cbcvebase.

Microsoft Windows 10 Version 2004 vulnerabilities

755 known vulnerabilities affecting microsoft/windows_10_version_2004.

Total CVEs
755
CISA KEV
26
actively exploited
Public exploits
17
Exploited in wild
35
Severity breakdown
CRITICAL23HIGH553MEDIUM177LOW2

Vulnerabilities

Page 12 of 38
CVE-2020-17035P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-11-11
CVE-2020-17035 [HIGH] CVE-2020-17035: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2021-36963P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.12372021-09-15
CVE-2021-36963 [HIGH] CWE-269 CVE-2021-36963: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2020-17134P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-12-10
CVE-2020-17134 [HIGH] CVE-2020-17134: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2021-26873P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19043.8672021-03-11
CVE-2021-26873 [HIGH] CWE-59 CVE-2021-26873: Windows User Profile Service Elevation of Privilege Vulnerability Windows User Profile Service Elevation of Privilege Vulnerability
nvd
CVE-2020-1030P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-09-11
CVE-2020-1030 [HIGH] CVE-2020-1030: <p>An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full us
nvd
CVE-2020-1571P3HIGHCVSS 7.8vN/A2020-08-17
CVE-2020-1571 [HIGH] CWE-276 CVE-2020-1571: An elevation of privilege vulnerability exists in Windows Setup in the way it handles permissions. A An elevation of privilege vulnerability exists in Windows Setup in the way it handles permissions. A locally authenticated attacker could run arbitrary code with elevated system privileges. After successfully exploiting the vulnerability, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
nvd
CVE-2021-31954P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.10522021-06-08
CVE-2021-31954 [HIGH] CWE-269 CVE-2021-31954: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2021-38633P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.12372021-09-15
CVE-2021-38633 [HIGH] CWE-269 CVE-2021-38633: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2020-16935P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16935 [HIGH] CVE-2020-16935: <p>An elevation of privilege vulnerability exists when Windows improperly handles COM object creatio An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that coul
nvd
CVE-2020-16913P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16913 [HIGH] CVE-2020-16913: <p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fai An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To expl
nvd
CVE-2020-16907P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16907 [HIGH] CVE-2020-16907: <p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fai An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To expl
nvd
CVE-2021-31169P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.9822021-05-11
CVE-2021-31169 [HIGH] CWE-269 CVE-2021-31169: Windows Container Manager Service Elevation of Privilege Vulnerability Windows Container Manager Service Elevation of Privilege Vulnerability
nvd
CVE-2021-31168P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.9822021-05-11
CVE-2021-31168 [HIGH] CWE-269 CVE-2021-31168: Windows Container Manager Service Elevation of Privilege Vulnerability Windows Container Manager Service Elevation of Privilege Vulnerability
nvd
CVE-2021-31165P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.9822021-05-11
CVE-2021-31165 [HIGH] CWE-863 CVE-2021-31165: Windows Container Manager Service Elevation of Privilege Vulnerability Windows Container Manager Service Elevation of Privilege Vulnerability
nvd
CVE-2020-16916P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16916 [HIGH] CVE-2020-16916: <p>An elevation of privilege vulnerability exists when Windows improperly handles COM object creatio An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that coul
nvd
CVE-2020-16908P3HIGHCVSS 7.8vN/A2020-10-16
CVE-2020-16908 [HIGH] CVE-2020-16908: <p>An elevation of privilege vulnerability exists in Windows Setup in the way it handles directories An elevation of privilege vulnerability exists in Windows Setup in the way it handles directories. A locally authenticated attacker could run arbitrary code with elevated system privileges. After successfully exploiting the vulnerability, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. The s
nvd
CVE-2021-1657P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-01-12
CVE-2021-1657 [HIGH] CWE-269 CVE-2021-1657: Windows Fax Compose Form Remote Code Execution Vulnerability Windows Fax Compose Form Remote Code Execution Vulnerability
nvd
CVE-2020-16902P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16902 [HIGH] CWE-269 CVE-2020-16902: <p>An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installe An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create
nvd
CVE-2020-1053P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-09-11
CVE-2020-1053 [HIGH] CVE-2020-1053: <p>An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would
nvd
CVE-2020-1598P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-09-11
CVE-2020-1598 [HIGH] CVE-2020-1598: <p>An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) se An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full us
nvd
Microsoft Windows 10 Version 2004 vulnerabilities | cvebase