Microsoft Windows 10 Version 20H2 vulnerabilities

1,260 known vulnerabilities affecting microsoft/windows_10_version_20h2.

Total CVEs
1,260
CISA KEV
53
actively exploited
Public exploits
20
Exploited in wild
63
Severity breakdown
CRITICAL41HIGH947MEDIUM268LOW4

Vulnerabilities

Page 16 of 63
CVE-2022-37997HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-37997 [HIGH] CVE-2022-37997: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2022-38041HIGHCVSS 7.5≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-38041 [HIGH] CVE-2022-38041: Windows Secure Channel Denial of Service Vulnerability Windows Secure Channel Denial of Service Vulnerability
cvelistv5nvd
CVE-2022-38046HIGHCVSS 7.5≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-38046 [HIGH] CVE-2022-38046: Web Account Manager Information Disclosure Vulnerability Web Account Manager Information Disclosure Vulnerability
cvelistv5nvd
CVE-2022-37975HIGHCVSS 8.8≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-37975 [HIGH] CVE-2022-37975: Windows Group Policy Elevation of Privilege Vulnerability Windows Group Policy Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2022-37973HIGHCVSS 7.7≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-37973 [HIGH] CVE-2022-37973: Windows Local Session Manager (LSM) Denial of Service Vulnerability Windows Local Session Manager (LSM) Denial of Service Vulnerability
cvelistv5nvd
CVE-2022-24504HIGHCVSS 8.1≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-24504 [HIGH] CWE-362 CVE-2022-24504: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2022-38042HIGHCVSS 7.1≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-38042 [HIGH] CVE-2022-38042: Active Directory Domain Services Elevation of Privilege Vulnerability Active Directory Domain Services Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2022-37990HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-37990 [HIGH] CVE-2022-37990: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2022-38045HIGHCVSS 8.8≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-38045 [HIGH] CVE-2022-38045: Windows Server Service Elevation of Privilege Vulnerability Windows Server Service Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2022-38037HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-38037 [HIGH] CVE-2022-38037: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2022-37989HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-37989 [HIGH] CVE-2022-37989: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2022-37978HIGHCVSS 7.5≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-37978 [HIGH] CVE-2022-37978: Windows Active Directory Certificate Services Security Feature Bypass Windows Active Directory Certificate Services Security Feature Bypass
cvelistv5nvd
CVE-2022-37980HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-37980 [HIGH] CVE-2022-37980: Windows DHCP Client Elevation of Privilege Vulnerability Windows DHCP Client Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2022-38038HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-38038 [HIGH] CVE-2022-38038: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2022-38044HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-38044 [HIGH] CVE-2022-38044: Windows CD-ROM File System Driver Remote Code Execution Vulnerability Windows CD-ROM File System Driver Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2022-37993HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-37993 [HIGH] CVE-2022-37993: Windows Group Policy Preference Client Elevation of Privilege Vulnerability Windows Group Policy Preference Client Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2022-38031HIGHCVSS 8.8≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-38031 [HIGH] CVE-2022-38031: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2022-37998HIGHCVSS 7.7≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-37998 [HIGH] CVE-2022-37998: Windows Local Session Manager (LSM) Denial of Service Vulnerability Windows Local Session Manager (LSM) Denial of Service Vulnerability
cvelistv5nvd
CVE-2022-37995HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-37995 [HIGH] CVE-2022-37995: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2022-38047HIGHCVSS 8.1≥ 10.0.0, < 10.0.19042.21302022-10-11
CVE-2022-38047 [HIGH] CWE-362 CVE-2022-38047: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
cvelistv5nvd