VendorsMicrosoftwindows_102004
Vulnerabilities

Microsoft Windows 10 2004

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

950CVEs
CVE-2021-31191
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
Published 2021-05-11 · Modified
5.5EPSS 0.008
CVE-2021-28437
Windows Installer Information Disclosure Vulnerability
Published 2021-04-13 · Modified
5.5EPSS 0.008
CVE-2021-28435
Windows Event Tracing Information Disclosure Vulnerability
Published 2021-04-13 · Modified
5.5EPSS 0.008
CVE-2021-40475
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
Published 2021-10-13 · Modified
5.5EPSS 0.007
CVE-2021-40468
Windows Bind Filter Driver Information Disclosure Vulnerability
Published 2021-10-13 · Modified
5.5EPSS 0.007
CVE-2021-38663
Windows exFAT File System Information Disclosure Vulnerability
Published 2021-10-13 · Modified
5.5EPSS 0.007
CVE-2021-41343
Windows Fast FAT File System Driver Information Disclosure Vulnerability
Published 2021-10-13 · Modified
5.5EPSS 0.007
CVE-2021-28438
Windows Console Driver Denial of Service Vulnerability
Published 2021-04-13 · Modified
5.5EPSS 0.007
CVE-2021-28443
Windows Console Driver Denial of Service Vulnerability
Published 2021-04-13 · Modified
5.5EPSS 0.006
CVE-2021-31185
Windows Desktop Bridge Denial of Service Vulnerability
Published 2021-05-11 · Modified
5.5EPSS 0.006
CVE-2021-40455
Windows Installer Spoofing Vulnerability
Published 2021-10-13 · Modified
5.5EPSS 0.006
CVE-2021-40454
Rich Text Edit Control Information Disclosure Vulnerability
Published 2021-10-13 · Modified
5.5EPSS 0.005
CVE-2020-1596
TLS Information Disclosure Vulnerability
Published 2020-09-11 · Modified
5.4EPSS 0.009
CVE-2020-1315
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Internet Explorer Information Disclosure Vulnerability'.
Published 2020-06-09 · Modified
5.3EPSS 0.038
CVE-2020-1242
An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge Information Disclosure Vulnerability'.
Published 2020-06-09 · Modified
5.3EPSS 0.038
CVE-2020-0837
ADFS MFA Elevation of Privilege Vulnerability
Published 2020-09-11 · Modified
5.3EPSS 0.014
CVE-2020-1434
An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory, aka 'Windows Sync Host Service Elevation of Privilege Vulnerability'.
Published 2020-07-14 · Modified
5.3EPSS 0.008
CVE-2020-1267
This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated attacker sends a specially crafted authentication request, aka 'Local Security Authority Subsystem Service Denial of Service Vulnerability'.
Published 2020-07-14 · Modified
4.9EPSS 0.045
CVE-2020-1578
Windows Kernel Information Disclosure Vulnerability
Published 2020-08-17 · Modified
4.7EPSS 0.009
CVE-2021-28316
Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability
Published 2021-04-13 · Modified
4.6EPSS 0.011
CVE-2021-28447
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
Published 2021-04-13 · Modified
4.4EPSS 0.020
CVE-2021-38631
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Published 2021-11-10 · Modified
4.4EPSS 0.019
CVE-2021-41371
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Published 2021-11-10 · Modified
4.4EPSS 0.016
CVE-2020-1592
Windows Kernel Information Disclosure Vulnerability
Published 2020-09-11 · Modified
4.4EPSS 0.012
CVE-2021-27094
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
Published 2021-04-13 · Modified
4.4EPSS 0.010
CVE-2020-1432
An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'.
Published 2020-07-14 · Modified
4.3EPSS 0.045
CVE-2020-1462
An information disclosure vulnerability exists when Skype for Business is accessed via Microsoft Edge (EdgeHTML-based), aka 'Skype for Business via Microsoft Edge (EdgeHTML-based) Information Disclosure Vulnerability'.
Published 2020-07-14 · Modified
4.3EPSS 0.042
CVE-2021-41351
Microsoft Edge (Chrome based) Spoofing on IE Mode
Published 2021-11-10 · Modified
4.3EPSS 0.039
CVE-2020-1259
A security feature bypass vulnerability exists when Windows Host Guardian Service improperly handles hashes recorded and logged, aka 'Windows Host Guardian Service Security Feature Bypass Vulnerability'.
Published 2020-06-09 · Modified
4.3EPSS 0.031
CVE-2020-24588
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.
Published 2021-05-11 · Modified
3.5EPSS 0.036
← Prev24 / 24