Windows 10 1607@* Security Vulnerabilities and Issues — Page 36 of Windows 10 1607@* CVE List

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2...

5.5CVSS5AI score0.04687EPSS

Web

CVE•added 2018/06/14 12:29 p.m.•98 views

CVE-2018-8215

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. T...

5.3CVSS5.2AI score0.01097EPSS

CVE•added 2018/06/14 12:29 p.m.•98 views

CVE-2018-8239

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

5.5CVSS6.1AI score0.64467EPSS

CVE•added 2018/09/13 12:29 a.m.•98 views

CVE-2018-8438

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka "Windows Hyper-V Denial of Service Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Se...

6.8CVSS6.2AI score0.0067EPSS

CVE•added 2018/10/10 1:29 p.m.•98 views

CVE-2018-8484

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, W...

7.8CVSS7.5AI score0.00351EPSS

CVE•added 2018/10/10 1:29 p.m.•98 views

CVE-2018-8492

5.3CVSS6.2AI score0.0024EPSS

CVE•added 2019/11/12 7:15 p.m.•98 views

CVE-2019-1391

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2018-12207.

5.5CVSS7.2AI score0.00471EPSS

CVE•added 2019/12/10 10:15 p.m.•98 views

CVE-2019-1488

A security feature bypass vulnerability exists when Microsoft Defender improperly handles specific buffers, aka 'Microsoft Defender Security Feature Bypass Vulnerability'.

3.3CVSS5.7AI score0.0046EPSS

CVE•added 2020/01/14 11:15 p.m.•98 views

CVE-2020-0613

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628...

7.8CVSS7.7AI score0.00511EPSS

CVE•added 2020/02/11 10:15 p.m.•98 views

CVE-2020-0704

An elevation of privilege vulnerability exists when the Windows Wireless Network Manager improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Wireless Network Manager Elevation of Privilege Vulnerability'.

7.8CVSS8.2AI score0.00463EPSS

CVE•added 2020/02/11 10:15 p.m.•98 views

CVE-2020-0739

An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file creation allowing for a file overwrite or creation in a secured location, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0737.

7.8CVSS8AI score0.00377EPSS

CVE•added 2020/03/12 4:15 p.m.•98 views

CVE-2020-0858

An elevation of privilege vulnerability exists when the "Public Account Pictures" folder improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CV...

7.8CVSS8.7AI score0.00495EPSS

CVE•added 2020/04/15 3:15 p.m.•98 views

CVE-2020-0960

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0988, CVE-2020-0992, CVE-2020-0994,...

9.3CVSS8AI score0.33652EPSS

CVE•added 2020/04/15 3:15 p.m.•98 views

CVE-2020-0964

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.29439EPSS

CVE•added 2020/06/09 8:15 p.m.•98 views

CVE-2020-1160

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'.

5.5CVSS6.1AI score0.00487EPSS

CVE•added 2020/06/09 8:15 p.m.•98 views

CVE-2020-1282

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1231, CVE-2020-1233, CVE-2020-1235, CVE-2020-1265, CVE-2020-1304, CVE-2020-1306, CVE-2020-133...

7.8CVSS7.7AI score0.12134EPSS

CVE•added 2021/07/14 6:15 p.m.•98 views

CVE-2021-34511

Windows Installer Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00249EPSS

CVE•added 2022/04/15 7:15 p.m.•98 views

CVE-2022-26797

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.0036EPSS

CVE•added 2022/09/13 7:15 p.m.•98 views

CVE-2022-34726

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.02358EPSS

CVE•added 2022/09/13 7:15 p.m.•98 views

CVE-2022-35833

Windows Secure Channel Denial of Service Vulnerability

7.5CVSS8.4AI score0.03165EPSS

CVE•added 2022/10/11 7:15 p.m.•98 views

CVE-2022-37989

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.14315EPSS

CVE•added 2022/12/13 7:15 p.m.•98 views

CVE-2022-44683

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS7.9AI score0.03377EPSS

CVE•added 2023/02/14 8:15 p.m.•98 views

CVE-2023-21697

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

6.2CVSS5.8AI score0.00364EPSS

CVE•added 2023/04/11 9:15 p.m.•98 views

CVE-2023-28276

Windows Group Policy Security Feature Bypass Vulnerability

4.4CVSS4.9AI score0.00196EPSS

CVE•added 2023/07/11 6:15 p.m.•98 views

CVE-2023-35312

Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability

7.8CVSS8.5AI score0.00394EPSS

CVE•added 2023/07/11 6:15 p.m.•98 views

CVE-2023-35328

Windows Transaction Manager Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00115EPSS

CVE•added 2023/08/08 6:15 p.m.•98 views

CVE-2023-36913

Microsoft Message Queuing Information Disclosure Vulnerability

7.5CVSS7.5AI score0.00443EPSS

CVE•added 2024/05/14 5:17 p.m.•98 views

CVE-2024-30039

Windows Remote Access Connection Manager Information Disclosure Vulnerability

5.5CVSS6.2AI score0.00385EPSS

CVE•added 2024/07/09 5:15 p.m.•98 views

CVE-2024-38049

Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability

8.1CVSS8.1AI score0.00289EPSS

CVE•added 2024/07/09 5:15 p.m.•98 views

CVE-2024-38062

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.02798EPSS

CVE•added 2024/07/09 5:15 p.m.•98 views

CVE-2024-38064

Windows TCP/IP Information Disclosure Vulnerability

7.5CVSS8.3AI score0.07187EPSS

CVE•added 2024/08/13 6:15 p.m.•98 views

CVE-2024-38143

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

4.2CVSS4.6AI score0.02126EPSS

CVE•added 2024/11/12 6:15 p.m.•98 views

CVE-2024-43627

Windows Telephony Service Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.01975EPSS

CVE•added 2024/11/12 6:15 p.m.•98 views

CVE-2024-43636

Win32k Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00514EPSS

CVE•added 2025/02/11 6:15 p.m.•98 views

CVE-2025-21368

Microsoft Digest Authentication Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.00517EPSS

CVE•added 2025/02/11 6:15 p.m.•98 views

CVE-2025-21419

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

7.1CVSS7.6AI score0.00179EPSS

CVE•added 2025/03/11 5:16 p.m.•98 views

CVE-2025-24035

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

8.1CVSS8.2AI score0.00325EPSS

CVE•added 2018/08/15 5:29 p.m.•97 views

CVE-2018-8200

5.3CVSS6.7AI score0.00421EPSS

CVE•added 2018/09/13 12:29 a.m.•97 views

CVE-2018-8462

7.8CVSS7.5AI score0.00478EPSS

CVE•added 2019/10/10 2:15 p.m.•97 views

CVE-2019-1060

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.

9.3CVSS9.3AI score0.22645EPSS

CVE•added 2019/07/15 7:15 p.m.•97 views

CVE-2019-1097

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1093.

5.5CVSS5.8AI score0.0143EPSS

CVE•added 2019/09/11 10:15 p.m.•97 views

CVE-2019-1286

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1252.

6.5CVSS6.7AI score0.3045EPSS

CVE•added 2020/01/24 9:15 p.m.•97 views

CVE-2019-1454

An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.

5.5CVSS7.1AI score0.00281EPSS

Total number of security vulnerabilities2722