Windows 10 1909

CVEs (3,253)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2016-7248	Microsoft Windows	Hig	0.52	7.8	0.22	Nov 10, 2016	Microsoft Video Control in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Video Control Remote Code Execution Vulnerability."
CVE-2016-3343	Microsoft Windows	Hig	0.52	7.8	0.13	Nov 10, 2016	The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain…
CVE-2016-3342	Microsoft Windows	Hig	0.52	7.8	0.13	Nov 10, 2016	The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain…
CVE-2016-3340	Microsoft Windows	Hig	0.52	7.8	0.13	Nov 10, 2016	The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain…
CVE-2016-0142	Microsoft Windows	Hig	0.52	7.8	0.20	Oct 14, 2016	Video Control in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Video Control Remote Code Execution Vulnerability."
CVE-2016-3356	Microsoft Windows 10 1607	Hig	0.52	7.8	0.19	Sep 14, 2016	The Graphics Device Interface (GDI) in Microsoft Windows 10 1607 allows remote attackers to execute arbitrary code via a crafted document, aka "GDI Remote Code Execution Vulnerability."
CVE-2016-3348	Microsoft Windows	Hig	0.52	7.8	0.13	Sep 14, 2016	The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka…
CVE-2016-0182	Microsoft Windows	Hig	0.52	7.8	0.20	May 11, 2016	Windows Journal in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted Journal (aka .jnt) file, aka "Windows Journal Memory Corruption Vulnerability."
CVE-2016-0038	Microsoft Windows	Hig	0.52	7.8	0.18	Feb 10, 2016	Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted Journal file, aka "Windows Journal Memory…
CVE-2025-30388	Microsoft Win32K	Hig	0.51	7.8	0.03	May 13, 2025	Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
CVE-2025-21338	Microsoft Office	Hig	0.51	7.8	0.00	Jan 14, 2025	GDI+ Remote Code Execution Vulnerability
CVE-2024-38250	Microsoft Graphics Component	Hig	0.51	7.8	0.01	Sep 10, 2024	Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2022-26926	Microsoft Windows Address Book	Hig	0.51	7.8	0.03	May 10, 2022	Windows Address Book Remote Code Execution Vulnerability
CVE-2022-26795	Microsoft Windows Server 2003	Hig	0.51	7.8	0.01	Apr 15, 2022	Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2018-8497	Microsoft Windows Kernel	Hig	0.51	7.8	0.01	Oct 10, 2018	An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.
CVE-2018-8484	Microsoft Windows	Hig	0.51	7.8	0.01	Oct 10, 2018	An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012,…
CVE-2018-8329	Microsoft Windows Subsystem for Linux	Hig	0.51	7.8	0.01	Oct 10, 2018	An Elevation of Privilege vulnerability exists in Windows Subsystem for Linux when it fails to properly handle objects in memory, aka "Linux On Windows Elevation Of Privilege Vulnerability." This affects Windows 10, Windows 10 Servers.
CVE-2018-8462	Microsoft Windows	Hig	0.51	7.8	0.01	Sep 13, 2018	An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
CVE-2018-8455	Microsoft Windows	Hig	0.51	7.8	0.01	Sep 13, 2018	An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10…
CVE-2018-8441	Microsoft Windows Subsystem for Linux	Hig	0.51	7.8	0.01	Sep 13, 2018	An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka "Windows Subsystem for Linux Elevation of Privilege Vulnerability." This affects Windows 10, Windows 10 Servers.

CVE-2016-7248HigNov 10, 2016
Microsoft
Windows
risk 0.52cvss 7.8epss 0.22
Microsoft Video Control in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Video Control Remote Code Execution Vulnerability."
CVE-2016-3343HigNov 10, 2016
Microsoft
Windows
risk 0.52cvss 7.8epss 0.13
The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain…
CVE-2016-3342HigNov 10, 2016
Microsoft
Windows
risk 0.52cvss 7.8epss 0.13
The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain…
CVE-2016-3340HigNov 10, 2016
Microsoft
Windows
risk 0.52cvss 7.8epss 0.13
The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain…
CVE-2016-0142HigOct 14, 2016
Microsoft
Windows
risk 0.52cvss 7.8epss 0.20
Video Control in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Video Control Remote Code Execution Vulnerability."
CVE-2016-3356HigSep 14, 2016
Microsoft
Windows 10 1607
risk 0.52cvss 7.8epss 0.19
The Graphics Device Interface (GDI) in Microsoft Windows 10 1607 allows remote attackers to execute arbitrary code via a crafted document, aka "GDI Remote Code Execution Vulnerability."
CVE-2016-3348HigSep 14, 2016
Microsoft
Windows
risk 0.52cvss 7.8epss 0.13
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka…
CVE-2016-0182HigMay 11, 2016
Microsoft
Windows
risk 0.52cvss 7.8epss 0.20
Windows Journal in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted Journal (aka .jnt) file, aka "Windows Journal Memory Corruption Vulnerability."
CVE-2016-0038HigFeb 10, 2016
Microsoft
Windows
risk 0.52cvss 7.8epss 0.18
Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted Journal file, aka "Windows Journal Memory…
CVE-2025-30388HigMay 13, 2025
Microsoft
Win32K
risk 0.51cvss 7.8epss 0.03
Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
CVE-2025-21338HigJan 14, 2025
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
GDI+ Remote Code Execution Vulnerability
CVE-2024-38250HigSep 10, 2024
Microsoft
Graphics Component
risk 0.51cvss 7.8epss 0.01
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2022-26926HigMay 10, 2022
Microsoft
Windows Address Book
risk 0.51cvss 7.8epss 0.03
Windows Address Book Remote Code Execution Vulnerability
CVE-2022-26795HigApr 15, 2022
Microsoft
Windows Server 2003
risk 0.51cvss 7.8epss 0.01
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2018-8497HigOct 10, 2018
Microsoft
Windows Kernel
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.
CVE-2018-8484HigOct 10, 2018
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012,…
CVE-2018-8329HigOct 10, 2018
Microsoft
Windows Subsystem for Linux
risk 0.51cvss 7.8epss 0.01
An Elevation of Privilege vulnerability exists in Windows Subsystem for Linux when it fails to properly handle objects in memory, aka "Linux On Windows Elevation Of Privilege Vulnerability." This affects Windows 10, Windows 10 Servers.
CVE-2018-8462HigSep 13, 2018
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
CVE-2018-8455HigSep 13, 2018
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10…
CVE-2018-8441HigSep 13, 2018
Microsoft
Windows Subsystem for Linux
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka "Windows Subsystem for Linux Elevation of Privilege Vulnerability." This affects Windows 10, Windows 10 Servers.

Page 8 of 163