Microsoft Windows 10 vulnerabilities
2,804 known vulnerabilities affecting microsoft/windows_10.
Total CVEs
2,804
CISA KEV
7
actively exploited
Public exploits
226
Exploited in wild
51
Severity breakdown
CRITICAL68HIGH1906MEDIUM803LOW27
Vulnerabilities
Page 42 of 141
CVE-2022-24534P3HIGHCVSS 7.5v20h2v21h1+4 more2022-04-15
CVE-2022-24534 [HIGH] CVE-2022-24534: Win32 Stream Enumeration Remote Code Execution Vulnerability
Win32 Stream Enumeration Remote Code Execution Vulnerability
nvd
CVE-2016-0018P3HIGHCVSS 7.3v15112016-01-13
CVE-2016-0018 [HIGH] CWE-426 CVE-2016-0018: Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, and Windows 10 Gold and 151
Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability."
nvd
CVE-2022-24547P3HIGHCVSS 7.8v20h2v21h1+4 more2022-04-15
CVE-2022-24547 [HIGH] CVE-2022-24547: Windows Digital Media Receiver Elevation of Privilege Vulnerability
Windows Digital Media Receiver Elevation of Privilege Vulnerability
nvd
CVE-2020-1382P3HIGHCVSS 7.8v1903v1909+1 more2020-07-14
CVE-2020-1382 [HIGH] CVE-2020-1382: An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handle
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1381.
nvd
CVE-2022-44675P3HIGHCVSS 7.8v20h2v21h1+4 more2022-12-13
CVE-2022-44675 [HIGH] CVE-2022-44675: Windows Bluetooth Driver Elevation of Privilege Vulnerability
Windows Bluetooth Driver Elevation of Privilege Vulnerability
nvd
CVE-2019-0877P3HIGHCVSS 7.8v1607v1703+3 more2019-04-09
CVE-2019-0877 [HIGH] CVE-2019-0877: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0847, CVE-2019-0851, CVE-2019-0879.
nvd
CVE-2020-0997P3HIGHCVSS 7.8v1607v1709+5 more2020-09-11
CVE-2020-0997 [HIGH] CWE-787 CVE-2020-0997: <p>A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handle
A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system
nvd
CVE-2020-1051P3HIGHCVSS 7.8v1607v1709+4 more2020-05-21
CVE-2020-1051 [HIGH] CVE-2020-1051: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1174, CVE-2020-1175, CVE-2020-1176.
nvd
CVE-2020-1175P3HIGHCVSS 7.8v1607v1709+4 more2020-05-21
CVE-2020-1175 [HIGH] CVE-2020-1175: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1051, CVE-2020-1174, CVE-2020-1176.
nvd
CVE-2020-1174P3HIGHCVSS 7.8v1607v1709+4 more2020-05-21
CVE-2020-1174 [HIGH] CVE-2020-1174: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1051, CVE-2020-1175, CVE-2020-1176.
nvd
CVE-2020-1176P3HIGHCVSS 7.8v1607v1709+4 more2020-05-21
CVE-2020-1176 [HIGH] CVE-2020-1176: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1051, CVE-2020-1174, CVE-2020-1175.
nvd
CVE-2020-16968P3HIGHCVSS 7.8v1607v1709+5 more2020-10-16
CVE-2020-16968 [HIGH] CWE-20 CVE-2020-16968: <p>A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handle
A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected syste
nvd
CVE-2020-1034P3HIGHCVSS 7.8v1607v1709+5 more2020-09-11
CVE-2020-1034 [HIGH] CVE-2020-1034: <p>An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update addresses the vulnerabili
nvd
CVE-2020-1167P3HIGHCVSS 7.8v1607v1709+5 more2020-10-16
CVE-2020-1167 [HIGH] CWE-20 CVE-2020-1167: <p>A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system.
To exploit the vulnerability, a user would have to open a specially crafted file.
The security update addresses the vulnerability by
nvd
CVE-2022-30147P3HIGHCVSS 7.8v20h2v21h1+3 more2022-06-15
CVE-2022-30147 [HIGH] CVE-2022-30147: Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2019-1223P3HIGHCVSS 7.5v1803v1809+1 more2019-08-14
CVE-2019-1223 [HIGH] CVE-2019-1223: A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects
A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RDP service on the target system to stop responding.
To exploit this vulnerability, an attacker would need to run a speci
nvd
CVE-2022-34699P3HIGHCVSS 7.8v20h2v21h1+3 more2022-08-09
CVE-2022-34699 [HIGH] CWE-269 CVE-2022-34699: Windows Win32k Elevation of Privilege Vulnerability
Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2019-1398P3HIGHCVSS 8.4v1709v1803+2 more2019-11-12
CVE-2019-1398 [HIGH] CVE-2019-1398: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1389, CVE-2019-1397.
nvd
CVE-2021-27095P3HIGHCVSS 7.8v20h2v1607+4 more2021-04-13
CVE-2021-27095 [HIGH] CVE-2021-27095: Windows Media Video Decoder Remote Code Execution Vulnerability
Windows Media Video Decoder Remote Code Execution Vulnerability
nvd
CVE-2018-8206P3HIGHCVSS 7.5v1607v1703+12 more2018-07-11
CVE-2018-8206 [HIGH] CVE-2018-8206: A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP
A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka "Windows FTP Server Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Ser
nvd