Microsoft Windows 10 vulnerabilities
2,804 known vulnerabilities affecting microsoft/windows_10.
Total CVEs
2,804
CISA KEV
7
actively exploited
Public exploits
216
Exploited in wild
26
Severity breakdown
CRITICAL68HIGH1907MEDIUM802LOW27
Vulnerabilities
Page 124 of 141
CVE-2017-8633HIGHCVSS 7.5v1511v1607+1 more2017-08-08
CVE-2017-8633 [HIGH] CWE-863 CVE-2017-8633: Windows Error Reporting (WER) in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Win
Windows Error Reporting (WER) in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability, aka "Windows Error Reporting Elevation of Privilege Vulnerability".
nvd
CVE-2017-8593HIGHCVSS 7.0v1511v1607+1 more2017-08-08
CVE-2017-8593 [HIGH] CWE-281 CVE-2017-8593: Microsoft Win32k in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2
Microsoft Win32k in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability".
nvd
CVE-2017-0293HIGHCVSS 7.5v1511v1607+1 more2017-08-08
CVE-2017-0293 [HIGH] CWE-119 CVE-2017-0293: Microsoft Windows PDF Library in Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold a
Microsoft Windows PDF Library in Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability when it improperly handles objects in memory, aka "Windows PDF Remote Code Execution Vulnerability".
nvd
CVE-2017-8623MEDIUMCVSS 6.8v1607v17032017-08-08
CVE-2017-8623 [MEDIUM] CWE-20 CVE-2017-8623: Windows Hyper-V in Windows 10 1607, 1703, and Windows Server 2016 allows a denial of service vulnera
Windows Hyper-V in Windows 10 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it fails to properly validate input from a privileged user on a guest operating system, aka "Windows Hyper-V Denial of Service Vulnerability".
nvd
CVE-2017-0174MEDIUMCVSS 6.5v1511v1607+1 more2017-08-08
CVE-2017-0174 [MEDIUM] CVE-2017-0174: Windows NetBIOS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 20
Windows NetBIOS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it improperly handles NetBIOS packets, aka "Windows NetBIOS Denial of Service Vulnerability".
nvd
CVE-2017-8627MEDIUMCVSS 4.7v17032017-08-08
CVE-2017-8627 [MEDIUM] CWE-119 CVE-2017-8627: Windows Subsystem for Linux in Windows 10 1703, allows a denial of service vulnerability due to the
Windows Subsystem for Linux in Windows 10 1703, allows a denial of service vulnerability due to the way it handles objects in memory, aka "Windows Subsystem for Linux Denial of Service Vulnerability".
nvd
CVE-2017-8666MEDIUMCVSS 5.5v1511v1607+1 more2017-08-08
CVE-2017-8666 [MEDIUM] CWE-200 CVE-2017-8666: Microsoft Win32k in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2
Microsoft Win32k in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly handle objects in memory, aka "Win32k Information Disclosure Vulnerability".
nvd
CVE-2017-8673MEDIUMCVSS 5.9v17032017-08-08
CVE-2017-8673 [MEDIUM] CVE-2017-8673: The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 10 1703 allows an attacker to
The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 10 1703 allows an attacker to connect to a target system using RDP and send specially crafted requests, aka "Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability."
nvd
CVE-2017-8589CRITICALCVSS 9.8v1511v1607+1 more2017-07-11
CVE-2017-8589 [CRITICAL] CWE-281 CVE-2017-8589: Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way that Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability".
nvd
CVE-2017-8588HIGHCVSS 7.0v1511v1607+1 more2017-07-11
CVE-2017-8588 [HIGH] CVE-2017-8588: Microsoft WordPad in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server
Microsoft WordPad in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it parses specially crafted files, aka "WordPad Remote Code Execution Vulnerability".
nvd
CVE-2017-8574HIGHCVSS 7.0v1607v17032017-07-11
CVE-2017-8574 [HIGH] CVE-2017-8574: Graphics in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an elevation of privileg
Graphics in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Microsoft Graphics Component Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8573 and CVE-2017-8556.
nvd
CVE-2017-8563HIGHCVSS 8.1v1511v1607+1 more2017-07-11
CVE-2017-8563 [HIGH] CWE-281 CVE-2017-8563: Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Kerberos falling back to NT LAN Manager (NTLM) Authentication Protocol as the default authentication protocol, aka "Windo
nvd
CVE-2017-8561HIGHCVSS 7.0v1511v1607+1 more2017-07-11
CVE-2017-8561 [HIGH] CWE-281 CVE-2017-8561: Windows kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10
Windows kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability".
nvd
CVE-2017-8584HIGHCVSS 7.5v16072017-07-11
CVE-2017-8584 [HIGH] CVE-2017-8584: Windows 10 1607 and Windows Server 2016 allow an attacker to execute code remotely via a specially c
Windows 10 1607 and Windows Server 2016 allow an attacker to execute code remotely via a specially crafted WiFi packet aka "HoloLens Remote Code Execution Vulnerability."
nvd
CVE-2017-8562HIGHCVSS 7.0v1511v1607+1 more2017-07-11
CVE-2017-8562 [HIGH] CWE-281 CVE-2017-8562: Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, a
Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Windows improperly handling calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability".
nvd
CVE-2017-8556HIGHCVSS 7.0v1511v1607+1 more2017-07-11
CVE-2017-8556 [HIGH] CWE-281 CVE-2017-8556: Graphics in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server
Graphics in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Microsoft Graphics Component Elevation of Privilege V
nvd
CVE-2017-8467HIGHCVSS 7.0v1511v1607+1 more2017-07-11
CVE-2017-8467 [HIGH] CWE-281 CVE-2017-8467: Graphics in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT
Graphics in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Win32k Elevation of Privilege Vulnerability".
nvd
CVE-2017-8566HIGHCVSS 7.0v1607v17032017-07-11
CVE-2017-8566 [HIGH] CWE-20 CVE-2017-8566: Microsoft Windows 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability
Microsoft Windows 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Windows Input Method Editor (IME) improperly handling parameters in a method of a DCOM class, aka "Windows IME Elevation of Privilege Vulnerability".
nvd
CVE-2017-8573HIGHCVSS 7.0v1511v1607+1 more2017-07-11
CVE-2017-8573 [HIGH] CVE-2017-8573: Graphics in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server
Graphics in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Microsoft Graphics Component Elevation of Privilege Vulnerabi
nvd
CVE-2017-8565HIGHCVSS 8.1v1511v1607+1 more2017-07-11
CVE-2017-8565 [HIGH] CVE-2017-8565: Windows PowerShell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server
Windows PowerShell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability when PSObject wraps a CIM Instance, aka "Windows PowerShell Remote Code Execution Vulnerability".
nvd