Microsoft Windows 10 Version 20H2 vulnerabilities
1,259 known vulnerabilities affecting microsoft/windows_10_version_20h2.
Total CVEs
1,259
CISA KEV
53
actively exploited
Public exploits
38
Exploited in wild
75
Severity breakdown
CRITICAL41HIGH946MEDIUM268LOW4
Vulnerabilities
Page 15 of 63
CVE-2022-34714P3HIGHCVSS 8.1≥ 10.0.0, < 10.0.19042.18892022-08-09
CVE-2022-34714 [HIGH] CWE-94 CVE-2022-34714: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-35767P3HIGHCVSS 8.1≥ 10.0.0, < 10.0.19042.18892022-08-09
CVE-2022-35767 [HIGH] CWE-94 CVE-2022-35767: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-35766P3HIGHCVSS 8.1≥ 10.0.0, < 10.0.19042.18892022-08-09
CVE-2022-35766 [HIGH] CWE-94 CVE-2022-35766: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2023-28283P3HIGHCVSS 8.1≥ 10.0.0, < 10.0.19042.29652023-05-09
CVE-2023-28283 [HIGH] CWE-591 CVE-2023-28283: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2022-30139P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.19042.17662022-06-15
CVE-2022-30139 [HIGH] CVE-2022-30139: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2021-43883P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.14152021-12-15
CVE-2021-43883 [HIGH] CVE-2021-43883: Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2021-43893P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.19042.14152021-12-15
CVE-2021-43893 [HIGH] CWE-668 CVE-2021-43893: Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
nvd
CVE-2021-26863P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19043.8672021-03-11
CVE-2021-26863 [HIGH] CWE-269 CVE-2021-26863: Windows Win32k Elevation of Privilege Vulnerability
Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2022-29104P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.17062022-05-10
CVE-2022-29104 [HIGH] CVE-2022-29104: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2022-37975P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-37975 [HIGH] CVE-2022-37975: Windows Group Policy Elevation of Privilege Vulnerability
Windows Group Policy Elevation of Privilege Vulnerability
nvd
CVE-2023-21549P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.19042.24862023-01-10
CVE-2023-21549 [HIGH] CWE-285 CVE-2023-21549: Windows SMB Witness Service Elevation of Privilege Vulnerability
Windows SMB Witness Service Elevation of Privilege Vulnerability
nvd
CVE-2023-24864P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.19042.27282023-03-14
CVE-2023-24864 [HIGH] CWE-191 CVE-2023-24864: Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-21685P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.19042.26042023-02-14
CVE-2023-21685 [HIGH] CWE-20 CVE-2023-21685: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-21799P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.19042.26042023-02-14
CVE-2023-21799 [HIGH] CWE-122 CVE-2023-21799: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-21686P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.19042.26042023-02-14
CVE-2023-21686 [HIGH] CWE-190 CVE-2023-21686: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-37989P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-37989 [HIGH] CVE-2022-37989: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
nvd
CVE-2023-24947P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.19042.29652023-05-09
CVE-2023-24947 [HIGH] CWE-416 CVE-2023-24947: Windows Bluetooth Driver Remote Code Execution Vulnerability
Windows Bluetooth Driver Remote Code Execution Vulnerability
nvd
CVE-2022-37987P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-37987 [HIGH] CVE-2022-37987: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
nvd
CVE-2022-41113P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.24862022-11-09
CVE-2022-41113 [HIGH] CVE-2022-41113: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
nvd
CVE-2022-24500HIGHCVSS 8.8ExploitedRansomware≥ 10.0.0, < 10.0.19042.16452022-04-15
CVE-2022-24500 [HIGH] Windows SMB Remote Code Execution Vulnerability
Windows SMB Remote Code Execution Vulnerability
Windows SMB Remote Code Execution Vulnerability
cvelistv5