Microsoft Windows_10_1709
60 CVEs affecting Microsoft Windows_10_1709. Latest disclosed: 2024-08-07. Critical: 1, High: 53.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-0646 | Critical | 9.8 | 2020-01-14 | A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Inje… |
CVE-2020-1020 | High | 8.8 | 2020-04-15 | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-mast… |
CVE-2019-0903 | High | 8.8 | 2019-05-16 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code E… |
CVE-2019-0541 | High | 8.8 | 2019-01-08 | A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerabili… |
CVE-2018-8414 | High | 8.8 | 2018-08-15 | A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerabili… |
CVE-2018-0824 | High | 8.8 | 2018-05-09 | A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows… |
CVE-2020-0601 | High | 8.1 | 2020-01-14 | A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit t… |
CVE-2023-21808 | High | 7.8 | 2023-02-14 | .NET and Visual Studio Remote Code Execution Vulnerability |
CVE-2022-38396 | High | 7.8 | 2023-02-12 | HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via ex… |
CVE-2020-1464 | High | 7.8 | 2020-08-17 | A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass secu… |
CVE-2020-1380 | High | 7.8 | 2020-08-17 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corru… |
CVE-2020-0986 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege V… |
CVE-2020-1054 | High | 7.8 | 2020-05-21 | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation… |
CVE-2020-1027 | High | 7.8 | 2020-04-15 | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnera… |
CVE-2020-0938 | High | 7.8 | 2020-04-15 | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-mast… |
CVE-2020-0787 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows… |
CVE-2020-0683 | High | 7.8 | 2020-02-11 | An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege… |
CVE-2020-0638 | High | 7.8 | 2020-01-14 | An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first… |
CVE-2019-1405 | High | 7.8 | 2019-11-12 | An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP… |
CVE-2019-1388 | High | 7.8 | 2019-11-12 | An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Di… |