cbcvebase.

Microsoft Windows 10 vulnerabilities

2,804 known vulnerabilities affecting microsoft/windows_10.

Total CVEs
2,804
CISA KEV
7
actively exploited
Public exploits
226
Exploited in wild
51
Severity breakdown
CRITICAL68HIGH1906MEDIUM803LOW27

Vulnerabilities

Page 50 of 141
CVE-2022-24485P3HIGHCVSS 7.5v20h2v21h1+4 more2022-04-15
CVE-2022-24485 [HIGH] CVE-2022-24485: Win32 File Enumeration Remote Code Execution Vulnerability Win32 File Enumeration Remote Code Execution Vulnerability
nvd
CVE-2019-0965P3HIGHCVSS 7.6v1709v1803+2 more2019-08-14
CVE-2019-0965 [HIGH] CWE-20 CVE-2019-0965: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary
nvd
CVE-2022-21912P3HIGHCVSS 7.8v20h2v21h1+3 more2022-01-11
CVE-2022-21912 [HIGH] CVE-2022-21912: DirectX Graphics Kernel Remote Code Execution Vulnerability DirectX Graphics Kernel Remote Code Execution Vulnerability
nvd
CVE-2022-37978P3HIGHCVSS 7.5v20h2v21h1+3 more2022-10-11
CVE-2022-37978 [HIGH] CVE-2022-37978: Windows Active Directory Certificate Services Security Feature Bypass Windows Active Directory Certificate Services Security Feature Bypass
nvd
CVE-2016-3270P3HIGHCVSS 7.8v1511v16072016-10-14
CVE-2016-3270 [HIGH] CWE-264 CVE-2016-3270: The Graphics component in the kernel in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 The Graphics component in the kernel in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
nvd
CVE-2023-21801P3HIGHCVSS 7.8fixed in 10.0.10240.197472023-02-14
CVE-2023-21801 [HIGH] CVE-2023-21801: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2022-22008P3HIGHCVSS 7.8v20h2v21h1+4 more2022-04-15
CVE-2022-22008 [HIGH] CWE-362 CVE-2022-22008: Windows Hyper-V Remote Code Execution Vulnerability Windows Hyper-V Remote Code Execution Vulnerability
nvd
CVE-2022-24537P3HIGHCVSS 7.8v20h2v21h1+4 more2022-04-15
CVE-2022-24537 [HIGH] CWE-362 CVE-2022-24537: Windows Hyper-V Remote Code Execution Vulnerability Windows Hyper-V Remote Code Execution Vulnerability
nvd
CVE-2022-34696P3HIGHCVSS 7.8v20h2v21h1+3 more2022-08-09
CVE-2022-34696 [HIGH] CWE-362 CVE-2022-34696: Windows Hyper-V Remote Code Execution Vulnerability Windows Hyper-V Remote Code Execution Vulnerability
nvd
CVE-2022-30144P3HIGHCVSS 7.5v20h2v21h1+2 more2022-08-09
CVE-2022-30144 [HIGH] CVE-2022-30144: Windows Bluetooth Service Remote Code Execution Vulnerability Windows Bluetooth Service Remote Code Execution Vulnerability
nvd
CVE-2019-1198P3MEDIUMCVSS 6.5v1607v1703+4 more2019-08-14
CVE-2019-1198 [MEDIUM] CVE-2019-1198: An elevation of privilege exists in SyncController.dll. An attacker who successfully exploited the v An elevation of privilege exists in SyncController.dll. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This vulnerability by itself does not allow arbitrary code to be run. Howev
nvd
CVE-2019-0865P3HIGHCVSS 7.5v1703v1709+3 more2019-07-15
CVE-2019-0865 [HIGH] CVE-2019-0865: A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digita A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.An attacker could exploit the vulnerability by creating a specially crafted connection or message.The security update addresses the vulnerability by correcting the way SymCrypt handles digital signatures., aka 'SymCrypt Denial of Service Vulnerability
nvd
CVE-2020-1212P3HIGHCVSS 7.8v1607v1709+5 more2020-06-09
CVE-2020-1212 [HIGH] CVE-2020-1212: An elevation of privilege vulnerability exists when an OLE Automation component improperly handles m An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'OLE Automation Elevation of Privilege Vulnerability'.
nvd
CVE-2021-1710P3HIGHCVSS 7.8v20h2v1607+4 more2021-01-12
CVE-2021-1710 [HIGH] CVE-2021-1710: Microsoft Windows Media Foundation Remote Code Execution Vulnerability Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2021-31976P3HIGHCVSS 7.5v20h2v21h1+4 more2021-06-08
CVE-2021-31976 [HIGH] CVE-2021-31976: Server for NFS Information Disclosure Vulnerability Server for NFS Information Disclosure Vulnerability
nvd
CVE-2021-31975P3HIGHCVSS 7.5v20h2v21h1+4 more2021-06-08
CVE-2021-31975 [HIGH] CVE-2021-31975: Server for NFS Information Disclosure Vulnerability Server for NFS Information Disclosure Vulnerability
nvd
CVE-2020-1473P3HIGHCVSS 7.8v1607v1709+5 more2020-08-17
CVE-2020-1473 [HIGH] CVE-2020-1473: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerabili
nvd
CVE-2022-29105P3HIGHCVSS 7.8v20h2v21h1+4 more2022-05-10
CVE-2022-29105 [HIGH] CVE-2022-29105: Microsoft Windows Media Foundation Remote Code Execution Vulnerability Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2021-24083P3HIGHCVSS 7.8v20h2v1607+4 more2021-02-25
CVE-2021-24083 [HIGH] CWE-787 CVE-2021-24083: Windows Address Book Remote Code Execution Vulnerability Windows Address Book Remote Code Execution Vulnerability
nvd
CVE-2021-34439P3HIGHCVSS 7.8v16072021-07-16
CVE-2021-34439 [HIGH] CVE-2021-34439: Microsoft Windows Media Foundation Remote Code Execution Vulnerability Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
Microsoft Windows 10 vulnerabilities | cvebase