Microsoft Windows 10 vulnerabilities
2,804 known vulnerabilities affecting microsoft/windows_10.
Total CVEs
2,804
CISA KEV
7
actively exploited
Public exploits
226
Exploited in wild
51
Severity breakdown
CRITICAL68HIGH1906MEDIUM803LOW27
Vulnerabilities
Page 28 of 141
CVE-2020-0910P3HIGHCVSS 8.4v1809v1903+1 more2020-04-15
CVE-2020-0910 [HIGH] CWE-20 CVE-2020-0910: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'.
nvd
CVE-2019-0720P3HIGHCVSS 8.0v1607v1703+3 more2019-08-14
CVE-2019-0720 [HIGH] CWE-20 CVE-2019-0720: A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fa
A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to exe
nvd
CVE-2022-34691P3HIGHCVSS 8.8v20h2v21h1+2 more2022-08-09
CVE-2022-34691 [HIGH] CWE-269 CVE-2022-34691: Active Directory Domain Services Elevation of Privilege Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
nvd
CVE-2021-41342P3HIGHCVSS 8.8v20h2v21h1+4 more2021-10-13
CVE-2021-41342 [HIGH] CVE-2021-41342: Windows MSHTML Platform Remote Code Execution Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2022-38040P3HIGHCVSS 8.8v20h2v21h1+3 more2022-10-11
CVE-2022-38040 [HIGH] CVE-2022-38040: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2020-0681P3HIGHCVSS 7.5v1607v1709+4 more2020-02-11
CVE-2020-0681 [HIGH] CVE-2020-0681: A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connec
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0734.
nvd
CVE-2020-16891P3HIGHCVSS 8.8v1607v1709+5 more2020-10-16
CVE-2020-16891 [HIGH] CWE-20 CVE-2020-16891: <p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to prope
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrar
nvd
CVE-2018-0968P4MEDIUMCVSS 5.5PoCv1511v1607+2 more2018-04-12
CVE-2018-0968 [MEDIUM] CVE-2018-0968: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Win
nvd
CVE-2018-0969P4MEDIUMCVSS 5.5PoCv1511v1607+2 more2018-04-12
CVE-2018-0969 [MEDIUM] CVE-2018-0969: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 20
nvd
CVE-2018-0972P4MEDIUMCVSS 5.5PoCv1511v1607+2 more2018-04-12
CVE-2018-0972 [MEDIUM] CVE-2018-0972: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 20
nvd
CVE-2018-0970P4MEDIUMCVSS 5.5PoCv1511v1607+2 more2018-04-12
CVE-2018-0970 [MEDIUM] CVE-2018-0970: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 20
nvd
CVE-2018-0971P4MEDIUMCVSS 5.5PoCv1511v1607+2 more2018-04-12
CVE-2018-0971 [MEDIUM] CVE-2018-0971: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 20
nvd
CVE-2018-0973P4MEDIUMCVSS 5.5PoCv1511v1607+2 more2018-04-12
CVE-2018-0973 [MEDIUM] CVE-2018-0973: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 20
nvd
CVE-2018-0974P4MEDIUMCVSS 5.5PoCv1511v1607+2 more2018-04-12
CVE-2018-0974 [MEDIUM] CVE-2018-0974: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 20
nvd
CVE-2017-0299P4MEDIUMCVSS 5.0PoCv1511v1607+1 more2017-06-15
CVE-2017-0299 [MEDIUM] CVE-2017-0299: The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serv
The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Windows Kernel Information Disclosure Vulnerability," a different vu
nvd
CVE-2018-0975P4MEDIUMCVSS 5.5PoCv1511v1607+2 more2018-04-12
CVE-2018-0975 [MEDIUM] CVE-2018-0975: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 20
nvd
CVE-2017-11785P4MEDIUMCVSS 5.5PoCv1511v1607+1 more2017-10-13
CVE-2017-11785 [MEDIUM] CVE-2017-11785: The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP
The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Windows Kernel Information Discl
nvd
CVE-2017-8564P4MEDIUMCVSS 5.5PoCv1511v1607+1 more2017-07-11
CVE-2017-8564 [MEDIUM] CWE-200 CVE-2017-8564: Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows
Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulne
nvd
CVE-2019-0598P3HIGHCVSS 7.8v1607v1703+3 more2019-03-05
CVE-2019-0598 [HIGH] CVE-2019-0598: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0599, CVE-2019-0625.
nvd
CVE-2019-0599P3HIGHCVSS 7.8v1607v1703+3 more2019-03-05
CVE-2019-0599 [HIGH] CVE-2019-0599: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0625.
nvd