Windows 10 1909

CVEs (4,279)

• CVE-2023-28219HigApr 11, 2023
  Microsoft

  Layer 2 Tunneling Protocol
  risk 0.54cvss 8.1epss 0.15

  Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

• CVE-2022-44666HigDec 13, 2022
  Microsoft

  Windows Contacts
  risk 0.54cvss 7.8epss 0.41

  Windows Contacts Remote Code Execution Vulnerability

• CVE-2022-37954HigSep 13, 2022
  Microsoft

  DirectX Graphics Kernel
  risk 0.54cvss 7.8epss 0.45

  DirectX Graphics Kernel Elevation of Privilege Vulnerability

• CVE-2021-31955MedKEVJun 8, 2021
  Microsoft

  Windows Kernel
  risk 0.54cvss 5.5epss 0.81

  Windows Kernel Information Disclosure Vulnerability

• CVE-2020-17140HigDec 10, 2020
  Microsoft

  Windows SMB
  risk 0.54cvss 8.1epss 0.12

  Windows SMB Information Disclosure Vulnerability

• CVE-2019-1476HigDec 10, 2019
  Microsoft

  Windows AppX Deployment Service
  risk 0.54cvss 7.8epss 0.05

  An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1483.

• CVE-2019-1471HigDec 10, 2019
  Microsoft

  Windows Hyper-V
  risk 0.54cvss 8.2epss 0.08

  A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'.

• CVE-2019-1089HigJul 15, 2019
  Microsoft

  Windows
  risk 0.54cvss 7.8epss 0.06

  An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request. To exploit this vulnerability, a low level authenticated attacker could run a specially crafted application. The security update addresses this…

• CVE-2019-0943HigJun 12, 2019
  Microsoft

  Windows
  risk 0.54cvss 7.8epss 0.03

  An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC). An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then…

• CVE-2019-0881HigMay 16, 2019
  Microsoft

  Windows Kernel
  risk 0.54cvss 7.8epss 0.03

  An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration, aka 'Windows Kernel Elevation of Privilege Vulnerability'.

• CVE-2019-0836HigApr 9, 2019
  Microsoft

  Windows
  risk 0.54cvss 7.8epss 0.05

  An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0841.

• CVE-2019-0805HigApr 9, 2019
  Microsoft

  Windows
  risk 0.54cvss 7.8epss 0.03

  An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0836, CVE-2019-0841.

• CVE-2019-0735HigApr 9, 2019
  Microsoft

  Windows
  risk 0.54cvss 7.8epss 0.05

  An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windows CSRSS Elevation of Privilege Vulnerability'.

• CVE-2019-0732HigApr 9, 2019
  Microsoft

  Windows
  risk 0.54cvss 7.8epss 0.05

  A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Security Feature Bypass Vulnerability'.

• CVE-2019-0731HigApr 9, 2019
  Microsoft

  Windows
  risk 0.54cvss 7.8epss 0.05

  An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.

• CVE-2019-0730HigApr 9, 2019
  Microsoft

  Windows
  risk 0.54cvss 7.8epss 0.05

  An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.

• CVE-2019-0570HigJan 8, 2019
  Microsoft

  Windows Server 2012
  risk 0.54cvss 7.8epss 0.04

  An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Windows Runtime Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server…

• CVE-2019-0555HigJan 8, 2019
  Microsoft

  Windows Server 2012
  risk 0.54cvss 7.8epss 0.03

  An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft XmlDocument Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows…

• CVE-2018-8584HigNov 14, 2018
  Microsoft

  Windows Server 2016
  risk 0.54cvss 7.8epss 0.03

  An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.

• CVE-2018-8550HigNov 14, 2018
  Microsoft

  Windows Server 2008
  risk 0.54cvss 7.8epss 0.04

  An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server…