cbcvebase.

Microsoft Windows 10 vulnerabilities

2,804 known vulnerabilities affecting microsoft/windows_10.

Total CVEs
2,804
CISA KEV
7
actively exploited
Public exploits
226
Exploited in wild
51
Severity breakdown
CRITICAL68HIGH1906MEDIUM803LOW27

Vulnerabilities

Page 89 of 141
CVE-2020-1142P3HIGHCVSS 7.8v1709v1803+3 more2020-05-21
CVE-2020-1142 [HIGH] CVE-2020-1142: An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'Windows GDI Elevation of Privilege Vulnerability'.
nvd
CVE-2020-0780P3HIGHCVSS 7.8v1607v1709+4 more2020-03-12
CVE-2020-0780 [HIGH] CVE-2020-0780: An elevation of privilege vulnerability exists in the way that the Windows Network List Service hand An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of Privilege Vulnerability'.
nvd
CVE-2020-0636P3HIGHCVSS 7.8v1903v19092020-01-14
CVE-2020-0636 [HIGH] CVE-2020-0636: An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handl An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'.
nvd
CVE-2019-1287P3HIGHCVSS 7.8v1607v1703+4 more2019-09-11
CVE-2019-1287 [HIGH] CVE-2019-1287: An elevation of privilege vulnerability exists in the way that the Windows Network Connectivity Assi An elevation of privilege vulnerability exists in the way that the Windows Network Connectivity Assistant handles objects in memory, aka 'Windows Network Connectivity Assistant Elevation of Privilege Vulnerability'.
nvd
CVE-2019-1277P3HIGHCVSS 7.8v1703v1709+3 more2019-09-11
CVE-2019-1277 [HIGH] CVE-2019-1277: An elevation of privilege vulnerability exists in Windows Audio Service when a malformed parameter i An elevation of privilege vulnerability exists in Windows Audio Service when a malformed parameter is processed, aka 'Windows Audio Service Elevation of Privilege Vulnerability'.
nvd
CVE-2021-1650P3HIGHCVSS 7.8v20h2v1607+4 more2021-01-12
CVE-2021-1650 [HIGH] CWE-269 CVE-2021-1650: Windows Runtime C++ Template Library Elevation of Privilege Vulnerability Windows Runtime C++ Template Library Elevation of Privilege Vulnerability
nvd
CVE-2020-1521P3HIGHCVSS 7.8v1607v1709+5 more2020-08-17
CVE-2020-1521 [HIGH] CVE-2020-1521: An elevation of privilege vulnerability exists when the Windows Speech Runtime improperly handles me An elevation of privilege vulnerability exists when the Windows Speech Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting how the Windo
nvd
CVE-2020-1274P3HIGHCVSS 7.8v1803v1809+3 more2020-06-09
CVE-2020-1274 [HIGH] CVE-2020-1274: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle obje An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1275, CVE-2020-1276, CVE-2020-130
nvd
CVE-2020-1264P3HIGHCVSS 7.8v1607v1709+4 more2020-06-09
CVE-2020-1264 [HIGH] CVE-2020-1264: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle obje An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-130
nvd
CVE-2020-1275P3HIGHCVSS 7.8v1903v1909+1 more2020-06-09
CVE-2020-1275 [HIGH] CVE-2020-1275: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle obje An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1276, CVE-2020-130
nvd
CVE-2020-1222P3HIGHCVSS 7.8v1709v1803+4 more2020-06-09
CVE-2020-1222 [HIGH] CVE-2020-1222: An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles m An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Microsoft Store Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1309.
nvd
CVE-2020-0772P3HIGHCVSS 7.8v1607v1709+4 more2020-03-12
CVE-2020-0772 [HIGH] CVE-2020-0772: An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles memor An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0806.
nvd
CVE-2020-1293P3HIGHCVSS 7.8v1607v1709+5 more2020-06-09
CVE-2020-1293 [HIGH] CVE-2020-1293: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service i An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1257, CVE-2020-1278.
nvd
CVE-2020-1257P3HIGHCVSS 7.8v1607v1709+5 more2020-06-09
CVE-2020-1257 [HIGH] CVE-2020-1257: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service i An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1278, CVE-2020-1293.
nvd
CVE-2020-1278P3HIGHCVSS 7.8v1607v1709+5 more2020-06-09
CVE-2020-1278 [HIGH] CVE-2020-1278: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service i An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1257, CVE-2020-1293.
nvd
CVE-2021-26442P3HIGHCVSS 7.8v20h2v21h1+3 more2021-10-13
CVE-2021-26442 [HIGH] CVE-2021-26442: Windows HTTP.sys Elevation of Privilege Vulnerability Windows HTTP.sys Elevation of Privilege Vulnerability
nvd
CVE-2020-1387P3HIGHCVSS 7.8v1709v1803+4 more2020-07-14
CVE-2020-1387 [HIGH] CVE-2020-1387: An elevation of privilege vulnerability exists in the way the Windows Push Notification Service hand An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'.
nvd
CVE-2020-1384P3HIGHCVSS 7.8v1607v1709+5 more2020-07-14
CVE-2020-1384 [HIGH] CVE-2020-1384: An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) K An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory, aka 'Windows CNG Key Isolation Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1359.
nvd
CVE-2020-1438P3HIGHCVSS 7.8v1607v1709+5 more2020-07-14
CVE-2020-1438 [HIGH] CVE-2020-1438: An elevation of privilege vulnerability exists in the way that the Windows Network Connections Servi An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390, CVE-2020-1427, CVE-2020-1428.
nvd
CVE-2020-1359P3HIGHCVSS 7.8v1607v1709+5 more2020-07-14
CVE-2020-1359 [HIGH] CVE-2020-1359: An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) K An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory, aka 'Windows CNG Key Isolation Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1384.
nvd
Microsoft Windows 10 vulnerabilities | cvebase