cbcvebase.

Microsoft Windows 10 Version 20H2 vulnerabilities

1,259 known vulnerabilities affecting microsoft/windows_10_version_20h2.

Total CVEs
1,259
CISA KEV
53
actively exploited
Public exploits
38
Exploited in wild
75
Severity breakdown
CRITICAL41HIGH946MEDIUM268LOW4

Vulnerabilities

Page 4 of 63
CVE-2023-21554P1CRITICALCVSS 9.8PoC≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-21554 [CRITICAL] CWE-20 CVE-2023-21554: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2021-31969P2HIGHCVSS 7.8Exploited≥ 10.0.0, < 10.0.19042.10522021-06-08
CVE-2021-31969 [HIGH] CWE-269 CVE-2021-31969: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-29324P2MEDIUMCVSS 6.5Exploited≥ 10.0.0, < 10.0.19042.29652023-05-09
CVE-2023-29324 [MEDIUM] CWE-73 CVE-2023-29324: Windows MSHTML Platform Security Feature Bypass Vulnerability Windows MSHTML Platform Security Feature Bypass Vulnerability
nvd
CVE-2023-28218P2HIGHCVSS 7.0Exploited≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-28218 [HIGH] CWE-122 CVE-2023-28218: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2021-26885P2HIGHCVSS 7.8Exploited≥ 10.0.0, < publication2021-03-11
CVE-2021-26885 [HIGH] CVE-2021-26885: Windows WalletService Elevation of Privilege Vulnerability Windows WalletService Elevation of Privilege Vulnerability
nvd
CVE-2022-30170P2HIGHCVSS 7.3Exploited≥ 10.0.0, < 10.0.19042.20062022-09-13
CVE-2022-30170 [HIGH] CVE-2022-30170: Windows Credential Roaming Service Elevation of Privilege Vulnerability Windows Credential Roaming Service Elevation of Privilege Vulnerability
nvd
CVE-2021-28442P2MEDIUMCVSS 6.5Exploited≥ 10.0.0, < publication2021-04-13
CVE-2021-28442 [MEDIUM] CVE-2021-28442: Windows TCP/IP Information Disclosure Vulnerability Windows TCP/IP Information Disclosure Vulnerability
nvd
CVE-2022-21874P2CRITICALCVSS 9.8Exploited≥ 10.0.0, < 10.0.19042.14662022-01-11
CVE-2022-21874 [CRITICAL] CVE-2022-21874: Windows Security Center API Remote Code Execution Vulnerability Windows Security Center API Remote Code Execution Vulnerability
nvd
CVE-2022-21898P3CRITICALCVSS 9.8Exploited≥ 10.0.0, < 10.0.19042.14662022-01-11
CVE-2022-21898 [CRITICAL] CVE-2022-21898: DirectX Graphics Kernel Remote Code Execution Vulnerability DirectX Graphics Kernel Remote Code Execution Vulnerability
nvd
CVE-2021-26424P2CRITICALCVSS 9.8≥ 10.0.0, < 10.0.19042.11652021-08-12
CVE-2021-26424 [CRITICAL] CVE-2021-26424: Windows TCP/IP Remote Code Execution Vulnerability Windows TCP/IP Remote Code Execution Vulnerability
nvd
CVE-2022-34718P2CRITICALCVSS 9.8≥ 10.0.0, < 10.0.19042.20062022-09-13
CVE-2022-34718 [CRITICAL] CVE-2022-34718: Windows TCP/IP Remote Code Execution Vulnerability Windows TCP/IP Remote Code Execution Vulnerability
nvd
CVE-2022-21972P2HIGHCVSS 8.1≥ 10.0.0, < 10.0.19042.17062022-05-10
CVE-2022-21972 [HIGH] CVE-2022-21972: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-37958P2HIGHCVSS 8.1≥ 10.0.0, < 10.0.19042.20062022-09-13
CVE-2022-37958 [HIGH] CVE-2022-37958: SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
nvd
CVE-2022-23270P2HIGHCVSS 8.1≥ 10.0.0, < 10.0.19042.17062022-05-10
CVE-2022-23270 [HIGH] CVE-2022-23270: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-24497P2CRITICALCVSS 9.8≥ 10.0.0, < 10.0.19042.16452022-04-15
CVE-2022-24497 [CRITICAL] CVE-2022-24497: Windows Network File System Remote Code Execution Vulnerability Windows Network File System Remote Code Execution Vulnerability
nvd
CVE-2023-21690P2CRITICALCVSS 9.8≥ 10.0.0, < 10.0.19042.26042023-02-14
CVE-2023-21690 [CRITICAL] CWE-122 CVE-2023-21690: Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
nvd
CVE-2022-24491P2CRITICALCVSS 9.8≥ 10.0.0, < 10.0.19042.16452022-04-15
CVE-2022-24491 [CRITICAL] CVE-2022-24491: Windows Network File System Remote Code Execution Vulnerability Windows Network File System Remote Code Execution Vulnerability
nvd
CVE-2023-21689P2CRITICALCVSS 9.8≥ 10.0.0, < 10.0.19042.26042023-02-14
CVE-2023-21689 [CRITICAL] CWE-122 CVE-2023-21689: Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
nvd
CVE-2020-17136P3HIGHCVSS 7.8PoC≥ 10.0.0, < publication2020-12-10
CVE-2020-17136 [HIGH] CVE-2020-17136: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-21692P2CRITICALCVSS 9.8≥ 10.0.0, < 10.0.19042.26042023-02-14
CVE-2023-21692 [CRITICAL] CWE-122 CVE-2023-21692: Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
nvd
Microsoft Windows 10 Version 20H2 vulnerabilities | cvebase