Windows 10 Security Vulnerabilities

CVE-2023-36006

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...

CVE-2023-36011

Win32k Elevation of Privilege...

CVE-2023-36005

Windows Telephony Server Elevation of Privilege...

CVE-2023-36004

Windows DPAPI (Data Protection Application Programming Interface) Spoofing...

CVE-2023-35644

Windows Sysmain Service Elevation of...

CVE-2023-36003

XAML Diagnostics Elevation of Privilege...

CVE-2023-35642

Internet Connection Sharing (ICS) Denial of Service...

CVE-2023-35641

Internet Connection Sharing (ICS) Remote Code Execution...

CVE-2023-35639

Microsoft ODBC Driver Remote Code Execution...

CVE-2023-35632

Windows Ancillary Function Driver for WinSock Elevation of Privilege...

CVE-2023-35633

Windows Kernel Elevation of Privilege...

CVE-2023-35630

Internet Connection Sharing (ICS) Remote Code Execution...

CVE-2023-35629

Microsoft USBHUB 3.0 Device Driver Remote Code Execution...

CVE-2023-35628

Windows MSHTML Platform Remote Code Execution...

CVE-2023-21740

Windows Media Remote Code Execution...

CVE-2020-12614

An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. If the publisher criteria is selected, it defines the name of a publisher that must be present in the certificate (and also requires that the certificate is valid). If an Add Admin token is protected by this...

CVE-2023-24023

Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka...

CVE-2023-6235

An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could place an arbitrary libusk.dll file in the C:\Users\user\AppData\Local\Microsoft\WindowsApps\ directory, which could lead to the execution and persistence of...

CVE-2023-36049

.NET, .NET Framework, and Visual Studio Elevation of Privilege...

CVE-2023-36705

Windows Installer Elevation of Privilege...

CVE-2023-36719

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege...

CVE-2023-36560

ASP.NET Security Feature Bypass...

CVE-2023-36428

Microsoft Local Security Authority Subsystem Service Information Disclosure...

CVE-2023-36425

Windows Distributed File System (DFS) Remote Code Execution...

CVE-2023-36427

Windows Hyper-V Elevation of Privilege...

CVE-2023-36424

Windows Common Log File System Driver Elevation of Privilege...

CVE-2023-36423

Microsoft Remote Registry Service Remote Code Execution...

CVE-2023-36408

Windows Hyper-V Elevation of Privilege...

CVE-2023-36405

Windows Kernel Elevation of Privilege...

CVE-2023-36404

Windows Kernel Information Disclosure...

CVE-2023-36402

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...

CVE-2023-36403

Windows Kernel Elevation of Privilege...

CVE-2023-36401

Microsoft Remote Registry Service Remote Code Execution...

CVE-2023-36400

Windows HMAC Key Derivation Elevation of Privilege...

CVE-2023-36397

Windows Pragmatic General Multicast (PGM) Remote Code Execution...

CVE-2023-36398

Windows NTFS Information Disclosure...

CVE-2023-36394

Windows Search Service Elevation of Privilege...

CVE-2023-36393

Windows User Interface Application Core Remote Code Execution...

CVE-2023-36047

Windows Authentication Elevation of Privilege...

CVE-2023-36036

Windows Cloud Files Mini Filter Driver Elevation of Privilege...

CVE-2023-36033

Windows DWM Core Library Elevation of Privilege...

CVE-2023-36028

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution...

CVE-2023-36025

Windows SmartScreen Security Feature Bypass...

CVE-2023-36017

Windows Scripting Engine Memory Corruption...

CVE-2023-34058

VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate...

CVE-2023-38545

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host...

CVE-2023-41772

Win32k Elevation of Privilege...

CVE-2023-41765

Layer 2 Tunneling Protocol Remote Code Execution...

CVE-2023-41767

Layer 2 Tunneling Protocol Remote Code Execution...

CVE-2023-38166

Layer 2 Tunneling Protocol Remote Code Execution...