VendorsMicrosoftwindows_101803
Vulnerabilities

Microsoft Windows 10 1803

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1790CVEs
CVE-2021-28349
Windows GDI+ Remote Code Execution Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.007
CVE-2021-26872
Windows Event Tracing Elevation of Privilege Vulnerability
Published 2021-03-11 · Modified
7.8EPSS 0.007
CVE-2021-26880
Storage Spaces Controller Elevation of Privilege Vulnerability
Published 2021-03-11 · Modified
7.8EPSS 0.007
CVE-2021-26870
Windows Projected File System Elevation of Privilege Vulnerability
Published 2021-03-11 · Modified
7.8EPSS 0.007
CVE-2021-1681
Windows WalletService Elevation of Privilege Vulnerability
Published 2021-01-12 · Modified
7.8EPSS 0.007
CVE-2021-1688
Windows CSC Service Elevation of Privilege Vulnerability
Published 2021-01-12 · Modified
7.8EPSS 0.007
CVE-2021-1659
Windows CSC Service Elevation of Privilege Vulnerability
Published 2021-01-12 · Modified
7.8EPSS 0.007
CVE-2021-1687
Windows WalletService Elevation of Privilege Vulnerability
Published 2021-01-12 · Modified
7.8EPSS 0.007
CVE-2021-1690
Windows WalletService Elevation of Privilege Vulnerability
Published 2021-01-12 · Modified
7.8EPSS 0.007
CVE-2021-1686
Windows WalletService Elevation of Privilege Vulnerability
Published 2021-01-12 · Modified
7.8EPSS 0.007
CVE-2021-1689
Windows Multipoint Management Elevation of Privilege Vulnerability
Published 2021-01-12 · Modified
7.8EPSS 0.007
CVE-2021-1662
Windows Event Tracing Elevation of Privilege Vulnerability
Published 2021-01-12 · Modified
7.8EPSS 0.007
CVE-2021-1698
Windows Win32k Elevation of Privilege Vulnerability
Published 2021-02-25 · Modified
7.8EPSS 0.007
CVE-2021-1682
Windows Kernel Elevation of Privilege Vulnerability
Published 2021-01-12 · Modified
7.8EPSS 0.006
CVE-2021-24103
Windows Event Tracing Elevation of Privilege Vulnerability
Published 2021-02-25 · Modified
7.8EPSS 0.006
CVE-2021-25195
Windows PKU2U Elevation of Privilege Vulnerability
Published 2021-02-25 · Modified
7.8EPSS 0.006
CVE-2019-1235
An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server process does not validate the source of input or commands it receives, aka 'Windows Text Service Framework Elevation of Privilege Vulnerability'.
Published 2019-09-11 · Modified
7.8EPSS 0.006
CVE-2021-28440
Windows Installer Elevation of Privilege Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.006
CVE-2021-24092
Microsoft Defender Elevation of Privilege Vulnerability
Published 2021-02-25 · Modified
7.8EPSS 0.006
CVE-2021-27072
Win32k Elevation of Privilege Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.006
CVE-2020-1152
Windows Win32k Elevation of Privilege Vulnerability
Published 2020-09-11 · Modified
7.8EPSS 0.006
CVE-2021-27088
Windows Event Tracing Elevation of Privilege Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.006
CVE-2021-27096
NTFS Elevation of Privilege Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.006
CVE-2021-28351
Windows Speech Runtime Elevation of Privilege Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.006
CVE-2021-28347
Windows Speech Runtime Elevation of Privilege Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.006
CVE-2021-28320
Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.006
CVE-2021-28436
Windows Speech Runtime Elevation of Privilege Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.006
CVE-2021-24102
Windows Event Tracing Elevation of Privilege Vulnerability
Published 2021-02-25 · Modified
7.8EPSS 0.005
CVE-2021-31193
Windows SSDP Service Elevation of Privilege Vulnerability
Published 2021-05-11 · Modified
7.8EPSS 0.005
CVE-2020-16997
Remote Desktop Protocol Server Information Disclosure Vulnerability
Published 2020-11-11 · Modified
7.7EPSS 0.040
CVE-2019-0965
Windows Hyper-V Remote Code Execution Vulnerability
Published 2019-08-14 · Modified
7.7EPSS 0.013
CVE-2021-1638
Windows Bluetooth Security Feature Bypass Vulnerability
Published 2021-01-12 · Modified
7.7EPSS 0.012
CVE-2019-0539
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0567, CVE-2019-0568.
Published 2019-01-08 · Modified
7.63 PoCEPSS 0.829
CVE-2018-0886
The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how CredSSP validates request during the authentication process, aka "CredSSP Remote Code Execution Vulnerability".
Published 2018-03-14 · Modified
7.61 PoCEPSS 0.820
CVE-2019-0567
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0568.
Published 2019-01-08 · Modified
7.61 PoCEPSS 0.801
CVE-2018-8229
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8227.
Published 2018-06-14 · Modified
7.61 PoCEPSS 0.710
CVE-2018-8279
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8125, CVE-2018-8262, CVE-2018-8274, CVE-2018-8275, CVE-2018-8301.
Published 2018-07-11 · Modified
7.61 PoCEPSS 0.707
CVE-2019-0568
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0567.
Published 2019-01-08 · Modified
7.61 PoCEPSS 0.695
CVE-2018-8466
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8367, CVE-2018-8465, CVE-2018-8467.
Published 2018-09-13 · Modified
7.61 PoCEPSS 0.690
CVE-2018-8467
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8367, CVE-2018-8465, CVE-2018-8466.
Published 2018-09-13 · Modified
7.61 PoCEPSS 0.690
← Prev26 / 45Next →