Microsoft Windows 10 vulnerabilities
2,805 known vulnerabilities affecting microsoft/windows_10.
Total CVEs
2,805
CISA KEV
7
actively exploited
Public exploits
226
Exploited in wild
52
Severity breakdown
CRITICAL68HIGH1906MEDIUM804LOW27
Vulnerabilities
Page 93 of 141
CVE-2020-1152P3HIGHCVSS 7.8v1607v1709+5 more2020-09-11
CVE-2020-1152 [HIGH] CVE-2020-1152: <p>An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sy
An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system.
To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafted script or application.
The update addres
nvd
CVE-2021-40477P3HIGHCVSS 7.8v20h2v21h1+4 more2021-10-13
CVE-2021-40477 [HIGH] CWE-269 CVE-2021-40477: Windows Event Tracing Elevation of Privilege Vulnerability
Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2021-27088P3HIGHCVSS 7.8v20h2v1803+3 more2021-04-13
CVE-2021-27088 [HIGH] CVE-2021-27088: Windows Event Tracing Elevation of Privilege Vulnerability
Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2021-43239P3HIGHCVSS 7.8v20h2v21h1+2 more2021-12-15
CVE-2021-43239 [HIGH] CVE-2021-43239: Windows Recovery Environment Agent Elevation of Privilege Vulnerability
Windows Recovery Environment Agent Elevation of Privilege Vulnerability
nvd
CVE-2021-28436P3HIGHCVSS 7.8v20h2v1607+4 more2021-04-13
CVE-2021-28436 [HIGH] CVE-2021-28436: Windows Speech Runtime Elevation of Privilege Vulnerability
Windows Speech Runtime Elevation of Privilege Vulnerability
nvd
CVE-2021-28351P3HIGHCVSS 7.8v20h2v1607+4 more2021-04-13
CVE-2021-28351 [HIGH] CVE-2021-28351: Windows Speech Runtime Elevation of Privilege Vulnerability
Windows Speech Runtime Elevation of Privilege Vulnerability
nvd
CVE-2021-28347P3HIGHCVSS 7.8v20h2v1607+4 more2021-04-13
CVE-2021-28347 [HIGH] CVE-2021-28347: Windows Speech Runtime Elevation of Privilege Vulnerability
Windows Speech Runtime Elevation of Privilege Vulnerability
nvd
CVE-2021-24102P3HIGHCVSS 7.8v20h2v1607+4 more2021-02-25
CVE-2021-24102 [HIGH] CWE-269 CVE-2021-24102: Windows Event Tracing Elevation of Privilege Vulnerability
Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2021-43248P3HIGHCVSS 7.8v20h2v21h1+5 more2021-12-15
CVE-2021-43248 [HIGH] CVE-2021-43248: Windows Digital Media Receiver Elevation of Privilege Vulnerability
Windows Digital Media Receiver Elevation of Privilege Vulnerability
nvd
CVE-2021-38630P3HIGHCVSS 7.8v20h2v21h1+4 more2021-09-15
CVE-2021-38630 [HIGH] CWE-269 CVE-2021-38630: Windows Event Tracing Elevation of Privilege Vulnerability
Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2021-36964P3HIGHCVSS 7.8v20h2v21h1+4 more2021-09-15
CVE-2021-36964 [HIGH] CWE-269 CVE-2021-36964: Windows Event Tracing Elevation of Privilege Vulnerability
Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2022-41095P3HIGHCVSS 7.8v20h2v21h1+4 more2022-11-09
CVE-2022-41095 [HIGH] CVE-2022-41095: Windows Digital Media Receiver Elevation of Privilege Vulnerability
Windows Digital Media Receiver Elevation of Privilege Vulnerability
nvd
CVE-2021-41339P3HIGHCVSS 7.8v20h2v21h1+2 more2021-10-13
CVE-2021-41339 [HIGH] CWE-269 CVE-2021-41339: Microsoft DWM Core Library Elevation of Privilege Vulnerability
Microsoft DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2021-41334P3HIGHCVSS 7.8v20h2v21h1+1 more2021-10-13
CVE-2021-41334 [HIGH] CWE-269 CVE-2021-41334: Windows Desktop Bridge Elevation of Privilege Vulnerability
Windows Desktop Bridge Elevation of Privilege Vulnerability
nvd
CVE-2022-41100P3HIGHCVSS 7.8v20h2v21h1+4 more2022-11-09
CVE-2022-41100 [HIGH] CWE-362 CVE-2022-41100: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
nvd
CVE-2022-41045P3HIGHCVSS 7.8v20h2v21h1+4 more2022-11-09
CVE-2022-41045 [HIGH] CWE-362 CVE-2022-41045: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
nvd
CVE-2022-41093P3HIGHCVSS 7.8v20h2v21h1+4 more2022-11-09
CVE-2022-41093 [HIGH] CWE-362 CVE-2022-41093: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
nvd
CVE-2018-0967P3MEDIUMCVSS 5.3v1511v1607+2 more2018-04-12
CVE-2018-0967 [MEDIUM] CVE-2018-0967: A denial of service vulnerability exists in the way that Windows SNMP Service handles malformed SNMP
A denial of service vulnerability exists in the way that Windows SNMP Service handles malformed SNMP traps, aka "Windows SNMP Service Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Server
nvd
CVE-2023-21820P3HIGHCVSS 7.4fixed in 10.0.10240.197472023-02-14
CVE-2023-21820 [HIGH] CWE-126 CVE-2023-21820: Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
nvd
CVE-2021-24082P3MEDIUMCVSS 6.5v20h2v1607+4 more2021-02-25
CVE-2021-24082 [MEDIUM] CVE-2021-24082: Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability
Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability
nvd