VendorsMicrosoftwindows_10all versions
Vulnerabilities

Microsoft Windows 10

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4056CVEs
CVE-2020-1568
Microsoft Edge PDF Remote Code Execution Vulnerability
Published 2020-08-17 · Modified
7.6EPSS 0.031
CVE-2020-1058
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035, CVE-2020-1060, CVE-2020-1093.
Published 2020-05-21 · Modified
7.6EPSS 0.031
CVE-2020-1060
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035, CVE-2020-1058, CVE-2020-1093.
Published 2020-05-21 · Modified
7.6EPSS 0.031
CVE-2020-1092
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1062.
Published 2020-05-21 · Modified
7.6EPSS 0.031
CVE-2020-17058
Microsoft Browser Memory Corruption Vulnerability
Published 2020-11-11 · Modified
7.6EPSS 0.031
CVE-2019-1193
Microsoft Browser Memory Corruption Vulnerability
Published 2019-08-14 · Modified
7.6EPSS 0.031
CVE-2019-0992
Chakra Scripting Engine Memory Corruption Vulnerability
Published 2019-06-12 · Modified
7.6EPSS 0.026
CVE-2019-0991
Chakra Scripting Engine Memory Corruption Vulnerability
Published 2019-06-12 · Modified
7.6EPSS 0.025
CVE-2019-0993
Chakra Scripting Engine Memory Corruption Vulnerability
Published 2019-06-12 · Modified
7.6EPSS 0.025
CVE-2019-0989
Chakra Scripting Engine Memory Corruption Vulnerability
Published 2019-06-12 · Modified
7.6EPSS 0.024
CVE-2019-1003
Chakra Scripting Engine Memory Corruption Vulnerability
Published 2019-06-12 · Modified
7.6EPSS 0.024
CVE-2019-1052
Chakra Scripting Engine Memory Corruption Vulnerability
Published 2019-06-12 · Modified
7.6EPSS 0.024
CVE-2019-1024
Chakra Scripting Engine Memory Corruption Vulnerability
Published 2019-06-12 · Modified
7.6EPSS 0.024
CVE-2019-1002
Chakra Scripting Engine Memory Corruption Vulnerability
Published 2019-06-12 · Modified
7.6EPSS 0.024
CVE-2022-30142
Windows File History Remote Code Execution Vulnerability
Published 2022-06-15 · Modified
7.6EPSS 0.022
CVE-2020-1172
Scripting Engine Memory Corruption Vulnerability
Published 2020-09-11 · Modified
7.6EPSS 0.022
CVE-2020-1037
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Chakra Scripting Engine Memory Corruption Vulnerability'.
Published 2020-05-21 · Modified
7.6EPSS 0.022
CVE-2020-1065
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'.
Published 2020-05-21 · Modified
7.6EPSS 0.022
CVE-2020-1180
Scripting Engine Memory Corruption Vulnerability
Published 2020-09-11 · Modified
7.6EPSS 0.021
CVE-2020-17054
Chakra Scripting Engine Memory Corruption Vulnerability
Published 2020-11-11 · Modified
7.6EPSS 0.021
CVE-2022-24460
Tablet Windows User Interface Application Elevation of Privilege Vulnerability
Published 2022-03-09 · Modified
7.6EPSS 0.020
CVE-2020-1096
A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF Remote Code Execution Vulnerability'.
Published 2020-05-21 · Modified
7.6EPSS 0.020
CVE-2019-1196
Chakra Scripting Engine Memory Corruption Vulnerability
Published 2019-08-14 · Modified
7.6EPSS 0.019
CVE-2019-1139
Chakra Scripting Engine Memory Corruption Vulnerability
Published 2019-08-14 · Modified
7.6EPSS 0.019
CVE-2019-1197
Chakra Scripting Engine Memory Corruption Vulnerability
Published 2019-08-14 · Modified
7.6EPSS 0.019
CVE-2021-1705
Microsoft Edge (HTML-based) Memory Corruption Vulnerability
Published 2021-01-12 · Modified
7.6EPSS 0.019
CVE-2019-1131
Chakra Scripting Engine Memory Corruption Vulnerability
Published 2019-08-14 · Modified
7.6EPSS 0.019
CVE-2019-1195
Chakra Scripting Engine Memory Corruption Vulnerability
Published 2019-08-14 · Modified
7.6EPSS 0.019
CVE-2019-1141
Chakra Scripting Engine Memory Corruption Vulnerability
Published 2019-08-14 · Modified
7.6EPSS 0.019
CVE-2017-0212
Windows Hyper-V allows an elevation of privilege vulnerability when Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 fail to properly validate vSMB packet data, aka "Windows Hyper-V vSMB Elevation of Privilege Vulnerability".
Published 2017-05-12 · Modified
7.6EPSS 0.011
CVE-2023-21758
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Published 2023-01-10 · Modified
7.5EPSS 0.925
CVE-2023-36606
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Published 2023-10-10 · Modified
7.5EPSS 0.672
CVE-2021-24086
Windows TCP/IP Denial of Service Vulnerability
Published 2021-02-25 · Modified
7.5EPSS 0.590
CVE-2023-21818
Windows Secure Channel Denial of Service Vulnerability
Published 2023-02-14 · Modified
7.5EPSS 0.432
CVE-2022-34689
Windows CryptoAPI Spoofing Vulnerability
Published 2022-10-11 · Modified
7.5EPSS 0.379
CVE-2016-4232
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information from process memory via unspecified vectors.
Published 2016-07-13 · Modified
7.51 PoCEPSS 0.365
CVE-2022-22025
Windows Internet Information Services Cachuri Module Denial of Service Vulnerability
Published 2022-07-12 · Modified
7.5EPSS 0.327
CVE-2018-12827
Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Published 2018-08-29 · Modified
7.51 PoCEPSS 0.320
CVE-2016-3237
Kerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows man-in-the-middle attackers to bypass authentication via vectors related to a fallback to NTLM authentication during a domain account password change, aka "Kerberos Security Feature Bypass Vulnerability."
Published 2016-08-09 · Modified
7.51 PoCEPSS 0.172
CVE-2020-16896
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Published 2020-10-16 · Modified
7.5EPSS 0.126
← Prev67 / 102Next →