Microsoft Windows 10 vulnerabilities
2,804 known vulnerabilities affecting microsoft/windows_10.
Total CVEs
2,804
CISA KEV
7
actively exploited
Public exploits
226
Exploited in wild
51
Severity breakdown
CRITICAL68HIGH1906MEDIUM803LOW27
Vulnerabilities
Page 126 of 141
CVE-2019-0814P4MEDIUMCVSS 5.5v1607v1703+3 more2019-04-09
CVE-2019-0814 [MEDIUM] CVE-2019-0814: An information disclosure vulnerability exists when the win32k component improperly provides kernel
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0848.
nvd
CVE-2019-0848P4MEDIUMCVSS 5.5v1607v1703+3 more2019-04-09
CVE-2019-0848 [MEDIUM] CVE-2019-0848: An information disclosure vulnerability exists when the win32k component improperly provides kernel
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0814.
nvd
CVE-2019-0840P4MEDIUMCVSS 5.5v1709v1803+1 more2019-04-09
CVE-2019-0840 [MEDIUM] CVE-2019-0840: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0844.
nvd
CVE-2019-0844P4MEDIUMCVSS 5.5v1607v1703+3 more2019-04-09
CVE-2019-0844 [MEDIUM] CVE-2019-0844: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0840.
nvd
CVE-2021-1699P4MEDIUMCVSS 5.5v20h2v1607+4 more2021-01-12
CVE-2021-1699 [MEDIUM] CVE-2021-1699: Windows (modem.sys) Information Disclosure Vulnerability
Windows (modem.sys) Information Disclosure Vulnerability
nvd
CVE-2019-0837P4MEDIUMCVSS 5.5v1703v1709+1 more2019-04-09
CVE-2019-0837 [MEDIUM] CVE-2019-0837: An information disclosure vulnerability exists when DirectX improperly handles objects in memory, ak
An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulnerability'.
nvd
CVE-2019-0621P4MEDIUMCVSS 5.5v1607v1703+3 more2019-03-05
CVE-2019-0621 [MEDIUM] CVE-2019-0621: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0661, CVE-2019-0663.
nvd
CVE-2022-41090P4MEDIUMCVSS 5.9v20h2v21h1+4 more2022-11-09
CVE-2022-41090 [MEDIUM] CWE-362 CVE-2022-41090: Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
nvd
CVE-2019-0759P4MEDIUMCVSS 5.5v1607v1703+3 more2019-04-09
CVE-2019-0759 [MEDIUM] CVE-2019-0759: An information disclosure vulnerability exists when the Windows Print Spooler does not properly hand
An information disclosure vulnerability exists when the Windows Print Spooler does not properly handle objects in memory, aka 'Windows Print Spooler Information Disclosure Vulnerability'.
nvd
CVE-2019-1216P4MEDIUMCVSS 5.5v1607v17032019-09-11
CVE-2019-1216 [MEDIUM] CWE-200 CVE-2019-1216: An information disclosure vulnerability exists when DirectX improperly handles objects in memory, ak
An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulnerability'.
nvd
CVE-2020-0987P4MEDIUMCVSS 5.5v1607v1709+4 more2020-04-15
CVE-2020-0987 [MEDIUM] CVE-2020-0987: An information disclosure vulnerability exists when the Microsoft Windows Graphics Component imprope
An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0982, CVE-2020-1005.
nvd
CVE-2019-1469P4MEDIUMCVSS 5.5v1607v1709+4 more2019-12-10
CVE-2019-1469 [MEDIUM] CWE-200 CVE-2019-1469: An information disclosure vulnerability exists when the win32k component improperly provides kernel
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
nvd
CVE-2020-1141P4MEDIUMCVSS 5.5v1607v1709+4 more2020-05-21
CVE-2020-1141 [MEDIUM] CVE-2020-1141: An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0963, CVE-2020-1145, CVE-2020-1179.
nvd
CVE-2020-1145P4MEDIUMCVSS 5.5v1903v19092020-05-21
CVE-2020-1145 [MEDIUM] CVE-2020-1145: An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0963, CVE-2020-1141, CVE-2020-1179.
nvd
CVE-2019-0776P4MEDIUMCVSS 5.5v1607v1703+3 more2019-04-09
CVE-2019-0776 [MEDIUM] CVE-2019-0776: An information disclosure vulnerability exists when the win32k component improperly provides kernel
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
nvd
CVE-2019-0782P4MEDIUMCVSS 5.5v1607v1703+3 more2019-04-09
CVE-2019-0782 [MEDIUM] CVE-2019-0782: An information disclosure vulnerability exists when the Windows kernel fails to properly initialize
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0702, CVE-2019-0755, CVE-2019-0767, CVE-2019-0775.
nvd
CVE-2019-0702P4MEDIUMCVSS 5.5v1607v1703+3 more2019-04-09
CVE-2019-0702 [MEDIUM] CVE-2019-0702: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0755, CVE-2019-0767, CVE-2019-0775, CVE-2019-0782.
nvd
CVE-2020-0755P4MEDIUMCVSS 5.5v1607v1709+4 more2020-02-11
CVE-2020-0755 [MEDIUM] CVE-2020-0755: An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service whe
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addresses the vulnerability by correcting how the service handles o
nvd
CVE-2020-0748P4MEDIUMCVSS 5.5v1607v1709+4 more2020-02-11
CVE-2020-0748 [MEDIUM] CVE-2020-0748: An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service whe
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addresses the vulnerability by correcting how the service handles o
nvd
CVE-2020-0677P4MEDIUMCVSS 5.5v1607v1709+4 more2020-02-11
CVE-2020-0677 [MEDIUM] CVE-2020-0677: An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service whe
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addresses the vulnerability by correcting how the service handles o
nvd