Windows 10 1909

CVEs (4,279)

• CVE-2021-43215CriDec 15, 2021
  Microsoft

  iSNS Server
  risk 0.64cvss 9.8epss 0.03

  iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution

• CVE-2021-36948HigKEVAug 12, 2021
  Microsoft

  Windows 10 1607
  risk 0.64cvss 7.8epss 0.27

  Windows Update Medic Service Elevation of Privilege Vulnerability

• CVE-2021-34484HigKEVAug 12, 2021
  Microsoft

  Windows User Profile Service
  risk 0.64cvss 7.8epss 0.22

  Windows User Profile Service Elevation of Privilege Vulnerability

• CVE-2021-31956HigKEVJun 8, 2021
  Microsoft

  Windows NTFS
  risk 0.64cvss 7.8epss 0.20

  Windows NTFS Elevation of Privilege Vulnerability

• CVE-2021-24077CriFeb 25, 2021
  Microsoft

  Windows Fax Service
  risk 0.64cvss 9.8epss 0.03

  Windows Fax Service Remote Code Execution Vulnerability

• CVE-2020-0986HigKEVJun 9, 2020
  Microsoft

  Windows Kernel
  risk 0.64cvss 7.8epss 0.16

  An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266,…

• CVE-2020-0690CriMar 12, 2020
  Microsoft

  Directx
  risk 0.64cvss 9.8epss 0.07

  An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'.

• CVE-2019-1226CriAug 14, 2019
  Microsoft

  Remote Desktop Services
  risk 0.64cvss 9.8epss 0.08

  A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and…

• CVE-2019-1222CriAug 14, 2019
  Microsoft

  Remote Desktop Services
  risk 0.64cvss 9.8epss 0.08

  A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and…

• CVE-2019-1212CriAug 14, 2019
  Microsoft

  Windows Server DHCP service
  risk 0.64cvss 9.8epss 0.07

  A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could cause the DHCP server service to stop responding. To exploit the vulnerability, a remote…

• CVE-2019-0736CriAug 14, 2019
  Microsoft

  Windows DHCP Client
  risk 0.64cvss 9.8epss 0.04

  A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine. To exploit the vulnerability, an…

• CVE-2019-0786CriApr 9, 2019
  Microsoft

  Server Message Block
  risk 0.64cvss 9.8epss 0.07

  An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server when an attacker with valid credentials attempts to open a specially crafted file over the SMB protocol on the same machine, aka 'SMB Server Elevation of Privilege Vulnerability'.

• CVE-2018-8544HigNov 14, 2018
  Microsoft

  Windows Server 2008
  risk 0.64cvss 8.8epss 0.48

  A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server…

• CVE-2017-11899CriDec 12, 2017
  Microsoft

  Windows Server 2016
  risk 0.64cvss 9.8epss 0.06

  Device Guard in Windows 10 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to the way untrusted files are handled, aka "Microsoft Windows Security Feature Bypass Vulnerability".

• CVE-2017-8682HigSep 13, 2017
  Microsoft

  Word Viewer
  risk 0.64cvss 8.8epss 0.50

  Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, Windows Server 2016, Microsoft Office Word Viewer, Microsoft Office 2007 Service Pack 3 , and…

• CVE-2017-0005HigKEVMar 17, 2017
  Microsoft

  Windows
  risk 0.64cvss 7.8epss 0.11

  The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted…

• CVE-2016-7274HigDec 20, 2016
  Microsoft

  Windows
  risk 0.64cvss 8.8epss 0.42

  Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web…

• CVE-2016-0170HigMay 11, 2016
  Microsoft

  Windows
  risk 0.64cvss 8.8epss 0.49

  GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted document, aka "Windows Graphics…

• CVE-2016-0145HigApr 12, 2016
  Microsoft

  Office
  risk 0.64cvss 8.8epss 0.43

  The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold and 1511; Office 2007 SP3 and 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, 3.5, and 3.5.1; Skype…

• CVE-2025-59230HigKEVOct 14, 2025
  Microsoft

  Windows
  risk 0.63cvss 7.8epss 0.03

  Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.