ô¶¯ÏÂÔظüв¢ÔÚÏÂÒ»´ÎÆô¶¯Ê±×°Öà ¡£Ò²¿ÉÑ¡Ôñͨ¹ýÒÔÏ°취ÊÖ¶¯¾ÙÐиüУº
1¡¢µã»÷¡°×îÏȲ˵¥¡±»ò°´Windows¿ì½Ý¼ü£¬µã»÷½øÈë¡°ÉèÖá±
2¡¢Ñ¡Ôñ¡°¸üкÍÇå¾²¡±£¬½øÈë¡°Windows¸üС±£¨Windows 8¡¢Windows 8.1¡¢Windows Server 2012ÒÔ¼°Windows Server 2012 R2¿Éͨ¹ý¿ØÖÆÃæ°å½øÈë¡°Windows¸üС±£¬Ïêϸ°ì·¨Îª¡°¿ØÖÆÃæ°å¡±->¡°ÏµÍ³ºÍÇå¾²¡±->¡°Windows¸üС±£©
3¡¢Ñ¡Ôñ¡°¼ì²é¸üС±£¬ÆÚ´ýϵͳ×Ô¶¯¼ì²é²¢ÏÂÔØ¿ÉÓøüР¡£
4¡¢¸üÐÂÍê³ÉºóÖØÆôÅÌËã»ú£¬¿Éͨ¹ý½øÈë¡°Windows¸üС±->¡°Éó²é¸üÐÂÀúÊ·¼Í¼¡±Éó²éÊÇ·ñÀÖ³É×°ÖÃÁ˸üР¡£¹ØÓÚûÓÐÀÖ³É×°ÖõĸüУ¬¿ÉÒÔµã»÷¸Ã¸üÐÂÃû³Æ½øÈë΢Èí¹Ù·½¸üÐÂÐÎòÁ´½Ó£¬µã»÷×îеÄSSUÃû³Æ²¢ÔÚÐÂÁ´½ÓÖеã»÷¡°Microsoft ¸üÐÂĿ¼¡±£¬È»ºóÔÚÐÂÁ´½ÓÖÐÑ¡ÔñÊÊÓÃÓÚÄ¿µÄϵͳµÄ²¹¶¡¾ÙÐÐÏÂÔز¢×°Öà ¡£
£¨¶þ£©ÊÖ¶¯×°ÖøüÐÂ
Microsoft¹Ù·½ÏÂÔØÏìÓ¦²¹¶¡¾ÙÐиüР¡£
2026Äê3ÔÂÇå¾²¸üÐÂÏÂÔØÁ´½Ó£º
https://msrc.microsoft.com/update-guide/releaseNote/2026-Mar
²¹¶¡ÏÂÔØʾÀý£¨²Î¿¼£©£º
1.·¿ªÉÏÊöÏÂÔØÁ´½Ó£¬µã»÷Îó²îÁбíÖÐÒªÐÞ¸´µÄCVEÁ´½Ó ¡£
Àý1£ºÎ¢ÈíÎó²îÁÐ±í£¨Ê¾Àý£©
2.ÔÚ΢Èíͨ¸æÒ³Ãæµ×²¿×ó²à¡¾²úÆ·¡¿ÁÐÑ¡ÔñÏìÓ¦µÄϵͳÀàÐÍ£¬µã»÷ÓҲࡾÏÂÔØ¡¿Áз¿ª²¹¶¡ÏÂÔØÁ´½Ó ¡£
Àý2£ºCVE-2022-21989²¹¶¡ÏÂÔØʾÀý
3.µã»÷¡¾Çå¾²¸üС¿£¬·¿ª²¹¶¡ÏÂÔØÒ³Ã棬ÏÂÔØÏìÓ¦²¹¶¡²¢¾ÙÐÐ×°Öà ¡£
Àý3£º²¹¶¡ÏÂÔؽçÃæ
4.×°ÖÃÍê³ÉºóÖØÆôÅÌËã»ú ¡£
3.2 ÔÝʱ²½·¥
ÔÝÎÞ ¡£
3.3 ͨÓý¨Òé
? °´ÆÚ¸üÐÂϵͳ²¹¶¡£¬ïÔÌϵͳÎó²î£¬ÌáÉý·þÎñÆ÷µÄÇå¾²ÐÔ ¡£
? ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ£¬Ð޸ķÀ»ðǽսÂÔ£¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻò·þÎñ£¬ïÔ̽«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø£¬ïÔ̹¥»÷Ãæ ¡£
? ʹÓÃÆóÒµ¼¶Çå¾²²úÆ·£¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ ¡£
? ÔöǿϵͳÓû§ºÍȨÏÞ¹ÜÀí£¬ÆôÓöàÒòËØÈÏÖ¤»úÖƺÍ×îСȨÏÞÔÔò£¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏÞ¶È ¡£
? ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐÞ¸Ä ¡£
¾©¹«Íø°²±¸11010802024551ºÅ