Microsoft Windows 10 vulnerabilities

2,805 known vulnerabilities affecting microsoft/windows_10.

Total CVEs

2,805

CISA KEV

actively exploited

Public exploits

226

Exploited in wild

Severity breakdown

CRITICAL68HIGH1906MEDIUM804LOW27

Vulnerabilities

SortPage 89 of 141

CVE-2020-1201P3HIGHCVSS 7.8v1709v1803+4 more2020-06-09

CVE-2020-1201 [HIGH] CVE-2020-1201: An elevation of privilege vulnerability exists in the way the Windows Now Playing Session Manager ha An elevation of privilege vulnerability exists in the way the Windows Now Playing Session Manager handles objects in memory, aka 'Windows Now Playing Session Manager Elevation of Privilege Vulnerability'.

nvd

CVE-2020-0915P3HIGHCVSS 7.8v1607v1709+5 more2020-06-09

CVE-2020-0915 [HIGH] CVE-2020-0915: An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'Windows GDI Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0916.

nvd

CVE-2020-0898P3HIGHCVSS 7.8v16072020-03-12

CVE-2020-0898 [HIGH] CVE-2020-0898: An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handle An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0791.

nvd

CVE-2021-1695P3HIGHCVSS 7.8v20h2v1607+4 more2021-01-12

CVE-2021-1695 [HIGH] CWE-269 CVE-2021-1695: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability

nvd

CVE-2020-1274P3HIGHCVSS 7.8v1803v1809+3 more2020-06-09

CVE-2020-1274 [HIGH] CVE-2020-1274: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle obje An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1275, CVE-2020-1276, CVE-2020-130

nvd

CVE-2020-1264P3HIGHCVSS 7.8v1607v1709+4 more2020-06-09

CVE-2020-1264 [HIGH] CVE-2020-1264: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle obje An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-130

nvd

CVE-2020-1275P3HIGHCVSS 7.8v1903v1909+1 more2020-06-09

CVE-2020-1275 [HIGH] CVE-2020-1275: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle obje An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1276, CVE-2020-130

nvd

CVE-2020-0740P3HIGHCVSS 7.8v1709v1803+3 more2020-02-11

CVE-2020-0740 [HIGH] CVE-2020-0740: An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Servic An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0741, CVE-2020-0742, CVE-2020-0743, CVE-2020-0749, CVE-2020-0750.

nvd

CVE-2020-0657P3HIGHCVSS 7.8v1607v1709+4 more2020-02-11

CVE-2020-0657 [HIGH] CVE-2020-0657: An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.

nvd

CVE-2020-0749P3HIGHCVSS 7.8v1607v1709+4 more2020-02-11

CVE-2020-0749 [HIGH] CVE-2020-0749: An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Servic An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740, CVE-2020-0741, CVE-2020-0742, CVE-2020-0743, CVE-2020-0750.

nvd

CVE-2020-0742P3HIGHCVSS 7.8v1607v1709+4 more2020-02-11

CVE-2020-0742 [HIGH] CVE-2020-0742: An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Servic An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740, CVE-2020-0741, CVE-2020-0743, CVE-2020-0749, CVE-2020-0750.

nvd

CVE-2020-0750P3HIGHCVSS 7.8v1607v1709+4 more2020-02-11

CVE-2020-0750 [HIGH] CVE-2020-0750: An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Servic An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740, CVE-2020-0741, CVE-2020-0742, CVE-2020-0743, CVE-2020-0749.

nvd

CVE-2020-0741P3HIGHCVSS 7.8v1709v1803+3 more2020-02-11

CVE-2020-0741 [HIGH] CVE-2020-0741: An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Servic An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740, CVE-2020-0742, CVE-2020-0743, CVE-2020-0749, CVE-2020-0750.

nvd

CVE-2020-0743P3HIGHCVSS 7.8v1607v1709+4 more2020-02-11

CVE-2020-0743 [HIGH] CVE-2020-0743: An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Servic An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740, CVE-2020-0741, CVE-2020-0742, CVE-2020-0749, CVE-2020-0750.

nvd

CVE-2020-1222P3HIGHCVSS 7.8v1709v1803+4 more2020-06-09

CVE-2020-1222 [HIGH] CVE-2020-1222: An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles m An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Microsoft Store Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1309.

nvd

CVE-2020-0773P3HIGHCVSS 7.8v1607v1709+4 more2020-03-12

CVE-2020-0773 [HIGH] CVE-2020-0773: An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0770, CVE-2020-0860.

nvd

CVE-2020-0770P3HIGHCVSS 7.8v1607v1709+4 more2020-03-12

CVE-2020-0770 [HIGH] CVE-2020-0770: An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0773, CVE-2020-0860.

nvd

CVE-2020-1293P3HIGHCVSS 7.8v1607v1709+5 more2020-06-09

CVE-2020-1293 [HIGH] CVE-2020-1293: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service i An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1257, CVE-2020-1278.

nvd

CVE-2020-1257P3HIGHCVSS 7.8v1607v1709+5 more2020-06-09

CVE-2020-1257 [HIGH] CVE-2020-1257: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service i An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1278, CVE-2020-1293.

nvd

CVE-2020-1278P3HIGHCVSS 7.8v1607v1709+5 more2020-06-09

CVE-2020-1278 [HIGH] CVE-2020-1278: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service i An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1257, CVE-2020-1293.

nvd

← Previous89 / 141Next →