Microsoft Windows 10 Version 1909 vulnerabilities
1,044 known vulnerabilities affecting microsoft/windows_10_version_1909.
Total CVEs
1,044
CISA KEV
34
actively exploited
Public exploits
28
Exploited in wild
51
Severity breakdown
CRITICAL32HIGH783MEDIUM226LOW3
Vulnerabilities
Page 44 of 53
CVE-2020-1119P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-09-11
CVE-2020-1119 [MEDIUM] CVE-2020-1119: <p>An information disclosure vulnerability exists when StartTileData.dll improperly handles objects
An information disclosure vulnerability exists when StartTileData.dll improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.
To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.
The
nvd
CVE-2020-0914P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-09-11
CVE-2020-0914 [MEDIUM] CVE-2020-0914: <p>An information disclosure vulnerability exists when the Windows State Repository Service improper
An information disclosure vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.
An attacker could exploit this vulnerability by running a specially crafted application on the victim system.
nvd
CVE-2020-1250P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-09-11
CVE-2020-1250 [MEDIUM] CVE-2020-1250: <p>An information disclosure vulnerability exists when the win32k component improperly provides kern
An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.
To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application
nvd
CVE-2021-31970P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.18363.16212021-06-08
CVE-2021-31970 [MEDIUM] CWE-639 CVE-2021-31970: Windows TCP/IP Driver Security Feature Bypass Vulnerability
Windows TCP/IP Driver Security Feature Bypass Vulnerability
nvd
CVE-2022-22010P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.18363.21582022-03-09
CVE-2022-22010 [MEDIUM] CVE-2022-22010: Media Foundation Information Disclosure Vulnerability
Media Foundation Information Disclosure Vulnerability
nvd
CVE-2022-24483P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.18363.22122022-04-15
CVE-2022-24483 [MEDIUM] CVE-2022-24483: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2021-31184P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.18363.15562021-05-11
CVE-2021-31184 [MEDIUM] CVE-2021-31184: Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability
Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability
nvd
CVE-2020-17029P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17029 [MEDIUM] CVE-2020-17029: Windows Canonical Display Driver Information Disclosure Vulnerability
Windows Canonical Display Driver Information Disclosure Vulnerability
nvd
CVE-2021-1676P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-01-12
CVE-2021-1676 [MEDIUM] CVE-2021-1676: Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
nvd
CVE-2020-17000P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17000 [MEDIUM] CVE-2020-17000: Remote Desktop Protocol Client Information Disclosure Vulnerability
Remote Desktop Protocol Client Information Disclosure Vulnerability
nvd
CVE-2020-17056P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17056 [MEDIUM] CVE-2020-17056: Windows Network File System Information Disclosure Vulnerability
Windows Network File System Information Disclosure Vulnerability
nvd
CVE-2021-1637P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-01-12
CVE-2021-1637 [MEDIUM] CVE-2021-1637: Windows DNS Query Information Disclosure Vulnerability
Windows DNS Query Information Disclosure Vulnerability
nvd
CVE-2022-23281P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.18363.21582022-03-09
CVE-2022-23281 [MEDIUM] CVE-2022-23281: Windows Common Log File System Driver Information Disclosure Vulnerability
Windows Common Log File System Driver Information Disclosure Vulnerability
nvd
CVE-2020-1485P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-08-17
CVE-2020-1485 [MEDIUM] CVE-2020-1485: An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service impr
An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.
To exploit the vulnerability, an authenticated attacker could connect an imaging device (camera,
nvd
CVE-2020-1084P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-05-21
CVE-2020-1084 [MEDIUM] CWE-20 CVE-2020-1084: A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service fails
A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service fails to validate certain function values.
An attacker who successfully exploited this vulnerability could deny dependent security feature functionality.
To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially
nvd
CVE-2021-34509P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.18363.16792021-07-14
CVE-2021-34509 [MEDIUM] CVE-2021-34509: Storage Spaces Controller Information Disclosure Vulnerability
Storage Spaces Controller Information Disclosure Vulnerability
nvd
CVE-2021-33763P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.18363.16792021-07-14
CVE-2021-33763 [MEDIUM] CVE-2021-33763: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2021-38636P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.18363.18012021-09-15
CVE-2021-38636 [MEDIUM] CVE-2021-38636: Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
nvd
CVE-2021-38635P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.18363.18012021-09-15
CVE-2021-38635 [MEDIUM] CVE-2021-38635: Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
nvd
CVE-2021-36969P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.18363.18012021-09-15
CVE-2021-36969 [MEDIUM] CVE-2021-36969: Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
nvd