Windows 10 Security Vulnerabilities and Issues — Page 48 of Windows 10 CVE List

Lucene search

MicrosoftWindows 10

3000 matches found

CVE•added 2020/07/14 11:15 p.m.•84 views

CVE-2020-1359

An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory, aka 'Windows CNG Key Isolation Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1384.

7.8CVSS8.5AI score0.00513EPSS

CVE•added 2020/07/14 11:15 p.m.•84 views

CVE-2020-1368

An elevation of privilege vulnerability exists in the way that the Credential Enrollment Manager service handles objects in memory, aka 'Windows Credential Enrollment Manager Service Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.00278EPSS

CVE•added 2020/07/14 11:15 p.m.•84 views

CVE-2020-1399

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1404, CVE-2020-1413, CVE-2020-1414, CVE-2020-141...

7.8CVSS7.7AI score0.00513EPSS

CVE•added 2020/10/16 11:15 p.m.•84 views

CVE-2020-16976

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The ...

7.8CVSS8.2AI score0.00542EPSS

CVE•added 2020/11/11 7:15 a.m.•84 views

CVE-2020-17024

Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00428EPSS

CVE•added 2020/11/11 7:15 a.m.•84 views

CVE-2020-17113

Windows Camera Codec Information Disclosure Vulnerability

5.5CVSS6.5AI score0.01225EPSS

CVE•added 2021/01/12 8:15 p.m.•84 views

CVE-2021-1691

Windows Hyper-V Denial of Service Vulnerability

7.7CVSS7.5AI score0.00991EPSS

CVE•added 2021/02/25 11:15 p.m.•84 views

CVE-2021-24091

Windows Camera Codec Pack Remote Code Execution Vulnerability

8.8CVSS8.6AI score0.07013EPSS

CVE•added 2021/03/11 4:15 p.m.•84 views

CVE-2021-26871

Windows WalletService Elevation of Privilege Vulnerability

7.8CVSS7.8AI score0.01927EPSS

CVE•added 2021/03/11 4:15 p.m.•84 views

CVE-2021-26900

Windows Win32k Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.07071EPSS

CVE•added 2021/04/13 8:15 p.m.•84 views

CVE-2021-28444

Windows Hyper-V Security Feature Bypass Vulnerability

6.5CVSS6.9AI score0.09551EPSS

CVE•added 2021/12/15 3:15 p.m.•84 views

CVE-2021-43229

Windows NTFS Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.11247EPSS

CVE•added 2022/10/11 7:15 p.m.•84 views

CVE-2022-33645

Windows TCP/IP Driver Denial of Service Vulnerability

7.5CVSS7.9AI score0.04678EPSS

CVE•added 2023/02/14 8:15 p.m.•84 views

CVE-2023-21702

Windows iSCSI Service Denial of Service Vulnerability

7.5CVSS7.5AI score0.03441EPSS

CVE•added 2015/08/15 12:59 a.m.•83 views

CVE-2015-2456

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, S...

9.3CVSS7.3AI score0.57455EPSS

CVE•added 2016/08/09 9:59 p.m.•83 views

CVE-2016-3299

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow remote attackers to hijack network traffic or bypass intended Enhanced Protected Mode (EPM) or application container prote...

5.3CVSS7AI score0.07344EPSS

CVE•added 2016/11/10 6:59 a.m.•83 views

CVE-2016-7218

Bowser.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to obtain sensitive information via a cr...

4.7CVSS5AI score0.01428EPSS

CVE•added 2016/12/20 6:59 a.m.•83 views

CVE-2016-7219

The Crypto driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to obtain sensitive information via a crafted application, a...

5.5CVSS5.4AI score0.01469EPSS

CVE•added 2017/03/17 12:59 a.m.•83 views

CVE-2017-0081

The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is differ...

7.8CVSS6AI score0.06734EPSS

CVE•added 2017/05/12 2:29 p.m.•83 views

CVE-2017-0246

The Graphics Component in the kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application or in Window...

7CVSS7.2AI score0.16582EPSS

CVE•added 2017/06/15 1:29 a.m.•83 views

CVE-2017-0300

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Window...

5CVSS4.8AI score0.15731EPSS

CVE•added 2017/10/13 1:29 p.m.•83 views

CVE-2017-11817

The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability when it improperly vali...

4.7CVSS6.1AI score0.03549EPSS

CVE•added 2017/07/11 9:29 p.m.•83 views

CVE-2017-8587

Windows Explorer in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511 allows a denial of service vulnerability when it attempts to open a non-existent file, aka "Windows Explorer Denial of Service Vulnerability".

6.5CVSS6.2AI score0.16489EPSS

CVE•added 2017/09/13 1:29 a.m.•83 views

CVE-2017-8677

The Windows GDI+ component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly discloses kernel ...

5.5CVSS5.3AI score0.26895EPSS

CVE•added 2018/08/15 5:29 p.m.•83 views

CVE-2018-8253

An elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscreen, aka "Microsoft Cortana Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10.

4.6CVSS6.3AI score0.01532EPSS

CVE•added 2019/01/08 9:29 p.m.•83 views

CVE-2019-0550

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019. Th...

8.4CVSS7.9AI score0.00598EPSS

CVE•added 2019/05/16 7:29 p.m.•83 views

CVE-2019-0886

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Information Disclosure Vulnerability'.

6.8CVSS6.2AI score0.00822EPSS

CVE•added 2019/08/14 9:15 p.m.•83 views

CVE-2019-1223

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RDP service on the target system to stop responding.To e...

7.5CVSS7.6AI score0.185EPSS

CVE•added 2020/02/11 10:15 p.m.•83 views

CVE-2020-0680

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0679, CVE-2020-0682.

7.8CVSS8.1AI score0.00511EPSS

CVE•added 2020/03/12 4:15 p.m.•83 views

CVE-2020-0781

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0783.

7.8CVSS8.5AI score0.00538EPSS

CVE•added 2020/03/12 4:15 p.m.•83 views

CVE-2020-0869

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0801, CVE-2020-0807, CVE-2020-0809.

8.8CVSS8.7AI score0.17369EPSS

CVE•added 2020/05/21 11:15 p.m.•83 views

CVE-2020-0909

A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets.To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server.The security update addresses the vulnerability by resolv...

7.5CVSS8.1AI score0.12525EPSS

CVE•added 2020/04/15 3:15 p.m.•83 views

CVE-2020-0993

A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries, aka 'Windows DNS Denial of Service Vulnerability'.

6.8CVSS6.9AI score0.12348EPSS

CVE•added 2020/04/15 3:15 p.m.•83 views

CVE-2020-1005

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0982, CVE-2020-0987.

5.5CVSS6.2AI score0.0176EPSS

CVE•added 2020/04/15 3:15 p.m.•83 views

CVE-2020-1014

An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'.

7.8CVSS8AI score0.0047EPSS

CVE•added 2020/05/21 11:15 p.m.•83 views

CVE-2020-1116

An information disclosure vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windows CSRSS Information Disclosure Vulnerability'.

5.5CVSS6.5AI score0.00505EPSS

CVE•added 2020/05/21 11:15 p.m.•83 views

CVE-2020-1123

A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-1084.

5.5CVSS6.9AI score0.00266EPSS

CVE•added 2020/06/09 8:15 p.m.•83 views

CVE-2020-1238

8.8CVSS8.3AI score0.27581EPSS

CVE•added 2020/06/09 8:15 p.m.•83 views

CVE-2020-1258

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'.

7.2CVSS7.4AI score0.00798EPSS

CVE•added 2020/06/09 8:15 p.m.•83 views

CVE-2020-1268

An information disclosure vulnerability exists when a Windows service improperly handles objects in memory, aka 'Windows Service Information Disclosure Vulnerability'.

5.5CVSS6.2AI score0.0095EPSS

CVE•added 2020/06/09 8:15 p.m.•83 views

CVE-2020-1283

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.

7.1CVSS7AI score0.28225EPSS

CVE•added 2020/07/14 11:15 p.m.•83 views

CVE-2020-1344

An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1362, CVE-2020-1369.

7.8CVSS8.1AI score0.12863EPSS

CVE•added 2020/07/14 11:15 p.m.•83 views

CVE-2020-1385

An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows Credential Picker Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.00278EPSS

CVE•added 2020/07/14 11:15 p.m.•83 views

CVE-2020-1392

An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1394, CVE-2020-1395.

7.8CVSS8.1AI score0.00694EPSS

CVE•added 2020/07/14 11:15 p.m.•83 views

CVE-2020-1394

An elevation of privilege vulnerability exists in the way that the Windows Geolocation Framework handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1392, CVE-2020-1395.

7.8CVSS8.1AI score0.00694EPSS

CVE•added 2020/07/14 11:15 p.m.•83 views

CVE-2020-1397

An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory, aka 'Windows Imaging Component Information Disclosure Vulnerability'.

6.5CVSS7.1AI score0.2819EPSS

CVE•added 2020/07/14 11:15 p.m.•83 views

CVE-2020-1415

7.8CVSS7.7AI score0.00513EPSS

CVE•added 2021/03/11 4:15 p.m.•83 views

CVE-2021-26898

Windows Event Tracing Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.0045EPSS

CVE•added 2021/04/13 8:15 p.m.•83 views

CVE-2021-28320

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00681EPSS