Microsoft Windows 10 vulnerabilities
2,805 known vulnerabilities affecting microsoft/windows_10.
Total CVEs
2,805
CISA KEV
7
actively exploited
Public exploits
226
Exploited in wild
52
Severity breakdown
CRITICAL68HIGH1906MEDIUM804LOW27
Vulnerabilities
Page 45 of 141
CVE-2021-26415P3HIGHCVSS 7.8v20h2v1607+4 more2021-04-13
CVE-2021-26415 [HIGH] CWE-20 CVE-2021-26415: Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2021-34504P3HIGHCVSS 7.8v20h2v21h1+4 more2021-07-14
CVE-2021-34504 [HIGH] CVE-2021-34504: Windows Address Book Remote Code Execution Vulnerability
Windows Address Book Remote Code Execution Vulnerability
nvd
CVE-2020-1425P3HIGHCVSS 7.8v1709v1803+4 more2020-07-27
CVE-2020-1425 [HIGH] CVE-2020-1425: A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handl
A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1457.
nvd
CVE-2016-3218P3HIGHCVSS 7.8v15112016-06-16
CVE-2016-3218 [HIGH] CWE-264 CVE-2016-3218: The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-322
nvd
CVE-2021-26868P3HIGHCVSS 7.8v20h2v1607+4 more2021-03-11
CVE-2021-26868 [HIGH] CWE-119 CVE-2021-26868: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2016-7246P3HIGHCVSS 7.8v1511v16072016-11-10
CVE-2016-7246 [HIGH] CWE-264 CVE-2016-7246: The kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows
The kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
nvd
CVE-2016-7215P3HIGHCVSS 7.8v1511v16072016-11-10
CVE-2016-7215 [HIGH] CWE-264 CVE-2016-7215: The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
nvd
CVE-2019-1453P3HIGHCVSS 7.5v1607v1709+4 more2019-12-10
CVE-2019-1453 [HIGH] CVE-2019-1453: A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects
A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability'.
nvd
CVE-2021-26861P3HIGHCVSS 7.8v20h2v1607+4 more2021-03-11
CVE-2021-26861 [HIGH] CVE-2021-26861: Windows Graphics Component Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2022-26903P3HIGHCVSS 7.8v20h2v21h1+4 more2022-04-15
CVE-2022-26903 [HIGH] CVE-2022-26903: Windows Graphics Component Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2022-21878P3HIGHCVSS 7.8v20h2v21h1+4 more2022-01-11
CVE-2022-21878 [HIGH] CVE-2022-21878: Windows Geolocation Service Remote Code Execution Vulnerability
Windows Geolocation Service Remote Code Execution Vulnerability
nvd
CVE-2016-3310P3HIGHCVSS 7.8v1511v16072016-08-09
CVE-2016-3310 [HIGH] CVE-2016-3310: The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308
nvd
CVE-2021-1726P3HIGHCVSS 8.0v20h2v1607+4 more2021-02-25
CVE-2021-1726 [HIGH] CVE-2021-1726: Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
nvd
CVE-2022-21992P3HIGHCVSS 7.8v20h2v21h1+4 more2022-02-09
CVE-2022-21992 [HIGH] CVE-2022-21992: Windows Mobile Device Management Remote Code Execution Vulnerability
Windows Mobile Device Management Remote Code Execution Vulnerability
nvd
CVE-2016-0174P3HIGHCVSS 7.8v15112016-05-11
CVE-2016-0174 [HIGH] CVE-2016-0174: The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0171, CVE-2
nvd
CVE-2022-29115P3HIGHCVSS 7.8v20h2v21h1+4 more2022-05-10
CVE-2022-29115 [HIGH] CVE-2022-29115: Windows Fax Service Remote Code Execution Vulnerability
Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2021-27089P3HIGHCVSS 7.8v20h2v1607+4 more2021-04-13
CVE-2021-27089 [HIGH] CVE-2021-27089: Microsoft Internet Messaging API Remote Code Execution Vulnerability
Microsoft Internet Messaging API Remote Code Execution Vulnerability
nvd
CVE-2018-8335P3HIGHCVSS 7.5v1607v1703+12 more2018-09-13
CVE-2018-8335 [HIGH] CVE-2018-8335: A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an attacke
A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.
nvd
CVE-2022-22027P3HIGHCVSS 7.8v20h2v21h1+3 more2022-07-12
CVE-2022-22027 [HIGH] CVE-2022-22027: Windows Fax Service Remote Code Execution Vulnerability
Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2022-22024P3HIGHCVSS 7.8v20h2v21h1+3 more2022-07-12
CVE-2022-22024 [HIGH] CVE-2022-22024: Windows Fax Service Remote Code Execution Vulnerability
Windows Fax Service Remote Code Execution Vulnerability
nvd