VendorsMicrosoftwindows_10any version
Vulnerabilities

Microsoft Windows 10 any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3182CVEs
CVE-2020-1478
Media Foundation Memory Corruption Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.027
CVE-2020-1534
Windows Backup Service Elevation of Privilege Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.027
CVE-2020-1531
Windows Accounts Control Elevation of Privilege Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.027
CVE-2019-0555
An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft XmlDocument Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.
Published 2019-01-08 · Modified
7.81 PoCEPSS 0.027
CVE-2019-0881
An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration, aka 'Windows Kernel Elevation of Privilege Vulnerability'.
Published 2019-05-16 · Modified
7.81 PoCEPSS 0.026
CVE-2016-3310
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308, CVE-2016-3309, and CVE-2016-3311.
Published 2016-08-09 · Modified
7.8EPSS 0.026
CVE-2020-1015
An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1011.
Published 2020-04-15 · Modified
7.8EPSS 0.026
CVE-2023-21746
Windows NTLM Elevation of Privilege Vulnerability
Published 2023-01-10 · Modified
7.8EPSS 0.025
CVE-2021-24081
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
Published 2021-02-25 · Modified
7.8EPSS 0.025
CVE-2020-1477
Media Foundation Memory Corruption Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.025
CVE-2020-1565
Windows Elevation of Privilege Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.025
CVE-2020-1156
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1086, CVE-2020-1090, CVE-2020-1125, CVE-2020-1139, CVE-2020-1149, CVE-2020-1151, CVE-2020-1155, CVE-2020-1157, CVE-2020-1158, CVE-2020-1164.
Published 2020-05-21 · Modified
7.8EPSS 0.025
CVE-2020-1139
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1086, CVE-2020-1090, CVE-2020-1125, CVE-2020-1149, CVE-2020-1151, CVE-2020-1155, CVE-2020-1156, CVE-2020-1157, CVE-2020-1158, CVE-2020-1164.
Published 2020-05-21 · Modified
7.8EPSS 0.025
CVE-2020-1157
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1086, CVE-2020-1090, CVE-2020-1125, CVE-2020-1139, CVE-2020-1149, CVE-2020-1151, CVE-2020-1155, CVE-2020-1156, CVE-2020-1158, CVE-2020-1164.
Published 2020-05-21 · Modified
7.8EPSS 0.025
CVE-2020-1362
An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1344, CVE-2020-1369.
Published 2020-07-14 · Modified
7.8EPSS 0.025
CVE-2016-0174
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0171, CVE-2016-0173, and CVE-2016-0196.
Published 2016-05-11 · Modified
7.8EPSS 0.025
CVE-2021-42276
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Published 2021-11-10 · Modified
7.8EPSS 0.025
CVE-2021-40465
Windows Text Shaping Remote Code Execution Vulnerability
Published 2021-10-13 · Modified
7.8EPSS 0.025
CVE-2021-34489
DirectWrite Remote Code Execution Vulnerability
Published 2021-07-14 · Modified
7.8EPSS 0.025
CVE-2021-34530
Windows Graphics Component Remote Code Execution Vulnerability
Published 2021-08-12 · Modified
7.8EPSS 0.024
CVE-2021-34533
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
Published 2021-08-12 · Modified
7.8EPSS 0.024
CVE-2020-16939
Group Policy Elevation of Privilege Vulnerability
Published 2020-10-16 · Modified
7.8EPSS 0.024
CVE-2016-0014
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Elevation of Privilege Vulnerability."
Published 2016-01-13 · Modified
7.8EPSS 0.024
CVE-2021-40476
Windows AppContainer Elevation Of Privilege Vulnerability
Published 2021-10-13 · Modified
7.8EPSS 0.024
CVE-2017-0024
The kernel-mode drivers in Microsoft Windows 10 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, and CVE-2017-0082.
Published 2017-03-17 · Modified
7.8EPSS 0.024
CVE-2017-0026
The kernel-mode drivers in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, and CVE-2017-0082.
Published 2017-03-17 · Modified
7.8EPSS 0.024
CVE-2017-0078
The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, CVE-2017-0082.
Published 2017-03-17 · Modified
7.8EPSS 0.024
CVE-2017-0079
The kernel-mode drivers in Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0080, CVE-2017-0081, and CVE-2017-0082.
Published 2017-03-17 · Modified
7.8EPSS 0.024
CVE-2017-0080
The kernel-mode drivers in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0081, and CVE-2017-0082.
Published 2017-03-17 · Modified
7.8EPSS 0.024
CVE-2017-0081
The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0082.
Published 2017-03-17 · Modified
7.8EPSS 0.024
CVE-2017-0082
The kernel-mode drivers in Microsoft Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, and CVE-2017-0081.
Published 2017-03-17 · Modified
7.8EPSS 0.024
CVE-2019-0943
Windows ALPC Elevation of Privilege Vulnerability
Published 2019-06-12 · Modified
7.81 PoCEPSS 0.024
CVE-2016-3355
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "GDI Elevation of Privilege Vulnerability."
Published 2016-09-14 · Modified
7.8EPSS 0.023
CVE-2022-29115
Windows Fax Service Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
7.8EPSS 0.023
CVE-2020-0753
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0754.
Published 2020-02-11 · Modified
7.8EPSS 0.023
CVE-2021-36937
Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability
Published 2021-08-12 · Modified
7.8EPSS 0.023
CVE-2021-27089
Microsoft Internet Messaging API Remote Code Execution Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.023
CVE-2020-0887
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0788, CVE-2020-0877.
Published 2020-03-12 · Modified
7.8EPSS 0.022
CVE-2022-30206
Windows Print Spooler Elevation of Privilege Vulnerability
Published 2022-07-12 · Modified
7.8EPSS 0.022
CVE-2016-3306
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 mishandles session objects, which allows local users to hijack sessions, and consequently gain privileges, via a crafted application, aka "Windows Session Object Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3305.
Published 2016-09-14 · Modified
7.8EPSS 0.022
← Prev27 / 80Next →