Microsoft Windows 10 Version 20H2 vulnerabilities

1,260 known vulnerabilities affecting microsoft/windows_10_version_20h2.

Total CVEs
1,260
CISA KEV
53
actively exploited
Public exploits
11
Exploited in wild
63
Severity breakdown
CRITICAL41HIGH947MEDIUM268LOW4

Vulnerabilities

Page 4 of 63
CVE-2023-28224HIGHCVSS 7.1≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-28224 [HIGH] CWE-591 CVE-2023-28224: Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-28216HIGHCVSS 7.0≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-28216 [HIGH] CVE-2023-28216: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2023-28297HIGHCVSS 8.8≥ 10.0.0, < 10.0.19042.24862023-04-11
CVE-2023-28297 [HIGH] CWE-416 CVE-2023-28297: Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2023-24926HIGHCVSS 8.8≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-24926 [HIGH] CWE-122 CVE-2023-24926: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-28275HIGHCVSS 8.8≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-28275 [HIGH] CWE-122 CVE-2023-28275: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-24929HIGHCVSS 8.8≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-24929 [HIGH] CWE-843 CVE-2023-24929: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-28219HIGHCVSS 8.1≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-28219 [HIGH] CWE-591 CVE-2023-28219: Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-24912HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-24912 [HIGH] CWE-122 CVE-2023-24912: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2023-28218HIGHCVSS 7.0≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-28218 [HIGH] CWE-122 CVE-2023-28218: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2023-21727HIGHCVSS 8.8≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-21727 [HIGH] CWE-122 CVE-2023-21727: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-28229HIGHCVSS 7.0KEV≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-28229 [HIGH] CWE-591 CVE-2023-28229: Windows CNG Key Isolation Service Elevation of Privilege Vulnerability Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2023-28225HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-28225 [HIGH] CWE-122 Windows NTLM Elevation of Privilege Vulnerability Windows NTLM Elevation of Privilege Vulnerability Windows NTLM Elevation of Privilege Vulnerability
cvelistv5
CVE-2023-28243HIGHCVSS 8.8≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-28243 [HIGH] CWE-843 CVE-2023-28243: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-24885HIGHCVSS 8.8≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-24885 [HIGH] CWE-843 CVE-2023-24885: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-28222HIGHCVSS 7.1≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-28222 [HIGH] CWE-59 CVE-2023-28222: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2023-28274HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-28274 [HIGH] CWE-20 CVE-2023-28274: Windows Win32k Elevation of Privilege Vulnerability Windows Win32k Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2023-24924HIGHCVSS 8.8≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-24924 [HIGH] CWE-125 CVE-2023-24924: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-28237HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-28237 [HIGH] CWE-190 CVE-2023-28237: Windows Kernel Remote Code Execution Vulnerability Windows Kernel Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-28235MEDIUMCVSS 6.8≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-28235 [MEDIUM] CVE-2023-28235: Windows Lock Screen Security Feature Bypass Vulnerability Windows Lock Screen Security Feature Bypass Vulnerability
cvelistv5nvd
CVE-2023-28276MEDIUMCVSS 4.4≥ 10.0.0, < 10.0.19042.28462023-04-11
CVE-2023-28276 [MEDIUM] CVE-2023-28276: Windows Group Policy Security Feature Bypass Vulnerability Windows Group Policy Security Feature Bypass Vulnerability
cvelistv5nvd