cbcvebase.

Microsoft Windows 10 Version 1803 vulnerabilities

550 known vulnerabilities affecting microsoft/windows_10_version_1803.

Total CVEs
550
CISA KEV
6
actively exploited
Public exploits
20
Exploited in wild
14
Severity breakdown
CRITICAL16HIGH395MEDIUM138LOW1

Vulnerabilities

Page 25 of 28
CVE-2020-1250P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-09-11
CVE-2020-1250 [MEDIUM] CVE-2020-1250: <p>An information disclosure vulnerability exists when the win32k component improperly provides kern An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application
nvd
CVE-2021-26892P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-03-11
CVE-2021-26892 [MEDIUM] CVE-2021-26892: Windows Extensible Firmware Interface Security Feature Bypass Vulnerability Windows Extensible Firmware Interface Security Feature Bypass Vulnerability
nvd
CVE-2019-0941P4MEDIUMCVSS 4.4≥ 10.0.0, < publication2019-06-12
CVE-2019-0941 [MEDIUM] CWE-19 CVE-2019-0941: A denial of service exists in Microsoft IIS Server when the optional request filtering feature impro A denial of service exists in Microsoft IIS Server when the optional request filtering feature improperly handles requests. An attacker who successfully exploited this vulnerability could perform a temporary denial of service against pages configured to use request filtering. To exploit this vulnerability, an attacker could send a specially crafted req
nvd
CVE-2021-31184P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.17134.22072021-05-11
CVE-2021-31184 [MEDIUM] CVE-2021-31184: Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability
nvd
CVE-2020-17029P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17029 [MEDIUM] CVE-2020-17029: Windows Canonical Display Driver Information Disclosure Vulnerability Windows Canonical Display Driver Information Disclosure Vulnerability
nvd
CVE-2021-1676P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-01-12
CVE-2021-1676 [MEDIUM] CVE-2021-1676: Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
nvd
CVE-2020-17056P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17056 [MEDIUM] CVE-2020-17056: Windows Network File System Information Disclosure Vulnerability Windows Network File System Information Disclosure Vulnerability
nvd
CVE-2021-1637P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-01-12
CVE-2021-1637 [MEDIUM] CVE-2021-1637: Windows DNS Query Information Disclosure Vulnerability Windows DNS Query Information Disclosure Vulnerability
nvd
CVE-2020-1485P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-08-17
CVE-2020-1485 [MEDIUM] CVE-2020-1485: An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service impr An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an authenticated attacker could connect an imaging device (camera,
nvd
CVE-2021-31191P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.17134.22072021-05-11
CVE-2021-31191 [MEDIUM] CVE-2021-31191: Windows Projected File System FS Filter Driver Information Disclosure Vulnerability Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
nvd
CVE-2020-1596P4MEDIUMCVSS 5.3≥ 10.0.0, < publication2020-09-11
CVE-2020-1596 [MEDIUM] CWE-327 CVE-2020-1596: <p>A information disclosure vulnerability exists when TLS components use weak hash algorithms. An at A information disclosure vulnerability exists when TLS components use weak hash algorithms. An attacker who successfully exploited this vulnerability could obtain information to further compromise a users's encrypted transmission channel. To exploit the vulnerability, an attacker would have to conduct a man-in-the-middle attack. The update addresses t
nvd
CVE-2020-17113P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17113 [MEDIUM] CWE-125 CVE-2020-17113: Windows Camera Codec Information Disclosure Vulnerability Windows Camera Codec Information Disclosure Vulnerability
nvd
CVE-2020-17094P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-12-10
CVE-2020-17094 [MEDIUM] CVE-2020-17094: Windows Error Reporting Information Disclosure Vulnerability Windows Error Reporting Information Disclosure Vulnerability
nvd
CVE-2020-17030P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17030 [MEDIUM] CVE-2020-17030: Windows MSCTF Server Information Disclosure Vulnerability Windows MSCTF Server Information Disclosure Vulnerability
nvd
CVE-2020-17036P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17036 [MEDIUM] CVE-2020-17036: Windows Function Discovery SSDP Provider Information Disclosure Vulnerability Windows Function Discovery SSDP Provider Information Disclosure Vulnerability
nvd
CVE-2020-17004P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17004 [MEDIUM] CVE-2020-17004: Windows Graphics Component Information Disclosure Vulnerability Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2020-1038P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-09-11
CVE-2020-1038 [MEDIUM] CVE-2020-1038: <p>A denial of service vulnerability exists when Windows Routing Utilities improperly handles object A denial of service vulnerability exists when Windows Routing Utilities improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability w
nvd
CVE-2021-24076P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-02-25
CVE-2021-24076 [MEDIUM] CVE-2021-24076: Microsoft Windows VMSwitch Information Disclosure Vulnerability Microsoft Windows VMSwitch Information Disclosure Vulnerability
nvd
CVE-2021-24079P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-02-25
CVE-2021-24079 [MEDIUM] CVE-2021-24079: Windows Backup Engine Information Disclosure Vulnerability Windows Backup Engine Information Disclosure Vulnerability
nvd
CVE-2021-26869P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-03-11
CVE-2021-26869 [MEDIUM] CVE-2021-26869: Windows ActiveX Installer Service Information Disclosure Vulnerability Windows ActiveX Installer Service Information Disclosure Vulnerability
nvd
Microsoft Windows 10 Version 1803 vulnerabilities | cvebase