Windows 10@2004 Security Vulnerabilities and Issues — Windows 10@2004 CVE List

Lucene search

MicrosoftWindows 102004

915 matches found

CVE•added 2020/11/11 7:15 a.m.•1286 views

CVE-2020-17087

Windows Kernel Local Elevation of Privilege Vulnerability

7.8CVSS8.3AI score0.16195EPSS

In wild

CVE•added 2021/05/11 8:15 p.m.•544 views

CVE-2020-24588

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802...

3.5CVSS6.4AI score0.00344EPSS

CVE•added 2020/06/09 8:15 p.m.•411 views

CVE-2020-1206

An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Information Disclosure Vulnerability'.

7.5CVSS7.4AI score0.47718EPSS

In wild

CVE•added 2021/07/16 9:15 p.m.•358 views

CVE-2021-34481

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or de...

9.8CVSS8.6AI score0.30378EPSS

In wild

CVE•added 2020/07/29 6:15 p.m.•320 views

CVE-2020-15707

Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functionality is not included in GRUB2 upstream), leading to a heap-based buffer overflow. These could be triggered by an extrem...

6.4CVSS7.6AI score0.00033EPSS

CVE•added 2021/01/12 8:15 p.m.•320 views

CVE-2021-1648

Microsoft splwow64 Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00979EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•319 views

CVE-2020-1269

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020...

7.8CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2021/06/08 11:15 p.m.•318 views

CVE-2021-26414

Windows DCOM Server Security Feature Bypass

6.5CVSS6.9AI score0.14238EPSS

CVE•added 2021/07/14 6:15 p.m.•305 views

CVE-2021-34514

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS8.2AI score0.00403EPSS

In wild

CVE•added 2020/07/29 6:15 p.m.•287 views

CVE-2020-15706

GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing, leading to arbitrary code execution and secure boot restriction bypass. This issue affects GRUB2 ...

6.4CVSS7.7AI score0.00064EPSS

CVE•added 2020/07/29 6:15 p.m.•286 views

CVE-2020-15705

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim. Thi...

6.4CVSS7.1AI score0.00024EPSS

CVE•added 2021/09/15 12:15 p.m.•283 views

CVE-2021-38633

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00426EPSS

In wild

CVE•added 2021/09/15 12:15 p.m.•276 views

CVE-2021-36963

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00307EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•268 views

CVE-2020-1307

9.3CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2021/05/11 7:15 p.m.•268 views

CVE-2021-31167

Windows Container Manager Service Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.0033EPSS

In wild

CVE•added 2021/08/12 6:15 p.m.•257 views

CVE-2021-26424

Windows TCP/IP Remote Code Execution Vulnerability

9.9CVSS8.8AI score0.09829EPSS

CVE•added 2020/11/11 7:15 a.m.•256 views

CVE-2020-1599

Windows Spoofing Vulnerability

5.5CVSS7.2AI score0.05733EPSS

In wild

CVE•added 2021/08/12 6:15 p.m.•256 views

CVE-2021-34487

Windows Event Tracing Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00098EPSS

In wild

CVE•added 2021/12/15 3:15 p.m.•252 views

CVE-2021-43217

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

9.8CVSS9.1AI score0.25196EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•248 views

CVE-2020-1274

7.8CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•246 views

CVE-2020-1237

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273,...

7.8CVSS7.8AI score0.19295EPSS

In wild

CVE•added 2020/08/17 7:15 p.m.•246 views

CVE-2020-1337

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs; ...

7.8CVSS7.8AI score0.53476EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•244 views

CVE-2020-1316

7.8CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2020/10/16 11:15 p.m.•244 views

CVE-2020-16916

An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.To exploit this vulnerability, an attacker would first have to log on to the system. An atta...

7.8CVSS8.2AI score0.00744EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•243 views

CVE-2020-1276

7.8CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2021/12/15 3:15 p.m.•242 views

CVE-2021-43883

Windows Installer Elevation of Privilege Vulnerability

7.8CVSS8.7AI score0.08752EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•241 views

CVE-2020-1275

7.8CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•240 views

CVE-2020-1246

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020...

7.8CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•240 views

CVE-2020-1262

7.8CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2021/08/12 6:15 p.m.•240 views

CVE-2021-26432

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

9.8CVSS8.8AI score0.10206EPSS

CVE•added 2020/09/11 5:15 p.m.•236 views

CVE-2020-1013

An elevation of privilege vulnerability exists when Microsoft Windows processes group policy updates. An attacker who successfully exploited this vulnerability could potentially escalate permissions or perform additional privileged actions on the target machine.To exploit this vulnerability, an att...

9.3CVSS8.1AI score0.1795EPSS

CVE•added 2021/01/12 8:15 p.m.•235 views

CVE-2021-1678

Windows Print Spooler Spoofing Vulnerability

8.8CVSS8AI score0.53619EPSS

Web

CVE•added 2020/06/09 8:15 p.m.•234 views

CVE-2020-1266

7.8CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2021/03/11 4:15 p.m.•233 views

CVE-2021-26868

Windows Graphics Component Elevation of Privilege Vulnerability

7.8CVSS8.4AI score0.12212EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•231 views

CVE-2020-1273

7.8CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2021/12/15 3:15 p.m.•229 views

CVE-2021-43226

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.20161EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•227 views

CVE-2020-1264

7.8CVSS7.7AI score0.19295EPSS

In wild

CVE•added 2020/06/09 8:15 p.m.•224 views

CVE-2020-1299

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.

9.3CVSS8.4AI score0.32912EPSS

CVE•added 2020/06/09 8:15 p.m.•223 views

CVE-2020-1301

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'.

8.8CVSS8.5AI score0.34234EPSS

CVE•added 2020/06/09 8:15 p.m.•221 views

CVE-2020-1300

A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an attacker would have to convince a user to either open a specially crafted cabinet file or spoof a network printer and trick a user into installing a malicious ...

8.8CVSS8.3AI score0.40477EPSS

CVE•added 2021/08/12 6:15 p.m.•221 views

CVE-2021-36936

Windows Print Spooler Remote Code Execution Vulnerability

9.8CVSS9AI score0.03552EPSS

CVE•added 2021/12/15 3:15 p.m.•221 views

CVE-2021-43207

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00251EPSS

In wild

CVE•added 2021/05/11 7:15 p.m.•217 views

CVE-2021-28476

Windows Hyper-V Remote Code Execution Vulnerability

9.9CVSS9.7AI score0.63205EPSS

CVE•added 2020/10/16 11:15 p.m.•209 views

CVE-2020-16938

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.To exploit this vulnerability, an attacker would have to log on to ...

5.5CVSS5.5AI score0.10627EPSS

CVE•added 2021/03/11 4:15 p.m.•208 views

CVE-2021-26899

Windows UPnP Device Host Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00436EPSS

In wild

CVE•added 2020/10/16 11:15 p.m.•204 views

CVE-2020-16891

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could caus...

8.8CVSS8.7AI score0.00539EPSS

CVE•added 2021/10/13 1:15 a.m.•204 views

CVE-2021-41335

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00462EPSS

CVE•added 2021/08/12 6:15 p.m.•201 views

CVE-2021-34535

Remote Desktop Client Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.03327EPSS

CVE•added 2020/12/10 12:15 a.m.•197 views

CVE-2020-17096

Windows NTFS Remote Code Execution Vulnerability