CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  What's the CVSS score of your company?
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Microsoft » Windows 10 : Security Vulnerabilities (CVSS score between 4 and 4.99)

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
201 CVE-2021-1681 269 2021-01-12 2021-01-20
4.6
None Local Low Not required Partial Partial Partial
Windows WalletService Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1686, CVE-2021-1687, CVE-2021-1690.
202 CVE-2021-1680 269 2021-01-12 2021-01-20
4.6
None Local Low Not required Partial Partial Partial
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1651.
203 CVE-2021-1679 DoS 2021-01-12 2021-01-20
4.3
None Remote Medium Not required None None Partial
Windows CryptoAPI Denial of Service Vulnerability
204 CVE-2021-1662 269 2021-01-12 2021-01-20
4.6
None Local Low Not required Partial Partial Partial
Windows Event Tracing Elevation of Privilege Vulnerability
205 CVE-2021-1661 269 2021-01-12 2021-01-20
4.6
None Local Low Not required Partial Partial Partial
Windows Installer Elevation of Privilege Vulnerability
206 CVE-2021-1659 269 2021-01-12 2021-01-20
4.6
None Local Low Not required Partial Partial Partial
Windows CSC Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1652, CVE-2021-1653, CVE-2021-1654, CVE-2021-1655, CVE-2021-1688, CVE-2021-1693.
207 CVE-2021-1645 2021-01-12 2021-03-23
4.3
None Remote Medium Not required Partial None None
Windows Docker Information Disclosure Vulnerability
208 CVE-2021-1642 269 2021-01-12 2021-03-04
4.6
None Local Low Not required Partial Partial Partial
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685.
209 CVE-2021-1640 269 2021-03-11 2021-05-04
4.6
None Local Low Not required Partial Partial Partial
Windows Print Spooler Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26878.
210 CVE-2020-17140 200 +Info 2020-12-10 2021-07-21
4.0
None Remote Low ??? Partial None None
Windows SMB Information Disclosure Vulnerability
211 CVE-2020-17139 Bypass 2020-12-10 2021-03-03
4.6
None Local Low Not required Partial Partial Partial
Windows Overlay Filter Security Feature Bypass Vulnerability
212 CVE-2020-17137 269 2020-12-10 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
DirectX Graphics Kernel Elevation of Privilege Vulnerability
213 CVE-2020-17136 269 2020-12-10 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17103, CVE-2020-17134.
214 CVE-2020-17134 269 2020-12-10 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17103, CVE-2020-17136.
215 CVE-2020-17099 Bypass 2020-12-10 2021-03-03
4.6
None Local Low Not required Partial Partial Partial
Windows Lock Screen Security Feature Bypass Vulnerability
216 CVE-2020-17097 269 2020-12-10 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
Windows Digital Media Receiver Elevation of Privilege Vulnerability
217 CVE-2020-17088 269 2020-11-11 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
Windows Common Log File System Driver Elevation of Privilege Vulnerability
218 CVE-2020-17075 269 2020-11-11 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
Windows USO Core Worker Elevation of Privilege Vulnerability
219 CVE-2020-17073 269 2020-11-11 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
Windows Update Orchestrator Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17074, CVE-2020-17076.
220 CVE-2020-17046 DoS 2020-11-11 2020-11-19
4.9
None Local Low Not required None None Complete
Windows Error Reporting Denial of Service Vulnerability
221 CVE-2020-17045 200 +Info 2020-11-11 2021-07-21
4.9
None Local Low Not required Complete None None
Windows KernelStream Information Disclosure Vulnerability
222 CVE-2020-17036 200 +Info 2020-11-11 2021-07-21
4.9
None Local Low Not required Complete None None
Windows Function Discovery SSDP Provider Information Disclosure Vulnerability
223 CVE-2020-17034 269 2020-11-11 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
Windows Remote Access Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17025, CVE-2020-17026, CVE-2020-17027, CVE-2020-17028, CVE-2020-17031, CVE-2020-17032, CVE-2020-17033, CVE-2020-17043, CVE-2020-17044, CVE-2020-17055.
224 CVE-2020-17033 269 2020-11-11 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
Windows Remote Access Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17025, CVE-2020-17026, CVE-2020-17027, CVE-2020-17028, CVE-2020-17031, CVE-2020-17032, CVE-2020-17034, CVE-2020-17043, CVE-2020-17044, CVE-2020-17055.
225 CVE-2020-17032 269 2020-11-11 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
Windows Remote Access Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17025, CVE-2020-17026, CVE-2020-17027, CVE-2020-17028, CVE-2020-17031, CVE-2020-17033, CVE-2020-17034, CVE-2020-17043, CVE-2020-17044, CVE-2020-17055.
226 CVE-2020-17031 269 2020-11-11 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
Windows Remote Access Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17025, CVE-2020-17026, CVE-2020-17027, CVE-2020-17028, CVE-2020-17032, CVE-2020-17033, CVE-2020-17034, CVE-2020-17043, CVE-2020-17044, CVE-2020-17055.
227 CVE-2020-17030 200 +Info 2020-11-11 2021-07-21
4.9
None Local Low Not required Complete None None
Windows MSCTF Server Information Disclosure Vulnerability
228 CVE-2020-17029 200 +Info 2020-11-11 2021-07-21
4.9
None Local Low Not required Complete None None
Windows Canonical Display Driver Information Disclosure Vulnerability
229 CVE-2020-17028 269 2020-11-11 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
Windows Remote Access Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17025, CVE-2020-17026, CVE-2020-17027, CVE-2020-17031, CVE-2020-17032, CVE-2020-17033, CVE-2020-17034, CVE-2020-17043, CVE-2020-17044, CVE-2020-17055.
230 CVE-2020-17027 269 2020-11-11 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
Windows Remote Access Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17025, CVE-2020-17026, CVE-2020-17028, CVE-2020-17031, CVE-2020-17032, CVE-2020-17033, CVE-2020-17034, CVE-2020-17043, CVE-2020-17044, CVE-2020-17055.
231 CVE-2020-17026 269 2020-11-11 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
Windows Remote Access Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17025, CVE-2020-17027, CVE-2020-17028, CVE-2020-17031, CVE-2020-17032, CVE-2020-17033, CVE-2020-17034, CVE-2020-17043, CVE-2020-17044, CVE-2020-17055.
232 CVE-2020-17025 269 2020-11-11 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
Windows Remote Access Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17026, CVE-2020-17027, CVE-2020-17028, CVE-2020-17031, CVE-2020-17032, CVE-2020-17033, CVE-2020-17034, CVE-2020-17043, CVE-2020-17044, CVE-2020-17055.
233 CVE-2020-17012 269 2020-11-11 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
Windows Bind Filter Driver Elevation of Privilege Vulnerability
234 CVE-2020-17007 269 2020-11-11 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
Windows Error Reporting Elevation of Privilege Vulnerability
235 CVE-2020-17001 269 2020-11-11 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
Windows Print Spooler Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17014.
236 CVE-2020-16998 269 2020-11-11 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
DirectX Elevation of Privilege Vulnerability
237 CVE-2020-16997 2020-11-11 2020-11-19
4.0
None Remote Low ??? Partial None None
Remote Desktop Protocol Server Information Disclosure Vulnerability
238 CVE-2020-16976 269 +Priv 2020-10-16 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912, CVE-2020-16936, CVE-2020-16972, CVE-2020-16973, CVE-2020-16974, CVE-2020-16975.
239 CVE-2020-16975 269 +Priv 2020-10-16 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912, CVE-2020-16936, CVE-2020-16972, CVE-2020-16973, CVE-2020-16974, CVE-2020-16976.
240 CVE-2020-16974 269 +Priv 2020-10-16 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912, CVE-2020-16936, CVE-2020-16972, CVE-2020-16973, CVE-2020-16975, CVE-2020-16976.
241 CVE-2020-16973 269 +Priv 2020-10-16 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912, CVE-2020-16936, CVE-2020-16972, CVE-2020-16974, CVE-2020-16975, CVE-2020-16976.
242 CVE-2020-16972 269 +Priv 2020-10-16 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912, CVE-2020-16936, CVE-2020-16973, CVE-2020-16974, CVE-2020-16975, CVE-2020-16976.
243 CVE-2020-16940 269 2020-10-16 2020-10-21
4.9
None Local Low Not required None None Complete
An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles junction points, aka 'Windows - User Profile Service Elevation of Privilege Vulnerability'.
244 CVE-2020-16939 269 2020-10-16 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege Vulnerability'.
245 CVE-2020-16936 269 +Priv 2020-10-16 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912, CVE-2020-16972, CVE-2020-16973, CVE-2020-16974, CVE-2020-16975, CVE-2020-16976.
246 CVE-2020-16920 269 2020-10-16 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
An elevation of privilege vulnerability exists when the Windows Application Compatibility Client Library improperly handles registry operations, aka 'Windows Application Compatibility Client Library Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16876.
247 CVE-2020-16912 269 +Priv 2020-10-16 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16936, CVE-2020-16972, CVE-2020-16973, CVE-2020-16974, CVE-2020-16975, CVE-2020-16976.
248 CVE-2020-16910 281 Bypass 2020-10-16 2020-10-21
4.3
None Remote Medium Not required None Partial None
A security feature bypass vulnerability exists when Microsoft Windows fails to handle file creation permissions, which could allow an attacker to create files in a protected Unified Extensible Firmware Interface (UEFI) location.To exploit this vulnerability, an attacker could run a specially crafted application to bypass Unified Extensible Firmware Interface (UEFI) variable security in Windows.The security update addresses the vulnerability by correcting security feature behavior to enforce permissions., aka 'Windows Security Feature Bypass Vulnerability'.
249 CVE-2020-16909 269 2020-10-16 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16905.
250 CVE-2020-16905 269 2020-10-16 2021-07-21
4.6
None Local Low Not required Partial Partial Partial
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16909.
Total number of vulnerabilities : 728   Page : 1 2 3 4 5 (This Page)6 7 8 9 10 11 12 13 14 15
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.