Windows 10 Security Vulnerabilities and Issues — Page 5 of Windows 10 CVE List

Lucene search

MicrosoftWindows 10

3000 matches found

CVE•added 2020/10/16 11:15 p.m.•207 views

CVE-2020-16938

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.To exploit this vulnerability, an attacker would have to log on to ...

5.5CVSS5.5AI score0.10627EPSS

CVE•added 2016/10/14 2:59 a.m.•206 views

CVE-2016-7182

The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; ...

10CVSS8.7AI score0.35426EPSS

CVE•added 2015/09/09 12:59 a.m.•205 views

CVE-2015-2517

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption E...

6.9CVSS8.5AI score0.36682EPSS

CVE•added 2019/07/29 2:11 p.m.•205 views

CVE-2019-1118

A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1119, CVE-2019-1120, CVE-2019-1121, CVE-2019-1122, CVE-2019-1123, CVE-2019-1124, CVE-2019-112...

9.3CVSS8.4AI score0.40075EPSS

CVE•added 2022/04/15 7:15 p.m.•205 views

CVE-2022-24541

Windows Server Service Remote Code Execution Vulnerability

9.3CVSS9.4AI score0.07634EPSS

CVE•added 2020/10/16 11:15 p.m.•204 views

CVE-2020-16891

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could caus...

8.8CVSS8.7AI score0.00539EPSS

CVE•added 2021/10/13 1:15 a.m.•204 views

CVE-2021-41335

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00462EPSS

CVE•added 2022/06/15 10:15 p.m.•204 views

CVE-2022-30141

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

9.3CVSS8.5AI score0.09953EPSS

CVE•added 2022/07/12 11:15 p.m.•203 views

CVE-2022-21845

Windows Kernel Information Disclosure Vulnerability

4.7CVSS6.1AI score0.00875EPSS

CVE•added 2022/03/09 5:15 p.m.•203 views

CVE-2022-21975

Windows Hyper-V Denial of Service Vulnerability

4.7CVSS6.2AI score0.00137EPSS

CVE•added 2019/07/29 2:11 p.m.•202 views

CVE-2019-1120

A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1118, CVE-2019-1119, CVE-2019-1121, CVE-2019-1122, CVE-2019-1123, CVE-2019-1124, CVE-2019-112...

9.3CVSS8.4AI score0.40075EPSS

CVE•added 2022/06/15 10:15 p.m.•202 views

CVE-2022-30139

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

7.5CVSS8.2AI score0.06205EPSS

CVE•added 2022/08/09 8:15 p.m.•202 views

CVE-2022-34714

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS9AI score0.0018EPSS

CVE•added 2021/08/12 6:15 p.m.•201 views

CVE-2021-34535

Remote Desktop Client Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.02515EPSS

CVE•added 2022/05/10 9:15 p.m.•201 views

CVE-2022-22013

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

8.8CVSS9.4AI score0.0999EPSS

CVE•added 2022/05/10 9:15 p.m.•201 views

CVE-2022-22015

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

6.5CVSS7.7AI score0.09009EPSS

CVE•added 2021/03/11 4:15 p.m.•200 views

CVE-2021-26899

Windows UPnP Device Host Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00436EPSS

CVE•added 2015/09/09 12:59 a.m.•199 views

CVE-2015-2518

6.9CVSS8.5AI score0.36682EPSS

CVE•added 2020/02/11 10:15 p.m.•199 views

CVE-2020-0668

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0669, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672.

7.8CVSS7.7AI score0.80077EPSS

CVE•added 2022/04/15 7:15 p.m.•199 views

CVE-2022-22008

Windows Hyper-V Remote Code Execution Vulnerability

7.8CVSS8.8AI score0.00156EPSS

CVE•added 2022/05/10 9:15 p.m.•199 views

CVE-2022-26913

Windows Authentication Information Disclosure Vulnerability

7.4CVSS8.2AI score0.05154EPSS

CVE•added 2022/05/10 9:15 p.m.•199 views

CVE-2022-29126

Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability

7CVSS8.1AI score0.00421EPSS

CVE•added 2015/09/09 12:59 a.m.•198 views

CVE-2015-2511

6.9CVSS8.5AI score0.36682EPSS

CVE•added 2022/01/11 9:15 p.m.•198 views

CVE-2022-21893

Remote Desktop Protocol Remote Code Execution Vulnerability

8.5CVSS8.9AI score0.05377EPSS

CVE•added 2022/08/09 8:15 p.m.•198 views

CVE-2022-35769

Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability

7.5CVSS8.4AI score0.15775EPSS

CVE•added 2022/12/13 7:15 p.m.•198 views

CVE-2022-44707

Windows Kernel Denial of Service Vulnerability

6.5CVSS7AI score0.02836EPSS

CVE•added 2016/08/09 9:59 p.m.•197 views

CVE-2016-3310

The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privi...

7.8CVSS7.5AI score0.51566EPSS

CVE•added 2020/12/10 12:15 a.m.•197 views

CVE-2020-17096

Windows NTFS Remote Code Execution Vulnerability

9CVSS8AI score0.08663EPSS

CVE•added 2022/05/10 9:15 p.m.•197 views

CVE-2022-29132

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00205EPSS

CVE•added 2021/07/16 9:15 p.m.•196 views

CVE-2021-34460

Storage Spaces Controller Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00317EPSS

CVE•added 2021/09/15 12:15 p.m.•196 views

CVE-2021-38671

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8AI score0.0043EPSS

CVE•added 2022/08/09 8:15 p.m.•196 views

CVE-2022-34704

Windows Defender Credential Guard Information Disclosure Vulnerability

4.7CVSS6.5AI score0.0173EPSS

CVE•added 2022/08/09 8:15 p.m.•196 views

CVE-2022-35792

Storage Spaces Direct Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.01488EPSS

CVE•added 2022/05/10 9:15 p.m.•195 views

CVE-2022-22713

Windows Hyper-V Denial of Service Vulnerability

5.6CVSS7.3AI score0.00272EPSS

CVE•added 2022/03/09 5:15 p.m.•195 views

CVE-2022-23297

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00325EPSS

CVE•added 2022/01/11 9:15 p.m.•194 views

CVE-2022-21874

Windows Security Center API Remote Code Execution Vulnerability

10CVSS8.9AI score0.03287EPSS

CVE•added 2022/04/15 7:15 p.m.•193 views

CVE-2022-26831

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

7.5CVSS8.4AI score0.14047EPSS

CVE•added 2019/07/15 7:15 p.m.•192 views

CVE-2019-1089

An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request. To exploit this vulnerability, a low level authenticated attacker could run a specially crafted application. The security update addresses this vulnerability by corr...

7.8CVSS7.5AI score0.03914EPSS

CVE•added 2022/04/15 7:15 p.m.•192 views

CVE-2022-26919

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

9.3CVSS9AI score0.04136EPSS

CVE•added 2022/07/12 11:15 p.m.•192 views

CVE-2022-30226

Windows Print Spooler Elevation of Privilege Vulnerability

7.1CVSS7.7AI score0.00198EPSS

CVE•added 2022/09/13 7:15 p.m.•190 views

CVE-2022-34718

Windows TCP/IP Remote Code Execution Vulnerability

9.8CVSS9.7AI score0.84756EPSS

CVE•added 2019/03/06 12:0 a.m.•189 views

CVE-2019-0630

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0633.

9CVSS9.3AI score0.33738EPSS

CVE•added 2021/08/12 6:15 p.m.•189 views

CVE-2021-34480

Scripting Engine Memory Corruption Vulnerability

8.8CVSS7.8AI score0.01736EPSS

CVE•added 2022/08/26 6:15 p.m.•189 views

CVE-2022-34303

A flaw was found in Eurosoft bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use wi...

6.7CVSS8.2AI score0.00077EPSS

CVE•added 2022/08/09 8:15 p.m.•189 views

CVE-2022-34709

Windows Defender Credential Guard Security Feature Bypass Vulnerability

6CVSS7.5AI score0.01303EPSS

CVE•added 2022/10/11 7:15 p.m.•189 views

CVE-2022-37991

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00899EPSS

CVE•added 2019/07/15 7:15 p.m.•188 views

CVE-2019-1088

An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1086, CVE-2019-1087.

7.8CVSS7.6AI score0.00278EPSS

CVE•added 2022/05/10 9:15 p.m.•188 views

CVE-2022-29129

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

9CVSS9.4AI score0.13617EPSS

CVE•added 2022/08/09 8:15 p.m.•188 views

CVE-2022-35766

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS9AI score0.00171EPSS

CVE•added 2021/02/25 11:15 p.m.•187 views

CVE-2021-24086

Windows TCP/IP Denial of Service Vulnerability