Microsoft Windows 10 vulnerabilities
2,805 known vulnerabilities affecting microsoft/windows_10.
Total CVEs
2,805
CISA KEV
7
actively exploited
Public exploits
226
Exploited in wild
52
Severity breakdown
CRITICAL68HIGH1906MEDIUM804LOW27
Vulnerabilities
Page 64 of 141
CVE-2020-1488P3HIGHCVSS 7.8v1607v1709+5 more2020-08-17
CVE-2020-1488 [HIGH] CWE-269 CVE-2020-1488: An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperl
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.
To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.
The security update addresses the vulnerability by corr
nvd
CVE-2023-21817P3HIGHCVSS 7.8fixed in 10.0.10240.197472023-02-14
CVE-2023-21817 [HIGH] CWE-287 CVE-2023-21817: Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2020-1431P3HIGHCVSS 7.8v1803v1809+3 more2020-07-14
CVE-2020-1431 [HIGH] CWE-269 CVE-2020-1431: An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperl
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correc
nvd
CVE-2023-21822P3HIGHCVSS 7.8fixed in 10.0.10240.197472023-02-14
CVE-2023-21822 [HIGH] CWE-416 CVE-2023-21822: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2020-0844P3HIGHCVSS 7.8v1607v1709+4 more2020-03-12
CVE-2020-0844 [HIGH] CVE-2020-0844: An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service
An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'.
nvd
CVE-2021-26870P3HIGHCVSS 7.8v20h2v1803+3 more2021-03-11
CVE-2021-26870 [HIGH] CVE-2021-26870: Windows Projected File System Elevation of Privilege Vulnerability
Windows Projected File System Elevation of Privilege Vulnerability
nvd
CVE-2020-1553P3HIGHCVSS 7.8v1607v1709+5 more2020-08-17
CVE-2020-1553 [HIGH] CVE-2020-1553: An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects i
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context.
An attacker could exploit this vulnerability by running a specially crafted application on the victim system.
The update addresses the vulnerabili
nvd
CVE-2023-21805P3HIGHCVSS 7.8fixed in 10.0.10240.197472023-02-14
CVE-2023-21805 [HIGH] CWE-77 CVE-2023-21805: Windows MSHTML Platform Remote Code Execution Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2022-41092P3HIGHCVSS 7.8v20h2v21h1+2 more2022-11-09
CVE-2022-41092 [HIGH] CVE-2022-41092: Windows Win32k Elevation of Privilege Vulnerability
Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2020-1159P3HIGHCVSS 7.8v1903v1909+1 more2020-09-11
CVE-2020-1159 [HIGH] CVE-2020-1159: <p>An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file
An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update add
nvd
CVE-2022-22031P3HIGHCVSS 7.8v20h2v21h1+3 more2022-07-12
CVE-2022-22031 [HIGH] CWE-312 CVE-2022-22031: Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability
Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability
nvd
CVE-2021-41347P3HIGHCVSS 7.8v20h2v21h1+4 more2021-10-13
CVE-2021-41347 [HIGH] CWE-269 CVE-2021-41347: Windows AppX Deployment Service Elevation of Privilege Vulnerability
Windows AppX Deployment Service Elevation of Privilege Vulnerability
nvd
CVE-2021-26426P3HIGHCVSS 7.8v20h2v21h1+4 more2021-08-12
CVE-2021-26426 [HIGH] CWE-59 CVE-2021-26426: Windows User Account Profile Picture Elevation of Privilege Vulnerability
Windows User Account Profile Picture Elevation of Privilege Vulnerability
nvd
CVE-2021-1689P3HIGHCVSS 7.8v20h2v1607+4 more2021-01-12
CVE-2021-1689 [HIGH] CWE-269 CVE-2021-1689: Windows Multipoint Management Elevation of Privilege Vulnerability
Windows Multipoint Management Elevation of Privilege Vulnerability
nvd
CVE-2021-31951P3HIGHCVSS 7.8v20h2v21h1+2 more2021-06-08
CVE-2021-31951 [HIGH] CVE-2021-31951: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-37997P3HIGHCVSS 7.8v20h2v21h1+3 more2022-10-11
CVE-2022-37997 [HIGH] CVE-2022-37997: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2022-21873P3HIGHCVSS 7.8v20h2v21h1+4 more2022-01-11
CVE-2022-21873 [HIGH] CVE-2022-21873: Tile Data Repository Elevation of Privilege Vulnerability
Tile Data Repository Elevation of Privilege Vulnerability
nvd
CVE-2022-44671P3HIGHCVSS 7.8v20h2v21h1+4 more2022-12-13
CVE-2022-44671 [HIGH] CVE-2022-44671: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2022-21861P3HIGHCVSS 7.8v20h2v21h1+3 more2022-01-11
CVE-2022-21861 [HIGH] CVE-2022-21861: Task Flow Data Engine Elevation of Privilege Vulnerability
Task Flow Data Engine Elevation of Privilege Vulnerability
nvd
CVE-2021-1682P3HIGHCVSS 7.8v20h2v1803+3 more2021-01-12
CVE-2021-1682 [HIGH] CWE-269 CVE-2021-1682: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd