cbcvebase.

Microsoft Windows 10 vulnerabilities

2,805 known vulnerabilities affecting microsoft/windows_10.

Total CVEs
2,805
CISA KEV
7
actively exploited
Public exploits
226
Exploited in wild
52
Severity breakdown
CRITICAL68HIGH1906MEDIUM804LOW27

Vulnerabilities

Page 75 of 141
CVE-2020-0771P3HIGHCVSS 7.8v1607v1709+4 more2020-03-12
CVE-2020-0771 [HIGH] CVE-2020-0771: An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memor An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows CSC Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0769.
nvd
CVE-2019-1415P3HIGHCVSS 7.8v1607v1709+3 more2019-11-12
CVE-2019-1415 [HIGH] CVE-2019-1415: An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Insta An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerability'.
nvd
CVE-2020-1087P3HIGHCVSS 7.8v1709v1803+3 more2020-05-21
CVE-2020-1087 [HIGH] CVE-2020-1087: An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerabili
nvd
CVE-2020-1590P3HIGHCVSS 7.8v1809v1903+2 more2020-09-11
CVE-2020-1590 [HIGH] CVE-2020-1590: <p>An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system. To exploit the vulnerability, an attacker would first have to gain execution on the victim system, then run a sp
nvd
CVE-2020-1430P3HIGHCVSS 7.8v1607v1709+5 more2020-07-14
CVE-2020-1430 [HIGH] CVE-2020-1430: An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1354.
nvd
CVE-2020-1354P3HIGHCVSS 7.8v1607v1709+5 more2020-07-14
CVE-2020-1354 [HIGH] CVE-2020-1354: An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1430.
nvd
CVE-2021-1651P3HIGHCVSS 7.8v20h2v1607+4 more2021-01-12
CVE-2021-1651 [HIGH] CWE-269 CVE-2021-1651: Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
nvd
CVE-2022-24546P3HIGHCVSS 7.8v20h2v21h1+3 more2022-04-15
CVE-2022-24546 [HIGH] CVE-2022-24546: Windows DWM Core Library Elevation of Privilege Vulnerability Windows DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2021-33751P3HIGHCVSS 7.8v20h2v21h1+4 more2021-07-14
CVE-2021-33751 [HIGH] CWE-269 CVE-2021-33751: Windows Storage Spaces Controller Elevation of Privilege Vulnerability Windows Storage Spaces Controller Elevation of Privilege Vulnerability
nvd
CVE-2020-1347P3HIGHCVSS 7.8v1709v1803+4 more2020-07-14
CVE-2020-1347 [HIGH] CVE-2020-1347: An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle f An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations, aka 'Windows Storage Services Elevation of Privilege Vulnerability'.
nvd
CVE-2021-26901P3HIGHCVSS 7.8v20h2v1607+3 more2021-03-11
CVE-2021-26901 [HIGH] CVE-2021-26901: Windows Event Tracing Elevation of Privilege Vulnerability Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2021-1703P3HIGHCVSS 7.8v20h2v20042021-01-12
CVE-2021-1703 [HIGH] CWE-269 CVE-2021-1703: Windows Event Logging Service Elevation of Privilege Vulnerability Windows Event Logging Service Elevation of Privilege Vulnerability
nvd
CVE-2019-1380P3HIGHCVSS 7.8v1607v1709+3 more2019-11-12
CVE-2019-1380 [HIGH] CWE-367 CVE-2019-1380: A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka ' A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
nvd
CVE-2022-26796P3HIGHCVSS 7.8v20h2v21h1+4 more2022-04-15
CVE-2022-26796 [HIGH] CVE-2022-26796: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2022-26802P3HIGHCVSS 7.8v20h2v21h1+4 more2022-04-15
CVE-2022-26802 [HIGH] CVE-2022-26802: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2022-26801P3HIGHCVSS 7.8v20h2v21h1+4 more2022-04-15
CVE-2022-26801 [HIGH] CVE-2022-26801: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2022-26792P3HIGHCVSS 7.8v20h2v21h1+4 more2022-04-15
CVE-2022-26792 [HIGH] CVE-2022-26792: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2022-26787P3HIGHCVSS 7.8v20h2v21h1+4 more2022-04-15
CVE-2022-26787 [HIGH] CVE-2022-26787: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2020-1543P3HIGHCVSS 7.8v1607v1709+5 more2020-08-17
CVE-2020-1543 [HIGH] CVE-2020-1543: An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles mem An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting how the Window
nvd
CVE-2020-1536P3HIGHCVSS 7.8v1607v1709+5 more2020-08-17
CVE-2020-1536 [HIGH] CVE-2020-1536: An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles mem An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting how the Window
nvd
Microsoft Windows 10 vulnerabilities | cvebase