Windows 10 21h2 Security Vulnerabilities

CVE-2022-41077

Windows Fax Compose Form Elevation of Privilege Vulnerability

CVE-2022-41081

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVE-2022-41086

Windows Group Policy Elevation of Privilege Vulnerability

CVE-2022-41090

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

CVE-2022-41091

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2022-41092

Windows Win32k Elevation of Privilege Vulnerability

CVE-2022-41093

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVE-2022-41094

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2022-41095

Windows Digital Media Receiver Elevation of Privilege Vulnerability

CVE-2022-41096

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2022-41098

Windows GDI+ Information Disclosure Vulnerability

CVE-2022-41099

BitLocker Security Feature Bypass Vulnerability

CVE-2022-41100

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVE-2022-41101

Windows Overlay Filter Elevation of Privilege Vulnerability

CVE-2022-41102

Windows Overlay Filter Elevation of Privilege Vulnerability

CVE-2022-41109

Windows Win32k Elevation of Privilege Vulnerability

CVE-2022-41113

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVE-2022-41114

Windows Bind Filter Driver Elevation of Privilege Vulnerability

CVE-2022-41118

Windows Scripting Languages Remote Code Execution Vulnerability

CVE-2022-41121

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2022-41125

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVE-2022-41128

Windows Scripting Languages Remote Code Execution Vulnerability

CVE-2022-44666

Windows Contacts Remote Code Execution Vulnerability

CVE-2022-44667

Windows Media Remote Code Execution Vulnerability

CVE-2022-44669

Windows Error Reporting Elevation of Privilege Vulnerability

CVE-2022-44670

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

CVE-2022-44671

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2022-44673

Windows Client Server Run-Time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVE-2022-44674

Windows Bluetooth Driver Information Disclosure Vulnerability

CVE-2022-44675

Windows Bluetooth Driver Elevation of Privilege Vulnerability

CVE-2022-44676

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

CVE-2022-44677

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2022-44678

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-44679

Windows Graphics Component Information Disclosure Vulnerability

CVE-2022-44680

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2022-44681

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-44682

Windows Hyper-V Denial of Service Vulnerability

CVE-2022-44683

Windows Kernel Elevation of Privilege Vulnerability

CVE-2022-44684

Windows Local Session Manager (LSM) Denial of Service Vulnerability

CVE-2022-44689

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

CVE-2022-44697

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2022-44698

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2023-1017

An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process o...

CVE-2023-1018

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.

CVE-2023-20569

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.

CVE-2023-20588

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

CVE-2023-21524

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

CVE-2023-21525

Remote Procedure Call Runtime Denial of Service Vulnerability

CVE-2023-21526

Windows Netlogon Information Disclosure Vulnerability

CVE-2023-21527

Windows iSCSI Service Denial of Service Vulnerability