Windows 10 Security Vulnerabilities and Issues — Page 7 of Windows 10 CVE List

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

9.3CVSS8.8AI score0.09677EPSS

CVE•added 2019/09/11 10:15 p.m.•170 views

CVE-2019-1244

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1245, CVE-2019-1251.

6.5CVSS6.2AI score0.27638EPSS

CVE•added 2022/07/12 11:15 p.m.•170 views

CVE-2022-22023

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

6.9CVSS7.3AI score0.00399EPSS

CVE•added 2022/04/15 7:15 p.m.•170 views

CVE-2022-26803

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00583EPSS

CVE•added 2022/06/15 10:15 p.m.•170 views

CVE-2022-30151

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

7CVSS7.7AI score0.00326EPSS

CVE•added 2023/01/10 10:15 p.m.•170 views

CVE-2023-21776

Windows Kernel Information Disclosure Vulnerability

5.5CVSS5.5AI score0.00564EPSS

CVE•added 2017/05/12 2:29 p.m.•169 views

CVE-2017-0272

The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to execute remote code by the way it ...

9.3CVSS7.7AI score0.05522EPSS

CVE•added 2022/01/11 9:15 p.m.•169 views

CVE-2022-21859

Windows Accounts Control Elevation of Privilege Vulnerability

7CVSS7.9AI score0.00351EPSS

CVE•added 2022/05/10 9:15 p.m.•169 views

CVE-2022-29141

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

8.8CVSS9.4AI score0.11044EPSS

CVE•added 2022/10/11 7:15 p.m.•169 views

CVE-2022-37987

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.07516EPSS

CVE•added 2018/10/10 1:29 p.m.•168 views

CVE-2018-8413

A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Serve...

9.3CVSS7.9AI score0.51675EPSS

CVE•added 2020/07/14 11:15 p.m.•168 views

CVE-2020-1421

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.

9.3CVSS9.1AI score0.47986EPSS

CVE•added 2021/07/16 9:15 p.m.•168 views

CVE-2021-34446

Windows HTML Platforms Security Feature Bypass Vulnerability

8.8CVSS8AI score0.01423EPSS

CVE•added 2021/07/16 9:15 p.m.•168 views

CVE-2021-34466

Windows Hello Security Feature Bypass Vulnerability

6.1CVSS7AI score0.00343EPSS

CVE•added 2022/01/11 9:15 p.m.•168 views

CVE-2022-21868

Windows Devices Human Interface Elevation of Privilege Vulnerability

7CVSS8.1AI score0.00444EPSS

CVE•added 2022/06/15 10:15 p.m.•168 views

CVE-2022-30146

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

7.5CVSS8.2AI score0.04279EPSS

CVE•added 2022/08/09 8:15 p.m.•168 views

CVE-2022-34707

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00278EPSS

CVE•added 2018/11/14 1:29 a.m.•167 views

CVE-2018-8407

An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, aka "MSRPC Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Wi...

5.5CVSS6.7AI score0.0069EPSS

CVE•added 2019/09/11 10:15 p.m.•167 views

CVE-2019-1246

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, CVE-2019-1243, CVE-2019-1247, CVE-2019-1248,...

9.3CVSS8.5AI score0.35463EPSS

CVE•added 2020/10/16 11:15 p.m.•167 views

CVE-2020-16896

An information disclosure vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.T...

7.5CVSS7.6AI score0.1565EPSS

CVE•added 2021/05/11 7:15 p.m.•167 views

CVE-2021-31186

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

7.4CVSS7.6AI score0.1548EPSS

CVE•added 2022/05/10 9:15 p.m.•167 views

CVE-2022-29112

Windows Graphics Component Information Disclosure Vulnerability

6.5CVSS7.6AI score0.16898EPSS

CVE•added 2022/06/15 10:15 p.m.•167 views

CVE-2022-30161

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.09164EPSS

CVE•added 2022/07/12 11:15 p.m.•167 views

CVE-2022-30202

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

7CVSS7.7AI score0.02101EPSS

CVE•added 2022/10/11 7:15 p.m.•167 views

CVE-2022-38042

Active Directory Domain Services Elevation of Privilege Vulnerability

7.1CVSS7.6AI score0.01838EPSS

CVE•added 2020/08/17 7:15 p.m.•166 views

CVE-2020-1492

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights.There are multiple ways an attacke...

7.8CVSS8.1AI score0.14799EPSS

CVE•added 2021/02/25 11:15 p.m.•166 views

CVE-2021-24074

Windows TCP/IP Remote Code Execution Vulnerability

9.8CVSS9.7AI score0.14391EPSS

CVE•added 2021/07/16 9:15 p.m.•166 views

CVE-2021-34447

Windows MSHTML Platform Remote Code Execution Vulnerability

8.8CVSS7.7AI score0.0135EPSS

CVE•added 2022/05/10 9:15 p.m.•166 views

CVE-2022-29128

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

9CVSS9.4AI score0.13405EPSS

CVE•added 2022/07/12 11:15 p.m.•166 views

CVE-2022-30220

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.06438EPSS

CVE•added 2022/08/09 8:15 p.m.•166 views

CVE-2022-35765

Storage Spaces Direct Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.02796EPSS

CVE•added 2023/02/14 8:15 p.m.•166 views

CVE-2023-21817

Windows Kerberos Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00822EPSS

CVE•added 2018/11/14 1:29 a.m.•165 views

CVE-2018-8566

A security feature bypass vulnerability exists when Windows improperly suspends BitLocker Device Encryption, aka "BitLocker Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.

4.6CVSS4.9AI score0.00217EPSS

CVE•added 2022/03/09 5:15 p.m.•165 views

CVE-2022-23283

Windows ALPC Elevation of Privilege Vulnerability

7CVSS7.7AI score0.00118EPSS

CVE•added 2022/05/10 9:15 p.m.•165 views

CVE-2022-26930

Windows Remote Access Connection Manager Information Disclosure Vulnerability

5.5CVSS7.1AI score0.02048EPSS

CVE•added 2022/08/09 8:15 p.m.•165 views

CVE-2022-35762

Storage Spaces Direct Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.02796EPSS

CVE•added 2018/01/04 2:29 p.m.•164 views

CVE-2018-0746

The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memory addresses are handled, aka "Windows Information Disclosure ...

4.7CVSS4.6AI score0.06726EPSS

CVE•added 2021/09/15 12:15 p.m.•164 views

CVE-2021-26435

Windows Scripting Engine Memory Corruption Vulnerability

8.1CVSS7.9AI score0.03809EPSS

CVE•added 2021/12/15 3:15 p.m.•164 views

CVE-2021-43893

Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

7.5CVSS8.5AI score0.06336EPSS

CVE•added 2019/03/06 12:0 a.m.•163 views

CVE-2019-0626

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.

9.8CVSS9.5AI score0.60814EPSS

CVE•added 2019/07/15 7:15 p.m.•163 views

CVE-2019-1071

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1073.

5.5CVSS5.8AI score0.00667EPSS

CVE•added 2020/10/16 11:15 p.m.•163 views

CVE-2020-16949

A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could cause a remote denial of service against a system.Exploitation of the vulnerability requires that a spe...

7.5CVSS4.8AI score0.03814EPSS

CVE•added 2020/11/11 7:15 a.m.•163 views

CVE-2020-17042

Windows Print Spooler Remote Code Execution Vulnerability

9.3CVSS9.3AI score0.17242EPSS

CVE•added 2022/07/12 11:15 p.m.•163 views

CVE-2022-22036

Performance Counters for Windows Elevation of Privilege Vulnerability

7CVSS7.7AI score0.00242EPSS

CVE•added 2022/07/12 11:15 p.m.•163 views

CVE-2022-22037

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability