Microsoft Windows 10 vulnerabilities
2,804 known vulnerabilities affecting microsoft/windows_10.
Total CVEs
2,804
CISA KEV
7
actively exploited
Public exploits
226
Exploited in wild
51
Severity breakdown
CRITICAL68HIGH1906MEDIUM803LOW27
Vulnerabilities
Page 140 of 141
CVE-2022-35832P4MEDIUMCVSS 5.5v20h2v21h1+3 more2022-09-13
CVE-2022-35832 [MEDIUM] CVE-2022-35832: Windows Event Tracing Denial of Service Vulnerability
Windows Event Tracing Denial of Service Vulnerability
nvd
CVE-2021-28438P4MEDIUMCVSS 5.5v20h2v1803+3 more2021-04-13
CVE-2021-28438 [MEDIUM] CVE-2021-28438: Windows Console Driver Denial of Service Vulnerability
Windows Console Driver Denial of Service Vulnerability
nvd
CVE-2021-31185P4MEDIUMCVSS 5.5v20h2v20042021-05-11
CVE-2021-31185 [MEDIUM] CVE-2021-31185: Windows Desktop Bridge Denial of Service Vulnerability
Windows Desktop Bridge Denial of Service Vulnerability
nvd
CVE-2021-28443P4MEDIUMCVSS 5.5v20h2v1607+4 more2021-04-13
CVE-2021-28443 [MEDIUM] CVE-2021-28443: Windows Console Driver Denial of Service Vulnerability
Windows Console Driver Denial of Service Vulnerability
nvd
CVE-2017-8627P4MEDIUMCVSS 4.7v17032017-08-08
CVE-2017-8627 [MEDIUM] CWE-119 CVE-2017-8627: Windows Subsystem for Linux in Windows 10 1703, allows a denial of service vulnerability due to the
Windows Subsystem for Linux in Windows 10 1703, allows a denial of service vulnerability due to the way it handles objects in memory, aka "Windows Subsystem for Linux Denial of Service Vulnerability".
nvd
CVE-2022-21845P4MEDIUMCVSS 4.7v20h2v21h1+3 more2022-07-12
CVE-2022-21845 [MEDIUM] CVE-2022-21845: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2016-7214P4LOWCVSS 3.3v1511v16072016-11-10
CVE-2016-7214 [LOW] CWE-200 CVE-2016-7214: The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to bypass the ASLR protection mechanism via a crafted application, aka "Win32k Information Disclosure Vulnerabili
nvd
CVE-2020-17046P4MEDIUMCVSS 5.5v20h2v1607+5 more2020-11-11
CVE-2020-17046 [MEDIUM] CVE-2020-17046: Windows Error Reporting Denial of Service Vulnerability
Windows Error Reporting Denial of Service Vulnerability
nvd
CVE-2016-0175P4LOWCVSS 3.3v15112016-05-11
CVE-2016-0175 [LOW] CWE-200 CVE-2016-0175: The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to obtain sensitive information about kernel-object addresses, and consequently bypass the KASLR protection mechanism, via a crafted applicat
nvd
CVE-2022-38030P4MEDIUMCVSS 4.3v20h2v21h1+2 more2022-10-11
CVE-2022-38030 [MEDIUM] CVE-2022-38030: Windows USB Serial Driver Information Disclosure Vulnerability
Windows USB Serial Driver Information Disclosure Vulnerability
nvd
CVE-2018-8481P4LOWCVSS 3.1v1607v1703+15 more2018-10-10
CVE-2018-8481 [LOW] CVE-2018-8481: An information disclosure vulnerability exists when Windows Media Player improperly discloses file i
An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Wi
nvd
CVE-2018-8482P4LOWCVSS 3.1v1607v1703+3 more2018-10-10
CVE-2018-8482 [LOW] CVE-2018-8482: An information disclosure vulnerability exists when Windows Media Player improperly discloses file i
An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Wi
nvd
CVE-2016-3344P4LOWCVSS 3.3v15112016-09-14
CVE-2016-3344 [LOW] CWE-200 CVE-2016-3344: The Secure Kernel Mode feature in Microsoft Windows 10 Gold and 1511 allows local users to obtain se
The Secure Kernel Mode feature in Microsoft Windows 10 Gold and 1511 allows local users to obtain sensitive information via a crafted application, aka "Windows Secure Kernel Mode Information Disclosure Vulnerability."
nvd
CVE-2022-38022P4LOWCVSS 3.3v20h2v21h1+3 more2022-10-11
CVE-2022-38022 [LOW] CVE-2022-38022: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2015-6109P4LOWCVSS 2.1v15112015-11-11
CVE-2015-6109 [LOW] CWE-200 CVE-2015-6109: The kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and
The kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to bypass the KASLR protection mechanism, and consequently discover a driver base address, via a crafted application, aka "Windows Kernel Memory Information Disclosure Vulnerability."
nvd
CVE-2015-6113P4LOWCVSS 2.1v15112015-11-11
CVE-2015-6113 [LOW] CWE-254 CVE-2015-6113: The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows local users to bypass intended filesystem permissions by leveraging Low Integrity access, aka "Windows Kernel Security Feature Bypass Vulnerabil
nvd
CVE-2017-0188P4LOWCVSS 3.3v1511v1607+1 more2017-04-12
CVE-2017-0188 [LOW] CWE-200 CVE-2017-0188: A Win32k information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server
A Win32k information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, ak
nvd
CVE-2017-11850P4LOWCVSS 2.5v1511v1607+2 more2017-11-15
CVE-2017-11850 [LOW] CWE-200 CVE-2017-11850: Microsoft Graphics Component in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold,
Microsoft Graphics Component in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to log on to an affected system and run a specially crafted application due to improper handling of objects in memory, aka "Microsoft Graphics Component
nvd
CVE-2023-21759P4LOWCVSS 3.3v20h2v21h2+1 more2023-01-10
CVE-2023-21759 [LOW] CVE-2023-21759: Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability
Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability
nvd
CVE-2017-0096P4LOWCVSS 2.6v1511v16072017-03-17
CVE-2017-0096 [LOW] CWE-200 CVE-2017-0096: Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1,
Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users to obtain sensitive information from host OS memory via a crafted application, aka "Hyper-V Information Disclosure Vulnerability."
nvd