Microsoft Windows 10 vulnerabilities
2,804 known vulnerabilities affecting microsoft/windows_10.
Total CVEs
2,804
CISA KEV
7
actively exploited
Public exploits
226
Exploited in wild
51
Severity breakdown
CRITICAL68HIGH1906MEDIUM803LOW27
Vulnerabilities
Page 90 of 141
CVE-2020-1427P3HIGHCVSS 7.8v1607v1709+5 more2020-07-14
CVE-2020-1427 [HIGH] CVE-2020-1427: An elevation of privilege vulnerability exists in the way that the Windows Network Connections Servi
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390, CVE-2020-1428, CVE-2020-1438.
nvd
CVE-2020-1373P3HIGHCVSS 7.8v1607v1709+5 more2020-07-14
CVE-2020-1373 [HIGH] CVE-2020-1373: An elevation of privilege vulnerability exists in the way that the Windows Network Connections Servi
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1390, CVE-2020-1427, CVE-2020-1428, CVE-2020-1438.
nvd
CVE-2020-1390P3HIGHCVSS 7.8v1607v1709+5 more2020-07-14
CVE-2020-1390 [HIGH] CVE-2020-1390: An elevation of privilege vulnerability exists in the way that the Windows Network Connections Servi
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1427, CVE-2020-1428, CVE-2020-1438.
nvd
CVE-2020-1324P3HIGHCVSS 7.8v1709v1803+4 more2020-06-09
CVE-2020-1324 [HIGH] CVE-2020-1324: An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service whe
An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1162.
nvd
CVE-2020-1270P3HIGHCVSS 7.8v1607v1709+5 more2020-06-09
CVE-2020-1270 [HIGH] CVE-2020-1270: An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in me
An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service Elevation of Privilege Vulnerability'.
nvd
CVE-2020-0867P3HIGHCVSS 7.8v1607v1709+4 more2020-03-12
CVE-2020-0867 [HIGH] CVE-2020-0867: An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improper
An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0868.
nvd
CVE-2020-0868P3HIGHCVSS 7.8v1607v1709+4 more2020-03-12
CVE-2020-0868 [HIGH] CVE-2020-0868: An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improper
An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0867.
nvd
CVE-2020-17007P3HIGHCVSS 7.8v20h2v1607+5 more2020-11-11
CVE-2020-17007 [HIGH] CVE-2020-17007: Windows Error Reporting Elevation of Privilege Vulnerability
Windows Error Reporting Elevation of Privilege Vulnerability
nvd
CVE-2023-24856P3HIGHCVSS 7.5fixed in 10.0.10240.198052023-03-14
CVE-2023-24856 [HIGH] CWE-20 CVE-2023-24856: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
nvd
CVE-2022-35760P3HIGHCVSS 7.8v20h2v21h1+3 more2022-08-09
CVE-2022-35760 [HIGH] CVE-2022-35760: Microsoft ATA Port Driver Elevation of Privilege Vulnerability
Microsoft ATA Port Driver Elevation of Privilege Vulnerability
nvd
CVE-2020-1357P3HIGHCVSS 7.8v1607v1709+5 more2020-07-14
CVE-2020-1357 [HIGH] CVE-2020-1357: An elevation of privilege vulnerability exists when the Windows System Events Broker improperly hand
An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations, aka 'Windows System Events Broker Elevation of Privilege Vulnerability'.
nvd
CVE-2020-1463P3HIGHCVSS 7.8v1607v1709+5 more2020-07-14
CVE-2020-1463 [HIGH] CVE-2020-1463: An elevation of privilege vulnerability exists in the way that the SharedStream Library handles obje
An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka 'Windows SharedStream Library Elevation of Privilege Vulnerability'.
nvd
CVE-2020-1346P3HIGHCVSS 7.8v1607v1709+5 more2020-07-14
CVE-2020-1346 [HIGH] CVE-2020-1346: An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles
An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles file operations, aka 'Windows Modules Installer Elevation of Privilege Vulnerability'.
nvd
CVE-2020-1273P3HIGHCVSS 7.8v1903v1909+1 more2020-06-09
CVE-2020-1273 [HIGH] CVE-2020-1273: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle obje
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-130
nvd
CVE-2020-1162P3HIGHCVSS 7.8v1709v1803+4 more2020-06-09
CVE-2020-1162 [HIGH] CVE-2020-1162: An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service whe
An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1324.
nvd
CVE-2020-17075P3HIGHCVSS 7.8v20h2v1607+5 more2020-11-11
CVE-2020-17075 [HIGH] CVE-2020-17075: Windows USO Core Worker Elevation of Privilege Vulnerability
Windows USO Core Worker Elevation of Privilege Vulnerability
nvd
CVE-2020-16900P3HIGHCVSS 7.8v1607v1709+5 more2020-10-16
CVE-2020-16900 [HIGH] CVE-2020-16900: <p>An elevation of privilege vulnerability exists when the Windows Event System improperly handles o
An elevation of privilege vulnerability exists when the Windows Event System improperly handles objects in memory.
To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.
The security update addresses the vulnerability by correcting ho
nvd
CVE-2020-1395P3HIGHCVSS 7.8v1607v1709+5 more2020-07-14
CVE-2020-1395 [HIGH] CVE-2020-1395: An elevation of privilege vulnerability exists in the way that the Windows Speech Brokered API handl
An elevation of privilege vulnerability exists in the way that the Windows Speech Brokered API handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1392, CVE-2020-1394.
nvd
CVE-2020-1428P3HIGHCVSS 7.8v1607v1709+5 more2020-07-14
CVE-2020-1428 [HIGH] CVE-2020-1428: An elevation of privilege vulnerability exists in the way that the Windows Network Connections Servi
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390, CVE-2020-1427, CVE-2020-1438.
nvd
CVE-2020-1437P3HIGHCVSS 7.8v1607v1709+5 more2020-07-14
CVE-2020-1437 [HIGH] CVE-2020-1437: An elevation of privilege vulnerability exists in the way that the Windows Network Location Awarenes
An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles objects in memory, aka 'Windows Network Location Awareness Service Elevation of Privilege Vulnerability'.
nvd