Microsoft Windows 10 vulnerabilities
2,804 known vulnerabilities affecting microsoft/windows_10.
Total CVEs
2,804
CISA KEV
7
actively exploited
Public exploits
226
Exploited in wild
51
Severity breakdown
CRITICAL68HIGH1906MEDIUM803LOW27
Vulnerabilities
Page 132 of 141
CVE-2022-24493P4MEDIUMCVSS 5.5v20h2v21h1+4 more2022-04-15
CVE-2022-24493 [MEDIUM] CVE-2022-24493: Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
nvd
CVE-2021-34457P4MEDIUMCVSS 5.5v20h2v21h1+4 more2021-07-16
CVE-2021-34457 [MEDIUM] CVE-2021-34457: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2021-34454P4MEDIUMCVSS 5.5v20h2v21h1+4 more2021-07-16
CVE-2021-34454 [MEDIUM] CVE-2021-34454: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2021-33763P4MEDIUMCVSS 5.5v20h2v21h1+4 more2021-07-14
CVE-2021-33763 [MEDIUM] CVE-2021-33763: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2021-31191P4MEDIUMCVSS 5.5v20h2v1803+4 more2021-05-11
CVE-2021-31191 [MEDIUM] CVE-2021-31191: Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
nvd
CVE-2021-38636P4MEDIUMCVSS 5.5v20h2v21h1+4 more2021-09-15
CVE-2021-38636 [MEDIUM] CVE-2021-38636: Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
nvd
CVE-2021-38635P4MEDIUMCVSS 5.5v20h2v21h1+4 more2021-09-15
CVE-2021-38635 [MEDIUM] CVE-2021-38635: Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
nvd
CVE-2021-36969P4MEDIUMCVSS 5.5v20h2v21h1+4 more2021-09-15
CVE-2021-36969 [MEDIUM] CVE-2021-36969: Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
nvd
CVE-2021-40475P4MEDIUMCVSS 5.5v20h2v21h1+3 more2021-10-13
CVE-2021-40475 [MEDIUM] CVE-2021-40475: Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
nvd
CVE-2022-38043P4MEDIUMCVSS 5.5v20h2v21h1+3 more2022-10-11
CVE-2022-38043 [MEDIUM] CVE-2022-38043: Windows Security Support Provider Interface Information Disclosure Vulnerability
Windows Security Support Provider Interface Information Disclosure Vulnerability
nvd
CVE-2022-37996P4MEDIUMCVSS 5.5v20h2v21h1+3 more2022-10-11
CVE-2022-37996 [MEDIUM] CVE-2022-37996: Windows Kernel Memory Information Disclosure Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability
nvd
CVE-2022-44674P4MEDIUMCVSS 5.5v20h2v21h1+4 more2022-12-13
CVE-2022-44674 [MEDIUM] CVE-2022-44674: Windows Bluetooth Driver Information Disclosure Vulnerability
Windows Bluetooth Driver Information Disclosure Vulnerability
nvd
CVE-2023-21697P4MEDIUMCVSS 5.5fixed in 10.0.10240.197472023-02-14
CVE-2023-21697 [MEDIUM] CWE-126 CVE-2023-21697: Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability
Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability
nvd
CVE-2020-1596P4MEDIUMCVSS 5.3v1607v1709+5 more2020-09-11
CVE-2020-1596 [MEDIUM] CWE-327 CVE-2020-1596: <p>A information disclosure vulnerability exists when TLS components use weak hash algorithms. An at
A information disclosure vulnerability exists when TLS components use weak hash algorithms. An attacker who successfully exploited this vulnerability could obtain information to further compromise a users's encrypted transmission channel.
To exploit the vulnerability, an attacker would have to conduct a man-in-the-middle attack.
The update addresses t
nvd
CVE-2017-8486P4MEDIUMCVSS 4.7v1511v1607+1 more2017-07-11
CVE-2017-8486 [MEDIUM] CWE-200 CVE-2017-8486: Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an information disclosure due to the way it handles objects in memory, aka "Win32k Information Disclosure Vulnerability".
nvd
CVE-2017-11842P4MEDIUMCVSS 4.7v1511v1607+2 more2017-11-15
CVE-2017-11842 [MEDIUM] CWE-200 CVE-2017-11842: Windows kernel in Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and
Windows kernel in Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windows kernel improperly initializing a memory address, aka "Windows Kernel Information Disclosure Vulnerabil
nvd
CVE-2017-11880P4MEDIUMCVSS 4.7v1511v1607+2 more2017-11-15
CVE-2017-11880 [MEDIUM] CVE-2017-11880: Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows
Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to run a specially crafted application and obtain information to further compromise the user's system due to the Windows kernel improperly initializing obje
nvd
CVE-2017-11849P4MEDIUMCVSS 4.7v1511v1607+2 more2017-11-15
CVE-2017-11849 [MEDIUM] CVE-2017-11849: Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Server
Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windows kernel improperly initializing a memory address, aka "Window
nvd
CVE-2017-11817P4MEDIUMCVSS 4.7v1511v1607+1 more2017-10-13
CVE-2017-11817 [MEDIUM] CWE-200 CVE-2017-11817: The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP
The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability when it improperly validates objects in memory, aka "Windows Information Di
nvd
CVE-2018-8201P4MEDIUMCVSS 4.5v1607v1703+12 more2018-06-14
CVE-2018-8201 [MEDIUM] CVE-2018-8201: A security feature bypass vulnerability exists in Device Guard that could allow an attacker to injec
A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8211, CVE-2018-8212, CVE-20
nvd