Microsoft Windows 10 vulnerabilities
2,805 known vulnerabilities affecting microsoft/windows_10.
Total CVEs
2,805
CISA KEV
7
actively exploited
Public exploits
226
Exploited in wild
52
Severity breakdown
CRITICAL68HIGH1906MEDIUM804LOW27
Vulnerabilities
Page 141 of 141
CVE-2017-0096P4LOWCVSS 2.6v1511v16072017-03-17
CVE-2017-0096 [LOW] CWE-200 CVE-2017-0096: Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1,
Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users to obtain sensitive information from host OS memory via a crafted application, aka "Hyper-V Information Disclosure Vulnerability."
nvd
CVE-2019-1418P4LOWCVSS 3.3v1607v1709+3 more2019-11-12
CVE-2019-1418 [LOW] CWE-200 CVE-2019-1418: An information vulnerability exists when Windows Modules Installer Service improperly discloses file
An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'.
nvd
CVE-2019-1488P4LOWCVSS 3.3v1607v1709+4 more2019-12-10
CVE-2019-1488 [LOW] CVE-2019-1488: A security feature bypass vulnerability exists when Microsoft Defender improperly handles specific b
A security feature bypass vulnerability exists when Microsoft Defender improperly handles specific buffers, aka 'Microsoft Defender Security Feature Bypass Vulnerability'.
nvd
CVE-2022-21977P4LOWCVSS 3.3v20h2v21h1+4 more2022-03-09
CVE-2022-21977 [LOW] CVE-2022-21977: Media Foundation Information Disclosure Vulnerability
Media Foundation Information Disclosure Vulnerability
nvd
CVE-2020-1592P4LOWCVSS 3.3v1803v1809+3 more2020-09-11
CVE-2020-1592 [LOW] CWE-665 CVE-2020-1592: <p>An information disclosure vulnerability exists when the Windows kernel improperly initializes obj
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.
To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.
The update addresse
nvd
← Previous141 / 141