Microsoft Windows 10 Version 1909 vulnerabilities
1,044 known vulnerabilities affecting microsoft/windows_10_version_1909.
Total CVEs
1,044
CISA KEV
34
actively exploited
Public exploits
28
Exploited in wild
51
Severity breakdown
CRITICAL32HIGH783MEDIUM226LOW3
Vulnerabilities
Page 13 of 53
CVE-2020-1039P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-09-11
CVE-2020-1039 [HIGH] CVE-2020-1039: <p>A remote code execution vulnerability exists when the Windows Jet Database Engine improperly hand
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.
An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file.
The update addresses the vulnerabili
nvd
CVE-2020-16967P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16967 [HIGH] CVE-2020-16967: <p>A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handle
A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An a
nvd
CVE-2020-16924P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16924 [HIGH] CVE-2020-16924: <p>A remote code execution vulnerability exists when the Windows Jet Database Engine improperly hand
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.
An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file.
The update addresses the vulnerabi
nvd
CVE-2021-1668P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-01-12
CVE-2021-1668 [HIGH] CVE-2021-1668: Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability
Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability
nvd
CVE-2020-17022P3HIGHCVSS 7.8vN/A2020-10-16
CVE-2020-17022 [HIGH] CVE-2020-17022: <p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library han
A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code.
Exploitation of the vulnerability requires that a program process a specially crafted image file.
The update addresses the vulnerability by correcting ho
nvd
CVE-2020-1252P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-09-11
CVE-2020-1252 [HIGH] CVE-2020-1252: <p>A remote code execution vulnerability exists when Windows improperly handles objects in memory. T
A remote code execution vulnerability exists when Windows improperly handles objects in memory. To exploit the vulnerability an attacker would have to convince a user to run a specially crafted application.
An attacker who successfully exploited this vulnerability could execute arbitrary code and take control of an affected system. An attacker could then instal
nvd
CVE-2020-16923P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16923 [HIGH] CVE-2020-16923: <p>A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system.
To exploit the vulnerability, a user would have to open a specially crafted file.
The security update addresses the vulnerability by corre
nvd
CVE-2021-26415P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-04-13
CVE-2021-26415 [HIGH] CWE-20 CVE-2021-26415: Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2021-34504P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.18363.16792021-07-14
CVE-2021-34504 [HIGH] CVE-2021-34504: Windows Address Book Remote Code Execution Vulnerability
Windows Address Book Remote Code Execution Vulnerability
nvd
CVE-2021-26868P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.18363.14402021-03-11
CVE-2021-26868 [HIGH] CWE-119 CVE-2021-26868: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2021-26861P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.18363.14402021-03-11
CVE-2021-26861 [HIGH] CVE-2021-26861: Windows Graphics Component Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2022-21878P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.18363.20372022-01-11
CVE-2022-21878 [HIGH] CVE-2022-21878: Windows Geolocation Service Remote Code Execution Vulnerability
Windows Geolocation Service Remote Code Execution Vulnerability
nvd
CVE-2022-21992P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.18363.20942022-02-09
CVE-2022-21992 [HIGH] CVE-2022-21992: Windows Mobile Device Management Remote Code Execution Vulnerability
Windows Mobile Device Management Remote Code Execution Vulnerability
nvd
CVE-2022-29115P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.18363.22742022-05-10
CVE-2022-29115 [HIGH] CVE-2022-29115: Windows Fax Service Remote Code Execution Vulnerability
Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2021-27089P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-04-13
CVE-2021-27089 [HIGH] CVE-2021-27089: Microsoft Internet Messaging API Remote Code Execution Vulnerability
Microsoft Internet Messaging API Remote Code Execution Vulnerability
nvd
CVE-2022-21913P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.18363.20372022-01-11
CVE-2022-21913 [HIGH] CVE-2022-21913: Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass
Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass
nvd
CVE-2022-21838P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.18363.20372022-01-11
CVE-2022-21838 [HIGH] CWE-59 CVE-2022-21838: Windows Cleanup Manager Elevation of Privilege Vulnerability
Windows Cleanup Manager Elevation of Privilege Vulnerability
nvd
CVE-2022-21905P3HIGHCVSS 8.0≥ 10.0.0, < 10.0.18363.20372022-01-11
CVE-2022-21905 [HIGH] CVE-2022-21905: Windows Hyper-V Security Feature Bypass Vulnerability
Windows Hyper-V Security Feature Bypass Vulnerability
nvd
CVE-2022-24485P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.18363.22122022-04-15
CVE-2022-24485 [HIGH] CVE-2022-24485: Win32 File Enumeration Remote Code Execution Vulnerability
Win32 File Enumeration Remote Code Execution Vulnerability
nvd
CVE-2020-0790P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-09-11
CVE-2020-0790 [HIGH] CVE-2020-0790: <p>A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.
This vulnerability by itself does not allow arbitrary code execution; however, it could allow arbitrary code to be run if th
nvd