Microsoft Windows 10 vulnerabilities
2,804 known vulnerabilities affecting microsoft/windows_10.
Total CVEs
2,804
CISA KEV
7
actively exploited
Public exploits
226
Exploited in wild
51
Severity breakdown
CRITICAL68HIGH1906MEDIUM803LOW27
Vulnerabilities
Page 119 of 141
CVE-2017-8575P4MEDIUMCVSS 5.5v1511v1607+1 more2017-06-29
CVE-2017-8575 [MEDIUM] CWE-200 CVE-2017-8575: The kernel in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authent
The kernel in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application, aka "Microsoft Graphics Component Information Disclosure Vulnerability."
nvd
CVE-2018-8434P4MEDIUMCVSS 5.4v1607v1703+7 more2018-09-13
CVE-2018-8434 [MEDIUM] CWE-20 CVE-2018-8434: An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails
An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Wind
nvd
CVE-2018-8565P4MEDIUMCVSS 5.5v1607v1703+10 more2018-11-14
CVE-2018-8565 [MEDIUM] CWE-200 CVE-2018-8565: An information disclosure vulnerability exists when the win32k component improperly provides kernel
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "Win32k Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Ser
nvd
CVE-2017-0192P4MEDIUMCVSS 4.3v1511v1607+1 more2017-04-12
CVE-2017-0192 [MEDIUM] CWE-200 CVE-2017-0192: The Adobe Type Manager Font Driver (ATMFD.dll) in Microsoft Windows Vista SP2; Windows Server 2008 S
The Adobe Type Manager Font Driver (ATMFD.dll) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold , 1511, 1607, and 1703 allows an attacker to gain sensitive information via a specially crafted document or an untrusted website, aka "ATMFD.
nvd
CVE-2018-8127P4MEDIUMCVSS 5.5v1607v1703+4 more2018-05-09
CVE-2018-8127 [MEDIUM] CWE-200 CVE-2018-8127: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE I
nvd
CVE-2018-8307P4MEDIUMCVSS 5.3v1607v1703+12 more2018-07-11
CVE-2018-8307 [MEDIUM] CVE-2018-8307: A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OL
A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature Bypass Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
nvd
CVE-2022-21877P4MEDIUMCVSS 5.5v20h2v21h1+3 more2022-01-11
CVE-2022-21877 [MEDIUM] CWE-125 CVE-2022-21877: Storage Spaces Controller Information Disclosure Vulnerability
Storage Spaces Controller Information Disclosure Vulnerability
nvd
CVE-2018-8442P4MEDIUMCVSS 5.5v1607v1703+2 more2018-09-13
CVE-2018-8442 [MEDIUM] CVE-2018-8442: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Server
nvd
CVE-2018-8271P4MEDIUMCVSS 5.5v1607v1703+12 more2018-09-13
CVE-2018-8271 [MEDIUM] CWE-200 CVE-2018-8271: An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode dr
An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode driver fails to properly handle objects in memory, aka "Windows Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Serv
nvd
CVE-2018-8443P4MEDIUMCVSS 5.5v1607v1703+2 more2018-09-13
CVE-2018-8443 [MEDIUM] CVE-2018-8443: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Server
nvd
CVE-2018-8446P4MEDIUMCVSS 5.5v1607v1703+2 more2018-09-13
CVE-2018-8446 [MEDIUM] CVE-2018-8446: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Server
nvd
CVE-2016-7295P4MEDIUMCVSS 5.5v1511v16072016-12-20
CVE-2016-7295 [MEDIUM] CWE-200 CVE-2016-7295: The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and
The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to obtain sensitive information from process memory via a crafted application, aka "Windows
nvd
CVE-2017-11765P4MEDIUMCVSS 5.5v1511v1607+1 more2017-10-13
CVE-2017-11765 [MEDIUM] CWE-200 CVE-2017-11765: The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP
The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Windows Kernel Informati
nvd
CVE-2017-11814P4MEDIUMCVSS 5.5v1511v1607+1 more2017-10-13
CVE-2017-11814 [MEDIUM] CVE-2017-11814: The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP
The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Windows Kernel Information Discl
nvd
CVE-2017-8666P4MEDIUMCVSS 5.5v1511v1607+1 more2017-08-08
CVE-2017-8666 [MEDIUM] CWE-200 CVE-2017-8666: Microsoft Win32k in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2
Microsoft Win32k in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly handle objects in memory, aka "Win32k Information Disclosure Vulnerability".
nvd
CVE-2021-31961P4MEDIUMCVSS 6.1v20h2v21h1+3 more2021-07-14
CVE-2021-31961 [MEDIUM] CWE-269 CVE-2021-31961: Windows InstallService Elevation of Privilege Vulnerability
Windows InstallService Elevation of Privilege Vulnerability
nvd
CVE-2018-0960P4MEDIUMCVSS 5.5v1511v1607+2 more2018-04-12
CVE-2018-0960 [MEDIUM] CVE-2018-0960: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Server
nvd
CVE-2018-0887P4MEDIUMCVSS 5.5v1511v1607+12 more2018-04-12
CVE-2018-0887 [MEDIUM] CWE-665 CVE-2018-0887: An information disclosure vulnerability exists when the Windows kernel fails to properly initialize
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, W
nvd
CVE-2019-0554P4MEDIUMCVSS 5.5v1607v1703+3 more2019-01-08
CVE-2019-0554 [MEDIUM] CVE-2019-0554: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows
nvd
CVE-2019-0536P4MEDIUMCVSS 5.5v1607v1703+18 more2019-01-08
CVE-2019-0536 [MEDIUM] CVE-2019-0536: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows
nvd