cbcvebase.

Microsoft Windows 10 Version 1909 vulnerabilities

1,044 known vulnerabilities affecting microsoft/windows_10_version_1909.

Total CVEs
1,044
CISA KEV
34
actively exploited
Public exploits
28
Exploited in wild
51
Severity breakdown
CRITICAL32HIGH783MEDIUM226LOW3

Vulnerabilities

Page 3 of 53
CVE-2019-1224P1HIGHCVSS 7.5ExploitedRansomware≥ 10.0.0, < publication2019-08-14
CVE-2019-1224 [HIGH] CWE-200 CVE-2019-1224: An information disclosure vulnerability exists when the Windows RDP server improperly discloses the An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the system. To exploit this vulnerability, an attacker would have to connect remotely to an affected system and run a specially
nvd
CVE-2021-43207P1HIGHCVSS 7.8ExploitedRansomware≥ 10.0.0, < 10.0.18363.19772021-12-15
CVE-2021-43207 [HIGH] CVE-2021-43207: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2021-31969P2HIGHCVSS 7.8Exploited≥ 10.0.0, < 10.0.18363.16212021-06-08
CVE-2021-31969 [HIGH] CWE-269 CVE-2021-31969: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2021-26885P2HIGHCVSS 7.8Exploited≥ 10.0.0, < 10.0.18363.14402021-03-11
CVE-2021-26885 [HIGH] CVE-2021-26885: Windows WalletService Elevation of Privilege Vulnerability Windows WalletService Elevation of Privilege Vulnerability
nvd
CVE-2020-1013P2HIGHCVSS 8.1Exploited≥ 10.0.0, < publication2020-09-11
CVE-2020-1013 [HIGH] CVE-2020-1013: <p>An elevation of privilege vulnerability exists when Microsoft Windows processes group policy upda An elevation of privilege vulnerability exists when Microsoft Windows processes group policy updates. An attacker who successfully exploited this vulnerability could potentially escalate permissions or perform additional privileged actions on the target machine. To exploit this vulnerability, an attacker would need to launch a man-in-the-middle (MiTM) attack ag
nvd
CVE-2021-28442P2MEDIUMCVSS 6.5Exploited≥ 10.0.0, < publication2021-04-13
CVE-2021-28442 [MEDIUM] CVE-2021-28442: Windows TCP/IP Information Disclosure Vulnerability Windows TCP/IP Information Disclosure Vulnerability
nvd
CVE-2022-21874P2CRITICALCVSS 9.8Exploited≥ 10.0.0, < 10.0.18363.20372022-01-11
CVE-2022-21874 [CRITICAL] CVE-2022-21874: Windows Security Center API Remote Code Execution Vulnerability Windows Security Center API Remote Code Execution Vulnerability
nvd
CVE-2022-21898P3CRITICALCVSS 9.8Exploited≥ 10.0.0, < 10.0.18363.20372022-01-11
CVE-2022-21898 [CRITICAL] CVE-2022-21898: DirectX Graphics Kernel Remote Code Execution Vulnerability DirectX Graphics Kernel Remote Code Execution Vulnerability
nvd
CVE-2021-26424P2CRITICALCVSS 9.8≥ 10.0.0, < 10.0.18363.17342021-08-12
CVE-2021-26424 [CRITICAL] CVE-2021-26424: Windows TCP/IP Remote Code Execution Vulnerability Windows TCP/IP Remote Code Execution Vulnerability
nvd
CVE-2021-28476P2CRITICALCVSS 9.9≥ 10.0.0, < 10.0.18363.15562021-05-11
CVE-2021-28476 [CRITICAL] CVE-2021-28476: Windows Hyper-V Remote Code Execution Vulnerability Windows Hyper-V Remote Code Execution Vulnerability
nvd
CVE-2022-21972P2HIGHCVSS 8.1≥ 10.0.0, < 10.0.18363.22742022-05-10
CVE-2022-21972 [HIGH] CVE-2022-21972: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-23270P2HIGHCVSS 8.1≥ 10.0.0, < 10.0.18363.22742022-05-10
CVE-2022-23270 [HIGH] CVE-2022-23270: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-24497P2CRITICALCVSS 9.8≥ 10.0.0, < 10.0.18363.22122022-04-15
CVE-2022-24497 [CRITICAL] CVE-2022-24497: Windows Network File System Remote Code Execution Vulnerability Windows Network File System Remote Code Execution Vulnerability
nvd
CVE-2022-24491P2CRITICALCVSS 9.8≥ 10.0.0, < 10.0.18363.22122022-04-15
CVE-2022-24491 [CRITICAL] CVE-2022-24491: Windows Network File System Remote Code Execution Vulnerability Windows Network File System Remote Code Execution Vulnerability
nvd
CVE-2020-1337P3HIGHCVSS 7.8PoC≥ 10.0.0, < publication2020-08-17
CVE-2020-1337 [HIGH] CWE-367 CVE-2020-1337: An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly all An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts wit
nvd
CVE-2020-17136P3HIGHCVSS 7.8PoC≥ 10.0.0, < publication2020-12-10
CVE-2020-17136 [HIGH] CVE-2020-17136: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2021-24074P2CRITICALCVSS 9.8≥ 10.0.0, < publication2021-02-25
CVE-2021-24074 [CRITICAL] CVE-2021-24074: Windows TCP/IP Remote Code Execution Vulnerability Windows TCP/IP Remote Code Execution Vulnerability
nvd
CVE-2021-24094P2CRITICALCVSS 9.8≥ 10.0.0, < publication2021-02-25
CVE-2021-24094 [CRITICAL] CVE-2021-24094: Windows TCP/IP Remote Code Execution Vulnerability Windows TCP/IP Remote Code Execution Vulnerability
nvd
CVE-2021-24093P2HIGHCVSS 8.8≥ 10.0.0, < publication2021-02-25
CVE-2021-24093 [HIGH] CVE-2021-24093: Windows Graphics Component Remote Code Execution Vulnerability Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2019-1226P2CRITICALCVSS 9.8≥ 10.0.0, < publication2019-08-14
CVE-2019-1226 [CRITICAL] CVE-2019-1226: A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability cou
nvd
← Previous3 / 53Next →
Microsoft Windows 10 Version 1909 vulnerabilities | cvebase