Microsoft Windows 10 Version 20H2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 10 Version 20H2: 55 record(s), with affected versions and fixes.
CVE-2023-28252
High · 7.8
KEV Urgent · 84 Public exploit Ransomware CWE-787 Apr 11, 2023
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-28229
High · 7.0
KEV High · 58 Public exploit CWE-591 Apr 11, 2023
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2023-24880
Medium · 4.4
KEV High · 63 Ransomware CWE-863 Mar 14, 2023
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-21823
High · 7.8
KEV High · 61 Public exploit CWE-190 Feb 14, 2023
Microsoft Windows Graphic Component Privilege Escalation Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2023-23376
High · 7.8
KEV High · 65 Ransomware CWE-787 Feb 14, 2023
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-21674
High · 8.8
KEV High · 62 Public exploit CWE-416 Jan 10, 2023
Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2022-44698
Medium · 5.4
KEV High · 63 Ransomware Dec 13, 2022
Microsoft Defender SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2022-41128
High · 8.8
KEV High · 59 CWE-787 Nov 9, 2022
Microsoft Windows Scripting Languages Remote Code Execution Vulnerability
Windows Scripting Languages Remote Code Execution Vulnerability
CVE-2022-41125
High · 7.8
KEV High · 54 CWE-787 Nov 9, 2022
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2022-41091
Medium · 5.4
KEV High · 60 Ransomware CWE-863 Nov 9, 2022
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2022-41073
High · 7.8
KEV High · 63 Ransomware CWE-787 Nov 9, 2022
Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-41049
Medium · 5.4
KEV High · 51 Nov 9, 2022
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2022-41033
High · 7.8
KEV High · 53 CWE-843 Oct 11, 2022
Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability
Windows COM+ Event System Service Elevation of Privilege Vulnerability
CVE-2022-38028
High · 7.8
KEV High · 66 Oct 11, 2022
Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-37969
High · 7.8
KEV Urgent · 72 Public exploit Ransomware CWE-787 Sep 13, 2022
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-34713
High · 7.8
KEV High · 56 Aug 9, 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
CVE-2022-22047
High · 7.8
KEV High · 56 CWE-426 Jul 12, 2022
Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2022-30190
High · 7.8
KEV Urgent · 84 Public exploit Ransomware Jun 1, 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights.
Please see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability.
CVE-2022-26925
Medium · 5.9
KEV High · 55 CWE-306 May 10, 2022
Microsoft Windows LSA Spoofing Vulnerability
Windows LSA Spoofing Vulnerability
CVE-2022-26923
High · 8.8
KEV Urgent · 74 Public exploit CWE-295 May 10, 2022
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2022-26904
High · 7.0
KEV High · 68 Public exploit CWE-362 Apr 15, 2022
Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2022-24545
High · 8.1
Apr 15, 2022
Windows Kerberos Remote Code Execution Vulnerability
Windows Kerberos Remote Code Execution Vulnerability
CVE-2022-24521
High · 7.8
KEV Urgent · 71 Public exploit Ransomware CWE-787 Apr 15, 2022
Microsoft Windows CLFS Driver Privilege Escalation Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-24486
High · 7.8
Apr 15, 2022
Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2022-22718
High · 7.8
KEV High · 62 Public exploit Feb 9, 2022
Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability