Microsoft Windows_10
4057 CVEs affecting Microsoft Windows_10. Latest disclosed: 2023-10-10. Critical: 99, High: 2796.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-1467 | Critical | 10.0 | 2020-08-17 | An elevation of privilege vulnerability exists when Windows improperly handles hard links. An attacker who successfully exploited this vulnerability could over… |
CVE-2019-14678 | Critical | 10.0 | 2019-11-14 | SAS XML Mapper 9.45 has an XML External Entity (XXE) vulnerability that can be leveraged by malicious attackers in multiple ways. Examples are Local File Readi… |
CVE-2021-26424 | Critical | 9.9 | 2021-08-12 | Windows TCP/IP Remote Code Execution Vulnerability |
CVE-2021-28476 | Critical | 9.9 | 2021-05-11 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2021-26867 | Critical | 9.9 | 2021-03-11 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2020-1112 | Critical | 9.9 | 2020-05-21 | An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content… |
CVE-2019-1384 | Critical | 9.9 | 2019-11-12 | A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an a… |
CVE-2019-1365 | Critical | 9.9 | 2019-10-10 | An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who su… |
CVE-2023-36911 | Critical | 9.8 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36910 | Critical | 9.8 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-29412 | Critical | 9.8 | 2023-04-18 | CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution… |
CVE-2023-29411 | Critical | 9.8 | 2023-04-18 | A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential remo… |
CVE-2023-21803 | Critical | 9.8 | 2023-02-14 | Windows iSCSI Discovery Service Remote Code Execution Vulnerability |
CVE-2022-42971 | Critical | 9.8 | 2023-02-01 | A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause remote code execution when the attacker uploads a malicious JS… |
CVE-2022-42970 | Critical | 9.8 | 2023-02-01 | A CWE-306: Missing Authentication for Critical Function The software does not perform any authentication for functionality that requires a provable user identi… |
CVE-2022-34722 | Critical | 9.8 | 2022-09-13 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
CVE-2022-34721 | Critical | 9.8 | 2022-09-13 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
CVE-2022-34718 | Critical | 9.8 | 2022-09-13 | Windows TCP/IP Remote Code Execution Vulnerability |
CVE-2022-30133 | Critical | 9.8 | 2022-08-09 | Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability |
CVE-2022-29130 | Critical | 9.8 | 2022-05-10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |