cbcvebase.

Microsoft Windows 10 vulnerabilities

2,804 known vulnerabilities affecting microsoft/windows_10.

Total CVEs
2,804
CISA KEV
7
actively exploited
Public exploits
226
Exploited in wild
51
Severity breakdown
CRITICAL68HIGH1906MEDIUM803LOW27

Vulnerabilities

Page 48 of 141
CVE-2022-26926P3HIGHCVSS 7.8v20h2v21h1+4 more2022-05-10
CVE-2022-26926 [HIGH] CWE-284 CVE-2022-26926: Windows Address Book Remote Code Execution Vulnerability Windows Address Book Remote Code Execution Vulnerability
nvd
CVE-2017-0162P3HIGHCVSS 7.6v1511v1607+1 more2017-04-12
CVE-2017-0162 [HIGH] CWE-20 CVE-2017-0162: A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Window A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is unique from CVE-2017-01
nvd
CVE-2022-21888P3HIGHCVSS 7.8v20h2v21h1+3 more2022-01-11
CVE-2022-21888 [HIGH] CVE-2022-21888: Windows Modern Execution Server Remote Code Execution Vulnerability Windows Modern Execution Server Remote Code Execution Vulnerability
nvd
CVE-2022-26903P3HIGHCVSS 7.8v20h2v21h1+4 more2022-04-15
CVE-2022-26903 [HIGH] CVE-2022-26903: Windows Graphics Component Remote Code Execution Vulnerability Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2020-1565P3HIGHCVSS 7.8v1607v1709+5 more2020-08-17
CVE-2020-1565 [HIGH] CVE-2020-1565: An elevation of privilege vulnerability exists when the "Public Account Pictures" folder i An elevation of privilege vulnerability exists when the "Public Account Pictures" folder improperly handles junctions. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting
nvd
CVE-2021-26861P3HIGHCVSS 7.8v20h2v1607+4 more2021-03-11
CVE-2021-26861 [HIGH] CVE-2021-26861: Windows Graphics Component Remote Code Execution Vulnerability Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2019-1453P3HIGHCVSS 7.5v1607v1709+4 more2019-12-10
CVE-2019-1453 [HIGH] CVE-2019-1453: A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability'.
nvd
CVE-2021-40462P3HIGHCVSS 7.8v20h2v21h1+3 more2021-10-13
CVE-2021-40462 [HIGH] CVE-2021-40462: Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability
nvd
CVE-2021-26900P3HIGHCVSS 7.8v20h2v1909+1 more2021-03-11
CVE-2021-26900 [HIGH] CWE-416 CVE-2021-26900: Windows Win32k Elevation of Privilege Vulnerability Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2021-31192P3HIGHCVSS 7.8v20h2v20042021-05-11
CVE-2021-31192 [HIGH] CVE-2021-31192: Windows Media Foundation Core Remote Code Execution Vulnerability Windows Media Foundation Core Remote Code Execution Vulnerability
nvd
CVE-2021-34530P3HIGHCVSS 7.8v20h2v21h1+4 more2021-08-12
CVE-2021-34530 [HIGH] CVE-2021-34530: Windows Graphics Component Remote Code Execution Vulnerability Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2016-3306P3HIGHCVSS 7.8v1511v1607+1 more2016-09-14
CVE-2016-3306 [HIGH] CVE-2016-3306: The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 mishandles session objects, which allows local users to hijack sessions, and consequently gain privileges, via a crafted application, aka "Windows Session Object Elevation
nvd
CVE-2016-7259P3HIGHCVSS 7.8v1511v16072016-12-20
CVE-2016-7259 [HIGH] CWE-19 CVE-2016-7259: The Graphics Component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 200 The Graphics Component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vuln
nvd
CVE-2022-30206P3HIGHCVSS 7.8v20h2v21h1+3 more2022-07-12
CVE-2022-30206 [HIGH] CVE-2022-30206: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2021-36937P3HIGHCVSS 7.8v20h2v21h1+4 more2021-08-12
CVE-2021-36937 [HIGH] CVE-2021-36937: Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability
nvd
CVE-2016-0096P3HIGHCVSS 7.8v15112016-03-09
CVE-2016-0096 [HIGH] CVE-2016-0096: The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0093, CVE-
nvd
CVE-2021-43234P3HIGHCVSS 7.8v20h2v21h1+4 more2021-12-15
CVE-2021-43234 [HIGH] CVE-2021-43234: Windows Fax Service Remote Code Execution Vulnerability Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2017-0189P3HIGHCVSS 7.8v1511v1607+1 more2017-04-12
CVE-2017-0189 [HIGH] CVE-2017-0189: An elevation of privilege vulnerability exists in Windows 10 when the Windows kernel-mode driver fai An elevation of privilege vulnerability exists in Windows 10 when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode, aka "Win32k Elevation of Privilege Vulnerability." This CVE ID is unique from CVE-2017-0188.
nvd
CVE-2021-34438P3HIGHCVSS 7.8v20h2v21h1+3 more2021-07-16
CVE-2021-34438 [HIGH] CVE-2021-34438: Windows Font Driver Host Remote Code Execution Vulnerability Windows Font Driver Host Remote Code Execution Vulnerability
nvd
CVE-2022-37955P3HIGHCVSS 7.8v20h2v21h1+3 more2022-09-13
CVE-2022-37955 [HIGH] CVE-2022-37955: Windows Group Policy Elevation of Privilege Vulnerability Windows Group Policy Elevation of Privilege Vulnerability
nvd
Microsoft Windows 10 vulnerabilities | cvebase