Microsoft Windows 10 Version 1909 vulnerabilities
966 known vulnerabilities affecting microsoft/windows_10_version_1909.
Total CVEs
966
CISA KEV
33
actively exploited
Public exploits
26
Exploited in wild
48
Severity breakdown
CRITICAL31HIGH718MEDIUM214LOW3
Vulnerabilities
Page 9 of 49
CVE-2021-40461P3CRITICALCVSS 9.0≥ 10.0.0, < 10.0.18363.18542021-10-13
CVE-2021-40461 [CRITICAL] CVE-2021-40461: Windows Hyper-V Remote Code Execution Vulnerability
Windows Hyper-V Remote Code Execution Vulnerability
nvd
CVE-2021-34447P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.18363.16792021-07-16
CVE-2021-34447 [HIGH] CVE-2021-34447: Windows MSHTML Platform Remote Code Execution Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2022-26919P3HIGHCVSS 8.1≥ 10.0.0, < 10.0.18363.22122022-04-15
CVE-2022-26919 [HIGH] CVE-2022-26919: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2020-1585P3HIGHCVSS 8.8vN/A2020-08-17
CVE-2020-1585 [HIGH] CVE-2020-1585: A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handle
A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
Exploitation of the vuln
nvd
CVE-2022-21893P3HIGHCVSS 8.0≥ 10.0.0, < 10.0.18363.20372022-01-11
CVE-2022-21893 [HIGH] CVE-2022-21893: Remote Desktop Protocol Remote Code Execution Vulnerability
Remote Desktop Protocol Remote Code Execution Vulnerability
nvd
CVE-2020-16899P3HIGHCVSS 7.5≥ 10.0.0, < publication2020-10-16
CVE-2020-16899 [HIGH] CVE-2020-16899: <p>A denial of service vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6
A denial of service vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could cause a target system to stop responding.
To exploit this vulnerability, an attacker would have to send specially crafted ICMPv6 Router Advertisement packets to a remote W
nvd
CVE-2022-24502P3MEDIUMCVSS 6.5≥ 10.0.0, < 10.0.18363.21582022-03-09
CVE-2022-24502 [MEDIUM] CVE-2022-24502: Windows HTML Platforms Security Feature Bypass Vulnerability
Windows HTML Platforms Security Feature Bypass Vulnerability
nvd
CVE-2022-24492P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.18363.22122022-04-15
CVE-2022-24492 [HIGH] CVE-2022-24492: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2020-1593P3HIGHCVSS 8.8≥ 10.0.0, < publication2020-09-11
CVE-2020-1593 [HIGH] CVE-2020-1593: <p>A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles
A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system.
There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user
nvd
CVE-2022-23253P3MEDIUMCVSS 6.5≥ 10.0.0, < 10.0.18363.21582022-03-09
CVE-2022-23253 [MEDIUM] CVE-2022-23253: Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
nvd
CVE-2022-22019P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.18363.22742022-05-10
CVE-2022-22019 [HIGH] CVE-2022-22019: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-26876P3HIGHCVSS 8.8≥ 10.0.0, < publication2021-03-11
CVE-2021-26876 [HIGH] CVE-2021-26876: OpenType Font Parsing Remote Code Execution Vulnerability
OpenType Font Parsing Remote Code Execution Vulnerability
nvd
CVE-2022-21857P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.18363.20372022-01-11
CVE-2022-21857 [HIGH] CVE-2022-21857: Active Directory Domain Services Elevation of Privilege Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
nvd
CVE-2022-24528P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.18363.22122022-04-15
CVE-2022-24528 [HIGH] CVE-2022-24528: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-33750P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.18363.16792021-07-14
CVE-2021-33750 [HIGH] CVE-2021-33750: Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
nvd
CVE-2021-33749P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.18363.16792021-07-14
CVE-2021-33749 [HIGH] CVE-2021-33749: Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
nvd
CVE-2021-33752P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.18363.16792021-07-14
CVE-2021-33752 [HIGH] CVE-2021-33752: Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
nvd
CVE-2021-33756P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.18363.16792021-07-14
CVE-2021-33756 [HIGH] CVE-2021-33756: Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
nvd
CVE-2021-41342P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.18363.18542021-10-13
CVE-2021-41342 [HIGH] CVE-2021-41342: Windows MSHTML Platform Remote Code Execution Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2020-16891P3HIGHCVSS 8.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16891 [HIGH] CWE-20 CVE-2020-16891: <p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to prope
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrar
nvd