cbcvebase.

Microsoft Windows 10 vulnerabilities

2,805 known vulnerabilities affecting microsoft/windows_10.

Total CVEs
2,805
CISA KEV
7
actively exploited
Public exploits
226
Exploited in wild
52
Severity breakdown
CRITICAL68HIGH1906MEDIUM804LOW27

Vulnerabilities

Page 91 of 141
CVE-2020-1390P3HIGHCVSS 7.8v1607v1709+5 more2020-07-14
CVE-2020-1390 [HIGH] CVE-2020-1390: An elevation of privilege vulnerability exists in the way that the Windows Network Connections Servi An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1427, CVE-2020-1428, CVE-2020-1438.
nvd
CVE-2021-26442P3HIGHCVSS 7.8v20h2v21h1+3 more2021-10-13
CVE-2021-26442 [HIGH] CVE-2021-26442: Windows HTTP.sys Elevation of Privilege Vulnerability Windows HTTP.sys Elevation of Privilege Vulnerability
nvd
CVE-2021-1649P3HIGHCVSS 7.8v20h2v1607+4 more2021-01-12
CVE-2021-1649 [HIGH] CWE-269 CVE-2021-1649: Active Template Library Elevation of Privilege Vulnerability Active Template Library Elevation of Privilege Vulnerability
nvd
CVE-2020-1273P3HIGHCVSS 7.8v1903v1909+1 more2020-06-09
CVE-2020-1273 [HIGH] CVE-2020-1273: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle obje An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-130
nvd
CVE-2020-1162P3HIGHCVSS 7.8v1709v1803+4 more2020-06-09
CVE-2020-1162 [HIGH] CVE-2020-1162: An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service whe An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1324.
nvd
CVE-2020-0772P3HIGHCVSS 7.8v1607v1709+4 more2020-03-12
CVE-2020-0772 [HIGH] CVE-2020-0772: An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles memor An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0806.
nvd
CVE-2021-1709P3HIGHCVSS 7.8v20h2v1607+4 more2021-01-12
CVE-2021-1709 [HIGH] CWE-269 CVE-2021-1709: Windows Win32k Elevation of Privilege Vulnerability Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2020-17012P3HIGHCVSS 7.8v1803v1903+1 more2020-11-11
CVE-2020-17012 [HIGH] CVE-2020-17012: Windows Bind Filter Driver Elevation of Privilege Vulnerability Windows Bind Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-35760P3HIGHCVSS 7.8v20h2v21h1+3 more2022-08-09
CVE-2022-35760 [HIGH] CVE-2022-35760: Microsoft ATA Port Driver Elevation of Privilege Vulnerability Microsoft ATA Port Driver Elevation of Privilege Vulnerability
nvd
CVE-2020-1357P3HIGHCVSS 7.8v1607v1709+5 more2020-07-14
CVE-2020-1357 [HIGH] CVE-2020-1357: An elevation of privilege vulnerability exists when the Windows System Events Broker improperly hand An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations, aka 'Windows System Events Broker Elevation of Privilege Vulnerability'.
nvd
CVE-2020-1346P3HIGHCVSS 7.8v1607v1709+5 more2020-07-14
CVE-2020-1346 [HIGH] CVE-2020-1346: An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles file operations, aka 'Windows Modules Installer Elevation of Privilege Vulnerability'.
nvd
CVE-2020-1371P3HIGHCVSS 7.8v1607v1709+5 more2020-07-14
CVE-2020-1371 [HIGH] CVE-2020-1371: An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly han An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Event Logging Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1365.
nvd
CVE-2021-26864P3HIGHCVSS 7.8v20h2v1607+4 more2021-03-11
CVE-2021-26864 [HIGH] CVE-2021-26864: Windows Virtual Registry Provider Elevation of Privilege Vulnerability Windows Virtual Registry Provider Elevation of Privilege Vulnerability
nvd
CVE-2020-17007P3HIGHCVSS 7.8v20h2v1607+5 more2020-11-11
CVE-2020-17007 [HIGH] CVE-2020-17007: Windows Error Reporting Elevation of Privilege Vulnerability Windows Error Reporting Elevation of Privilege Vulnerability
nvd
CVE-2020-1196P3HIGHCVSS 7.8v1607v1709+5 more2020-06-09
CVE-2020-1196 [HIGH] CVE-2020-1196: An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects i An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory, aka 'Windows Print Configuration Elevation of Privilege Vulnerability'.
nvd
CVE-2020-1279P3HIGHCVSS 7.8v1607v1709+5 more2020-06-09
CVE-2020-1279 [HIGH] CVE-2020-1279: An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly load spotli An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly load spotlight images from a secure location, aka 'Windows Lockscreen Elevation of Privilege Vulnerability'.
nvd
CVE-2020-0867P3HIGHCVSS 7.8v1607v1709+4 more2020-03-12
CVE-2020-0867 [HIGH] CVE-2020-0867: An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improper An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0868.
nvd
CVE-2020-0868P3HIGHCVSS 7.8v1607v1709+4 more2020-03-12
CVE-2020-0868 [HIGH] CVE-2020-0868: An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improper An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0867.
nvd
CVE-2020-1312P3HIGHCVSS 7.8v1709v1803+4 more2020-06-09
CVE-2020-1312 [HIGH] CVE-2020-1312: An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Insta An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1272, CVE-2020-1277,
nvd
CVE-2020-1302P3HIGHCVSS 7.8v1607v1709+5 more2020-06-09
CVE-2020-1302 [HIGH] CVE-2020-1302: An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Insta An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1272, CVE-2020-1277,
nvd
Microsoft Windows 10 vulnerabilities | cvebase