Microsoft Windows 10 vulnerabilities
2,805 known vulnerabilities affecting microsoft/windows_10.
Total CVEs
2,805
CISA KEV
7
actively exploited
Public exploits
226
Exploited in wild
52
Severity breakdown
CRITICAL68HIGH1906MEDIUM804LOW27
Vulnerabilities
Page 51 of 141
CVE-2021-1710P3HIGHCVSS 7.8v20h2v1607+4 more2021-01-12
CVE-2021-1710 [HIGH] CVE-2021-1710: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2016-0135P3HIGHCVSS 8.4v15112016-04-12
CVE-2016-0135 [HIGH] CWE-119 CVE-2016-0135: The Secondary Logon Service in Microsoft Windows 10 Gold and 1511 allows local users to gain privile
The Secondary Logon Service in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Secondary Logon Elevation of Privilege Vulnerability."
nvd
CVE-2020-17055P3HIGHCVSS 7.8v20h2v1607+6 more2020-11-11
CVE-2020-17055 [HIGH] CVE-2020-17055: Windows Remote Access Elevation of Privilege Vulnerability
Windows Remote Access Elevation of Privilege Vulnerability
nvd
CVE-2020-17044P3HIGHCVSS 7.8v20h2v1607+6 more2020-11-11
CVE-2020-17044 [HIGH] CVE-2020-17044: Windows Remote Access Elevation of Privilege Vulnerability
Windows Remote Access Elevation of Privilege Vulnerability
nvd
CVE-2020-17043P3HIGHCVSS 7.8v20h2v1607+5 more2020-11-11
CVE-2020-17043 [HIGH] CVE-2020-17043: Windows Remote Access Elevation of Privilege Vulnerability
Windows Remote Access Elevation of Privilege Vulnerability
nvd
CVE-2021-26433P3HIGHCVSS 7.5v20h2v21h1+4 more2021-08-12
CVE-2021-26433 [HIGH] CVE-2021-26433: Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
nvd
CVE-2020-1473P3HIGHCVSS 7.8v1607v1709+5 more2020-08-17
CVE-2020-1473 [HIGH] CVE-2020-1473: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.
An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file.
The update addresses the vulnerabili
nvd
CVE-2017-0180P3HIGHCVSS 7.6v1511v1607+1 more2017-04-12
CVE-2017-0180 [HIGH] CVE-2017-0180: A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host s
A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is unique from CVE-2017-0162, CVE-2017-0163, and CVE-2017-0181.
nvd
CVE-2021-36926P3HIGHCVSS 7.5v20h2v21h1+4 more2021-08-12
CVE-2021-36926 [HIGH] CVE-2021-36926: Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
nvd
CVE-2021-36933P3HIGHCVSS 7.5v20h2v21h1+4 more2021-08-12
CVE-2021-36933 [HIGH] CVE-2021-36933: Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
nvd
CVE-2021-36932P3HIGHCVSS 7.5v20h2v21h1+4 more2021-08-12
CVE-2021-36932 [HIGH] CVE-2021-36932: Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
nvd
CVE-2021-34439P3HIGHCVSS 7.8v16072021-07-16
CVE-2021-34439 [HIGH] CVE-2021-34439: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2021-28319P3HIGHCVSS 7.5v20h2v1803+3 more2021-04-13
CVE-2021-28319 [HIGH] CVE-2021-28319: Windows TCP/IP Driver Denial of Service Vulnerability
Windows TCP/IP Driver Denial of Service Vulnerability
nvd
CVE-2021-24081P3HIGHCVSS 7.8v20h2v1607+4 more2021-02-25
CVE-2021-24081 [HIGH] CWE-787 CVE-2021-24081: Microsoft Windows Codecs Library Remote Code Execution Vulnerability
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
nvd
CVE-2021-42276P3HIGHCVSS 7.8v20h2v21h1+4 more2021-11-10
CVE-2021-42276 [HIGH] CVE-2021-42276: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2021-26900P3HIGHCVSS 7.8v20h2v1909+1 more2021-03-11
CVE-2021-26900 [HIGH] CWE-416 CVE-2021-26900: Windows Win32k Elevation of Privilege Vulnerability
Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2021-34533P3HIGHCVSS 7.8v20h2v21h1+4 more2021-08-12
CVE-2021-34533 [HIGH] CVE-2021-34533: Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
nvd
CVE-2021-34500P3HIGHCVSS 7.7v20h2v21h1+4 more2021-07-14
CVE-2021-34500 [HIGH] CVE-2021-34500: Windows Kernel Memory Information Disclosure Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability
nvd
CVE-2017-0024P3HIGHCVSS 7.8v1511v16072017-03-17
CVE-2017-0024 [HIGH] CVE-2017-0024: The kernel-mode drivers in Microsoft Windows 10 1607 and Windows Server 2016 allow local users to ga
The kernel-mode drivers in Microsoft Windows 10 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, and CVE-2017-0082.
nvd
CVE-2017-0079P3HIGHCVSS 7.8v1511v16072017-03-17
CVE-2017-0079 [HIGH] CVE-2017-0079: The kernel-mode drivers in Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; and Windows 10 Gold,
The kernel-mode drivers in Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0080, C
nvd