Microsoft Windows 10 Version 1909 vulnerabilities
966 known vulnerabilities affecting microsoft/windows_10_version_1909.
Total CVEs
966
CISA KEV
33
actively exploited
Public exploits
26
Exploited in wild
48
Severity breakdown
CRITICAL31HIGH718MEDIUM214LOW3
Vulnerabilities
Page 44 of 49
CVE-2021-28316P4MEDIUMCVSS 4.6≥ 10.0.0, < publication2021-04-13
CVE-2021-28316 [MEDIUM] CVE-2021-28316: Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability
Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability
nvd
CVE-2022-24466P4MEDIUMCVSS 4.1≥ 10.0.0, < 10.0.18363.22742022-05-10
CVE-2022-24466 [MEDIUM] CVE-2022-24466: Windows Hyper-V Security Feature Bypass Vulnerability
Windows Hyper-V Security Feature Bypass Vulnerability
nvd
CVE-2021-24098P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-02-25
CVE-2021-24098 [MEDIUM] CVE-2021-24098: Windows Console Driver Denial of Service Vulnerability
Windows Console Driver Denial of Service Vulnerability
nvd
CVE-2022-22002P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.18363.20942022-02-09
CVE-2022-22002 [MEDIUM] CVE-2022-22002: Windows User Account Profile Picture Denial of Service Vulnerability
Windows User Account Profile Picture Denial of Service Vulnerability
nvd
CVE-2021-27094P4MEDIUMCVSS 4.4≥ 10.0.0, < publication2021-04-13
CVE-2021-27094 [MEDIUM] CVE-2021-27094: Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
nvd
CVE-2021-38631P4MEDIUMCVSS 4.4≥ 10.0.0, < 10.0.18363.19162021-11-10
CVE-2021-38631 [MEDIUM] CVE-2021-38631: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
nvd
CVE-2021-41371P4MEDIUMCVSS 4.4≥ 10.0.0, < 10.0.18363.19162021-11-10
CVE-2021-41371 [MEDIUM] CVE-2021-41371: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
nvd
CVE-2022-22710P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.18363.20942022-02-09
CVE-2022-22710 [MEDIUM] CVE-2022-22710: Windows Common Log File System Driver Denial of Service Vulnerability
Windows Common Log File System Driver Denial of Service Vulnerability
nvd
CVE-2021-28438P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-04-13
CVE-2021-28438 [MEDIUM] CVE-2021-28438: Windows Console Driver Denial of Service Vulnerability
Windows Console Driver Denial of Service Vulnerability
nvd
CVE-2021-28443P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-04-13
CVE-2021-28443 [MEDIUM] CVE-2021-28443: Windows Console Driver Denial of Service Vulnerability
Windows Console Driver Denial of Service Vulnerability
nvd
CVE-2020-17046P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17046 [MEDIUM] CVE-2020-17046: Windows Error Reporting Denial of Service Vulnerability
Windows Error Reporting Denial of Service Vulnerability
nvd
CVE-2021-28325MEDIUMCVSS 6.5≥ 10.0.0, < publication2021-04-13
CVE-2021-28325 [MEDIUM] Windows SMB Information Disclosure Vulnerability
Windows SMB Information Disclosure Vulnerability
Windows SMB Information Disclosure Vulnerability
cvelistv5
CVE-2021-24086HIGHCVSS 7.5≥ 10.0.0, < publication2021-02-25
CVE-2021-24086 [HIGH] Windows TCP/IP Denial of Service Vulnerability
Windows TCP/IP Denial of Service Vulnerability
Windows TCP/IP Denial of Service Vulnerability
cvelistv5
CVE-2022-21977P4LOWCVSS 3.3≥ 10.0.0, < 10.0.18363.21582022-03-09
CVE-2022-21977 [LOW] CVE-2022-21977: Media Foundation Information Disclosure Vulnerability
Media Foundation Information Disclosure Vulnerability
nvd
CVE-2020-1592P4LOWCVSS 3.3≥ 10.0.0, < publication2020-09-11
CVE-2020-1592 [LOW] CWE-665 CVE-2020-1592: <p>An information disclosure vulnerability exists when the Windows kernel improperly initializes obj
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.
To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.
The update addresse
nvd
CVE-2021-26414MEDIUMCVSS 4.8≥ 10.0.0, < 10.0.18363.23442021-06-08
CVE-2021-26414 [MEDIUM] Windows DCOM Server Security Feature Bypass
Windows DCOM Server Security Feature Bypass
Windows DCOM Server Security Feature Bypass
cvelistv5
CVE-2021-34480MEDIUMCVSS 6.8≥ 10.0.0, < 10.0.18363.17342021-08-12
CVE-2021-34480 [MEDIUM] Scripting Engine Memory Corruption Vulnerability
Scripting Engine Memory Corruption Vulnerability
Scripting Engine Memory Corruption Vulnerability
cvelistv5
CVE-2020-17096HIGHCVSS 7.5≥ 10.0.0, < publication2020-12-09
CVE-2020-17096 [HIGH] Windows NTFS Remote Code Execution Vulnerability
Windows NTFS Remote Code Execution Vulnerability
Windows NTFS Remote Code Execution Vulnerability
cvelistv5
CVE-2020-17140HIGHCVSS 8.1≥ 10.0.0, < publication2020-12-09
CVE-2020-17140 [HIGH] Windows SMB Information Disclosure Vulnerability
Windows SMB Information Disclosure Vulnerability
Windows SMB Information Disclosure Vulnerability
cvelistv5
CVE-2021-1678HIGHCVSS 8.8≥ 10.0.0, < 10.0.18363.18012021-01-12
CVE-2021-1678 [HIGH] Windows Print Spooler Spoofing Vulnerability
Windows Print Spooler Spoofing Vulnerability
Windows Print Spooler Spoofing Vulnerability
cvelistv5