cbcvebase.

Microsoft Windows 10 vulnerabilities

2,805 known vulnerabilities affecting microsoft/windows_10.

Total CVEs
2,805
CISA KEV
7
actively exploited
Public exploits
226
Exploited in wild
52
Severity breakdown
CRITICAL68HIGH1906MEDIUM804LOW27

Vulnerabilities

Page 29 of 141
CVE-2020-16891P3HIGHCVSS 8.8v1607v1709+5 more2020-10-16
CVE-2020-16891 [HIGH] CWE-20 CVE-2020-16891: <p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to prope A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrar
nvd
CVE-2018-0968P4MEDIUMCVSS 5.5PoCv1511v1607+2 more2018-04-12
CVE-2018-0968 [MEDIUM] CVE-2018-0968: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Win
nvd
CVE-2017-0299P4MEDIUMCVSS 5.0PoCv1511v1607+1 more2017-06-15
CVE-2017-0299 [MEDIUM] CVE-2017-0299: The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serv The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Windows Kernel Information Disclosure Vulnerability," a different vu
nvd
CVE-2022-34714P3HIGHCVSS 8.1v20h2v21h1+3 more2022-08-09
CVE-2022-34714 [HIGH] CWE-94 CVE-2022-34714: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-41081P3HIGHCVSS 8.1v20h2v21h1+3 more2022-10-11
CVE-2022-41081 [HIGH] CVE-2022-41081: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2018-0969P4MEDIUMCVSS 5.5PoCv1511v1607+2 more2018-04-12
CVE-2018-0969 [MEDIUM] CVE-2018-0969: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 20
nvd
CVE-2018-0972P4MEDIUMCVSS 5.5PoCv1511v1607+2 more2018-04-12
CVE-2018-0972 [MEDIUM] CVE-2018-0972: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 20
nvd
CVE-2018-0970P4MEDIUMCVSS 5.5PoCv1511v1607+2 more2018-04-12
CVE-2018-0970 [MEDIUM] CVE-2018-0970: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 20
nvd
CVE-2018-0971P4MEDIUMCVSS 5.5PoCv1511v1607+2 more2018-04-12
CVE-2018-0971 [MEDIUM] CVE-2018-0971: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 20
nvd
CVE-2018-0973P4MEDIUMCVSS 5.5PoCv1511v1607+2 more2018-04-12
CVE-2018-0973 [MEDIUM] CVE-2018-0973: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 20
nvd
CVE-2018-0974P4MEDIUMCVSS 5.5PoCv1511v1607+2 more2018-04-12
CVE-2018-0974 [MEDIUM] CVE-2018-0974: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 20
nvd
CVE-2020-1118P3HIGHCVSS 7.5v1709v1803+3 more2020-05-21
CVE-2020-1118 [HIGH] CVE-2020-1118: A denial of service vulnerability exists in the Windows implementation of Transport Layer Security ( A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain key exchanges. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, a remote unauthenticated attacker could send a specially crafted request
nvd
CVE-2019-0885P3HIGHCVSS 7.8v1607v1703+4 more2019-05-16
CVE-2019-0885 [HIGH] CWE-20 CVE-2019-0885: A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate u A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.
nvd
CVE-2019-1344P4MEDIUMCVSS 5.5PoCv1607v1703+4 more2019-10-10
CVE-2019-1344 [MEDIUM] CWE-125 CVE-2019-1344: An information disclosure vulnerability exists in the way that the Windows Code Integrity Module han An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows Code Integrity Module Information Disclosure Vulnerability'.
nvd
CVE-2019-1345P4MEDIUMCVSS 5.5PoCv1607v1709+3 more2019-10-10
CVE-2019-1345 [MEDIUM] CVE-2019-1345: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1334.
nvd
CVE-2018-0975P4MEDIUMCVSS 5.5PoCv1511v1607+2 more2018-04-12
CVE-2018-0975 [MEDIUM] CVE-2018-0975: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 20
nvd
CVE-2019-0598P3HIGHCVSS 7.8v1607v1703+3 more2019-03-05
CVE-2019-0598 [HIGH] CVE-2019-0598: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0599, CVE-2019-0625.
nvd
CVE-2019-0599P3HIGHCVSS 7.8v1607v1703+3 more2019-03-05
CVE-2019-0599 [HIGH] CVE-2019-0599: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0625.
nvd
CVE-2019-0889P3HIGHCVSS 7.8v1607v1703+4 more2019-05-16
CVE-2019-0889 [HIGH] CVE-2019-0889: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895, CVE-2019-0896, CVE-2019-0897, CVE-2019-0898, CVE-2019-0899, CVE-2019-0900, CVE
nvd
CVE-2019-0899P3HIGHCVSS 7.8v1607v1703+4 more2019-05-16
CVE-2019-0899 [HIGH] CVE-2019-0899: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895, CVE-2019-0896, CVE-2019-0897, CVE-2019-0898, CVE-2019-0900, CVE
nvd
Microsoft Windows 10 vulnerabilities | cvebase