Microsoft Windows 10 Version 1803 vulnerabilities
621 known vulnerabilities affecting microsoft/windows_10_version_1803.
Total CVEs
621
CISA KEV
7
actively exploited
Public exploits
22
Exploited in wild
17
Severity breakdown
CRITICAL17HIGH455MEDIUM148LOW1
Vulnerabilities
Page 3 of 32
CVE-2021-24077P2CRITICALCVSS 9.8≥ 10.0.0, < publication2021-02-25
CVE-2021-24077 [CRITICAL] CVE-2021-24077: Windows Fax Service Remote Code Execution Vulnerability
Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2021-1722P2CRITICALCVSS 9.8≥ 10.0.0, < publication2021-02-25
CVE-2021-1722 [CRITICAL] CVE-2021-1722: Windows Fax Service Remote Code Execution Vulnerability
Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2019-1212P3CRITICALCVSS 9.8≥ 10.0.0, < publication2019-08-14
CVE-2019-1212 [CRITICAL] CWE-787 CVE-2019-1212: A memory corruption vulnerability exists in the Windows Server DHCP service when processing speciall
A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could cause the DHCP server service to stop responding.
To exploit the vulnerability, a remote unauthenticated attacker could send a specially crafted packet to an affected DH
nvd
CVE-2019-0736P3CRITICALCVSS 9.8≥ 10.0.0, < publication2019-08-14
CVE-2019-0736 [CRITICAL] CWE-787 CVE-2019-0736: A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine.
To exploit the vulnerability, an attacker could send specially crafted DHCP responses to a client.
The securi
nvd
CVE-2021-1700P3HIGHCVSS 8.8≥ 10.0.0, < publication2021-01-12
CVE-2021-1700 [HIGH] CVE-2021-1700: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-1701P3HIGHCVSS 8.8≥ 10.0.0, < publication2021-01-12
CVE-2021-1701 [HIGH] CVE-2021-1701: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-1667P3HIGHCVSS 8.8≥ 10.0.0, < publication2021-01-12
CVE-2021-1667 [HIGH] CVE-2021-1667: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-24088P3HIGHCVSS 8.8≥ 10.0.0, < publication2021-02-25
CVE-2021-24088 [HIGH] CVE-2021-24088: Windows Local Spooler Remote Code Execution Vulnerability
Windows Local Spooler Remote Code Execution Vulnerability
nvd
CVE-2021-28455P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.17134.22072021-05-11
CVE-2021-28455 [HIGH] CVE-2021-28455: Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability
Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability
nvd
CVE-2020-1112P3CRITICALCVSS 9.9≥ 10.0.0, < publication2020-05-21
CVE-2020-1112 [CRITICAL] CWE-434 CVE-2020-1112: An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Serv
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content. An attacker who successfully exploited this vulnerability could upload restricted file types to an IIS-hosted folder.
To exploit this vulnerability, an attacker would require permissions to up
nvd
CVE-2021-1666P3HIGHCVSS 8.8≥ 10.0.0, < publication2021-01-12
CVE-2021-1666 [HIGH] CVE-2021-1666: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-1658P3HIGHCVSS 8.8≥ 10.0.0, < publication2021-01-12
CVE-2021-1658 [HIGH] CVE-2021-1658: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-1660P3HIGHCVSS 8.8≥ 10.0.0, < publication2021-01-12
CVE-2021-1660 [HIGH] CVE-2021-1660: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-1664P3HIGHCVSS 8.8≥ 10.0.0, < publication2021-01-12
CVE-2021-1664 [HIGH] CVE-2021-1664: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-1671P3HIGHCVSS 8.8≥ 10.0.0, < publication2021-01-12
CVE-2021-1671 [HIGH] CVE-2021-1671: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-1673P3HIGHCVSS 8.8≥ 10.0.0, < publication2021-01-12
CVE-2021-1673 [HIGH] CVE-2021-1673: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-26881P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.17134.20872021-03-11
CVE-2021-26881 [HIGH] CVE-2021-26881: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2021-31194P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.17134.22072021-05-11
CVE-2021-31194 [HIGH] CVE-2021-31194: OLE Automation Remote Code Execution Vulnerability
OLE Automation Remote Code Execution Vulnerability
nvd
CVE-2021-27092P3CRITICALCVSS 9.8≥ 10.0.0, < publication2021-04-13
CVE-2021-27092 [CRITICAL] CVE-2021-27092: Azure AD Web Sign-in Security Feature Bypass Vulnerability
Azure AD Web Sign-in Security Feature Bypass Vulnerability
nvd
CVE-2019-0888P3HIGHCVSS 8.8≥ 10.0.0, < publication2019-06-12
CVE-2019-0888 [HIGH] CVE-2019-0888: A remote code execution vulnerability exists in the way that ActiveX Data Objects (ADO) handle objec
A remote code execution vulnerability exists in the way that ActiveX Data Objects (ADO) handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code with the victim user’s privileges.
An attacker could craft a website that exploits the vulnerability and then convince a victim user to visit the website.
The secu
nvd