Microsoft Windows 10 Version 1803 vulnerabilities
621 known vulnerabilities affecting microsoft/windows_10_version_1803.
Total CVEs
621
CISA KEV
7
actively exploited
Public exploits
22
Exploited in wild
17
Severity breakdown
CRITICAL17HIGH455MEDIUM148LOW1
Vulnerabilities
Page 29 of 32
CVE-2020-17113P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17113 [MEDIUM] CWE-125 CVE-2020-17113: Windows Camera Codec Information Disclosure Vulnerability
Windows Camera Codec Information Disclosure Vulnerability
nvd
CVE-2020-17094P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-12-10
CVE-2020-17094 [MEDIUM] CVE-2020-17094: Windows Error Reporting Information Disclosure Vulnerability
Windows Error Reporting Information Disclosure Vulnerability
nvd
CVE-2020-17030P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17030 [MEDIUM] CVE-2020-17030: Windows MSCTF Server Information Disclosure Vulnerability
Windows MSCTF Server Information Disclosure Vulnerability
nvd
CVE-2020-17036P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17036 [MEDIUM] CVE-2020-17036: Windows Function Discovery SSDP Provider Information Disclosure Vulnerability
Windows Function Discovery SSDP Provider Information Disclosure Vulnerability
nvd
CVE-2020-17004P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17004 [MEDIUM] CVE-2020-17004: Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2020-1038P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-09-11
CVE-2020-1038 [MEDIUM] CVE-2020-1038: <p>A denial of service vulnerability exists when Windows Routing Utilities improperly handles object
A denial of service vulnerability exists when Windows Routing Utilities improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding.
To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability w
nvd
CVE-2021-26869P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.17134.20872021-03-11
CVE-2021-26869 [MEDIUM] CVE-2021-26869: Windows ActiveX Installer Service Information Disclosure Vulnerability
Windows ActiveX Installer Service Information Disclosure Vulnerability
nvd
CVE-2021-26884P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.17134.20872021-03-11
CVE-2021-26884 [MEDIUM] CVE-2021-26884: Windows Media Photo Codec Information Disclosure Vulnerability
Windows Media Photo Codec Information Disclosure Vulnerability
nvd
CVE-2021-24076P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-02-25
CVE-2021-24076 [MEDIUM] CVE-2021-24076: Microsoft Windows VMSwitch Information Disclosure Vulnerability
Microsoft Windows VMSwitch Information Disclosure Vulnerability
nvd
CVE-2021-24079P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-02-25
CVE-2021-24079 [MEDIUM] CVE-2021-24079: Windows Backup Engine Information Disclosure Vulnerability
Windows Backup Engine Information Disclosure Vulnerability
nvd
CVE-2021-28317P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-04-13
CVE-2021-28317 [MEDIUM] CVE-2021-28317: Microsoft Windows Codecs Library Information Disclosure Vulnerability
Microsoft Windows Codecs Library Information Disclosure Vulnerability
nvd
CVE-2021-28447P4MEDIUMCVSS 4.4≥ 10.0.0, < publication2021-04-13
CVE-2021-28447 [MEDIUM] CVE-2021-28447: Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
nvd
CVE-2020-1578P4MEDIUMCVSS 4.7≥ 10.0.0, < publication2020-08-17
CVE-2020-1578 [MEDIUM] CVE-2020-1578: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass. An attacker who successfully exploited the vulnerability could retrieve the memory address of a kernel object.
To exploit the vulnerability, an attacker would ha
nvd
CVE-2021-26886P4MEDIUMCVSS 6.1≥ 10.0.0, < 10.0.17134.20872021-03-11
CVE-2021-26886 [MEDIUM] CVE-2021-26886: User Profile Service Denial of Service Vulnerability
User Profile Service Denial of Service Vulnerability
nvd
CVE-2021-28326P4MEDIUMCVSS 6.1≥ 10.0.0, < publication2021-04-13
CVE-2021-28326 [MEDIUM] CVE-2021-28326: Windows AppX Deployment Server Denial of Service Vulnerability
Windows AppX Deployment Server Denial of Service Vulnerability
nvd
CVE-2020-17045P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17045 [MEDIUM] CVE-2020-17045: Windows KernelStream Information Disclosure Vulnerability
Windows KernelStream Information Disclosure Vulnerability
nvd
CVE-2020-16999P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-16999 [MEDIUM] CVE-2020-16999: Windows WalletService Information Disclosure Vulnerability
Windows WalletService Information Disclosure Vulnerability
nvd
CVE-2020-1076P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-05-21
CVE-2020-1076 [MEDIUM] CVE-2020-1076: A denial of service vulnerability exists when Windows improperly handles objects in memory. An attac
A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding.
To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an
nvd
CVE-2020-1123P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-05-21
CVE-2020-1123 [MEDIUM] CVE-2020-1123: A denial of service vulnerability exists when Connected User Experiences and Telemetry Service impro
A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could cause a system to stop responding.
To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted
nvd
CVE-2020-0921P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-09-11
CVE-2020-0921 [MEDIUM] CVE-2020-0921: Microsoft Graphics Component Denial of Service Vulnerability
Microsoft Graphics Component Denial of Service Vulnerability
nvd