Windows 10@1909 Security Vulnerabilities and Issues — Page 6 of Windows 10@1909 CVE List

An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The sec...

7.8CVSS8.1AI score0.00936EPSS

CVE•added 2020/08/17 7:15 p.m.•140 views

CVE-2020-1561

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system.To exploit the vulnerability, a user would have to open a specially crafted f...

9.3CVSS8.2AI score0.15375EPSS

CVE•added 2022/01/11 9:15 p.m.•140 views

CVE-2022-21851

Remote Desktop Client Remote Code Execution Vulnerability

9.3CVSS9.3AI score0.07726EPSS

CVE•added 2022/02/09 5:15 p.m.•140 views

CVE-2022-21997

Windows Print Spooler Elevation of Privilege Vulnerability

7.1CVSS7.2AI score0.00305EPSS

CVE•added 2020/08/17 7:15 p.m.•139 views

CVE-2020-1585

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or cre...

8.8CVSS8.8AI score0.1665EPSS

CVE•added 2021/07/16 9:15 p.m.•139 views

CVE-2021-34455

Windows File History Service Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00164EPSS

CVE•added 2021/07/16 9:15 p.m.•139 views

CVE-2021-34462

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00301EPSS

CVE•added 2021/07/14 6:15 p.m.•139 views

CVE-2021-34492

Windows Certificate Spoofing Vulnerability

8.1CVSS8.3AI score0.01074EPSS

CVE•added 2021/07/14 6:15 p.m.•139 views

CVE-2021-34497

Windows MSHTML Platform Remote Code Execution Vulnerability

8.8CVSS7.7AI score0.01697EPSS

CVE•added 2022/01/11 9:15 p.m.•139 views

CVE-2022-21906

Windows Defender Application Control Security Feature Bypass Vulnerability

5.5CVSS7.2AI score0.0091EPSS

CVE•added 2022/03/09 5:15 p.m.•139 views

CVE-2022-23298

Windows NT OS Kernel Elevation of Privilege Vulnerability

7CVSS7.7AI score0.00356EPSS

CVE•added 2022/04/15 7:15 p.m.•139 views

CVE-2022-26828

Windows Bluetooth Driver Elevation of Privilege Vulnerability

7CVSS8.1AI score0.00129EPSS

CVE•added 2020/01/14 11:15 p.m.•138 views

CVE-2020-0625

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628...

7.8CVSS7.7AI score0.00511EPSS

CVE•added 2020/02/11 10:15 p.m.•138 views

CVE-2020-0738

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'.

9.3CVSS8.6AI score0.21773EPSS

CVE•added 2020/04/15 3:15 p.m.•138 views

CVE-2020-1015

An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1011.

7.8CVSS7.8AI score0.08877EPSS

CVE•added 2021/08/12 6:15 p.m.•138 views

CVE-2021-36933

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

7.5CVSS8.3AI score0.10619EPSS

CVE•added 2022/02/09 5:15 p.m.•138 views

CVE-2022-22001

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00389EPSS

CVE•added 2022/05/10 9:15 p.m.•138 views

CVE-2022-29137

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

8.8CVSS9.4AI score0.0999EPSS

CVE•added 2020/06/09 8:15 p.m.•137 views

CVE-2020-1313

An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'.

7.8CVSS7.7AI score0.90516EPSS

CVE•added 2020/08/17 7:15 p.m.•137 views

CVE-2020-1518

An elevation of privilege vulnerability exists when the Windows File Server Resource Management Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate...

7.8CVSS8.6AI score0.00514EPSS

CVE•added 2021/09/15 12:15 p.m.•137 views

CVE-2021-36965

Windows WLAN AutoConfig Service Remote Code Execution Vulnerability

9.8CVSS6.7AI score0.01104EPSS

CVE•added 2022/01/11 9:15 p.m.•137 views

CVE-2022-21848

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

7.5CVSS7.9AI score0.08945EPSS

CVE•added 2022/01/11 9:15 p.m.•137 views

CVE-2022-21863

Windows StateRepository API Server file Elevation of Privilege Vulnerability

7CVSS8.1AI score0.00559EPSS

CVE•added 2022/01/11 9:15 p.m.•137 views

CVE-2022-21889

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

7.5CVSS8.2AI score0.10382EPSS

CVE•added 2022/04/15 7:15 p.m.•137 views

CVE-2022-24487

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.05562EPSS

CVE•added 2022/04/15 7:15 p.m.•137 views

CVE-2022-26827

Windows File Server Resource Management Service Elevation of Privilege Vulnerability

7CVSS8.1AI score0.00149EPSS

CVE•added 2020/10/16 11:15 p.m.•136 views

CVE-2020-16887

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker coul...

7.8CVSS8.1AI score0.00717EPSS

CVE•added 2020/10/16 11:15 p.m.•136 views

CVE-2020-16924

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

9.3CVSS8.3AI score0.10395EPSS

CVE•added 2020/12/10 12:15 a.m.•136 views

CVE-2020-17136

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.79839EPSS

CVE•added 2021/05/11 7:15 p.m.•136 views

CVE-2021-31193

Windows SSDP Service Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00383EPSS

CVE•added 2022/01/11 9:15 p.m.•136 views

CVE-2022-21897

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00632EPSS

CVE•added 2022/05/10 9:15 p.m.•136 views

CVE-2022-29121

Windows WLAN AutoConfig Service Denial of Service Vulnerability

6.5CVSS7.8AI score0.00409EPSS

CVE•added 2020/10/16 11:15 p.m.•135 views

CVE-2020-16940

An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles junction points. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context.To exploit this vulnerability, an attacker would first h...

7.8CVSS8AI score0.00507EPSS

CVE•added 2021/04/13 8:15 p.m.•135 views

CVE-2021-28353

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2021/07/16 9:15 p.m.•135 views

CVE-2021-34454

Windows Remote Access Connection Manager Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00437EPSS

CVE•added 2021/08/12 6:15 p.m.•135 views

CVE-2021-34530

Windows Graphics Component Remote Code Execution Vulnerability