Microsoft Windows 10 1909 — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Windows 10 1909, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (47)

• CVE-2020-0796 — CVSS 10.0 (critical) — actively exploited: A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain…
• CVE-2022-26923 — CVSS 8.8 (high) — actively exploited: Active Directory Domain Services Elevation of Privilege Vulnerability
• CVE-2021-40444 — CVSS 8.8 (high) — actively exploited: <p>Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware…
• CVE-2020-1020 — CVSS 8.8 (high) — actively exploited: A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a…
• CVE-2021-33739 — CVSS 8.4 (high) — actively exploited: Microsoft DWM Core Library Elevation of Privilege Vulnerability
• CVE-2022-26925 — CVSS 8.1 (high) — actively exploited: Windows LSA Spoofing Vulnerability
• CVE-2020-0601 — CVSS 8.1 (high) — actively exploited: A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An…
• CVE-2020-1054 — CVSS 7.8 (high) — actively exploited: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory…
• CVE-2020-1464 — CVSS 7.8 (high) — actively exploited: A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this…
• CVE-2020-17087 — CVSS 7.8 (high) — actively exploited: Windows Kernel Local Elevation of Privilege Vulnerability
• CVE-2021-1675 — CVSS 7.8 (high) — actively exploited: Windows Print Spooler Remote Code Execution Vulnerability
• CVE-2021-1732 — CVSS 7.8 (high) — actively exploited: Windows Win32k Elevation of Privilege Vulnerability
• CVE-2021-28310 — CVSS 7.8 (high) — actively exploited: Win32k Elevation of Privilege Vulnerability
• CVE-2021-31956 — CVSS 7.8 (high) — actively exploited: Windows NTFS Elevation of Privilege Vulnerability
• CVE-2021-31979 — CVSS 7.8 (high) — actively exploited: Windows Kernel Elevation of Privilege Vulnerability
• CVE-2022-38396 — CVSS 7.8 (high): HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation…
• CVE-2020-0638 — CVSS 7.8 (high) — actively exploited: An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an…
• CVE-2020-0683 — CVSS 7.8 (high) — actively exploited: An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer…
• CVE-2020-0787 — CVSS 7.8 (high) — actively exploited: An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic…
• CVE-2020-0938 — CVSS 7.8 (high) — actively exploited: A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a…
• CVE-2020-0986 — CVSS 7.8 (high) — actively exploited: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…
• CVE-2020-1027 — CVSS 7.8 (high) — actively exploited: An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation…
• CVE-2021-34484 — CVSS 7.8 (high) — actively exploited: Windows User Profile Service Elevation of Privilege Vulnerability
• CVE-2021-34486 — CVSS 7.8 (high) — actively exploited: Windows Event Tracing Elevation of Privilege Vulnerability
• CVE-2021-36934 — CVSS 7.8 (high) — actively exploited: <p>An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files…
• CVE-2021-36948 — CVSS 7.8 (high) — actively exploited: Windows Update Medic Service Elevation of Privilege Vulnerability
• CVE-2021-36955 — CVSS 7.8 (high) — actively exploited: Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2021-40449 — CVSS 7.8 (high) — actively exploited: Win32k Elevation of Privilege Vulnerability
• CVE-2021-40450 — CVSS 7.8 (high) — actively exploited: Win32k Elevation of Privilege Vulnerability
• CVE-2021-43226 — CVSS 7.8 (high) — actively exploited: Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2022-21971 — CVSS 7.8 (high) — actively exploited: Windows Runtime Remote Code Execution Vulnerability
• CVE-2022-21999 — CVSS 7.8 (high) — actively exploited: Windows Print Spooler Elevation of Privilege Vulnerability
• CVE-2022-22718 — CVSS 7.8 (high) — actively exploited: Windows Print Spooler Elevation of Privilege Vulnerability
• CVE-2022-24521 — CVSS 7.8 (high) — actively exploited: Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2021-33771 — CVSS 7.8 (high) — actively exploited: Windows Kernel Elevation of Privilege Vulnerability
• CVE-2021-33742 — CVSS 7.5 (high) — actively exploited: Windows MSHTML Platform Remote Code Execution Vulnerability
• CVE-2022-26904 — CVSS 7.0 (high) — actively exploited: Windows User Profile Service Elevation of Privilege Vulnerability
• CVE-2022-21871 — CVSS 7.0 (high): Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability
• CVE-2022-21882 — CVSS 7.0 (high) — actively exploited: Win32k Elevation of Privilege Vulnerability
• CVE-2022-21919 — CVSS 7.0 (high) — actively exploited: Windows User Profile Service Elevation of Privilege Vulnerability
• CVE-2021-34448 — CVSS 6.8 (medium) — actively exploited: Scripting Engine Memory Corruption Vulnerability
• CVE-2022-26934 — CVSS 6.5 (medium): Windows Graphics Component Information Disclosure Vulnerability
• CVE-2021-41379 — CVSS 5.5 (medium) — actively exploited: Windows Installer Elevation of Privilege Vulnerability
• CVE-2021-31955 — CVSS 5.5 (medium) — actively exploited: Windows Kernel Information Disclosure Vulnerability
• CVE-2013-3900 — CVSS 5.5 (medium) — actively exploited: Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security…
• CVE-2021-31201 — CVSS 5.2 (medium) — actively exploited: Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
• CVE-2021-31199 — CVSS 5.2 (medium) — actively exploited: Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability