A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated attacker to elevate from a medium integrity process...
Product
Microsoft windows 10 vulnerabilities
2,989 published CVES affecting Microsoft windows 10, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2,989
- Critical
- 66
- High
- 2,033
- Medium
- 857
- Low
- 33
- Unscored
- 0
- CISA KEV
- 14
Latest Microsoft windows 10 CVEs
Newest publication first · page 1 of 40 · showing the latest 1,000
-
HighCVSS 8.4 EPSS 1.4%
-
MediumCVSS 6.8 EPSS 2.5%
A Denial of Service in CLFS.sys in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated low-privilege user to cause a Blue Screen of Death via a forced call to the KeBugCheckEx function.
-
HighCVSS 7.5 EPSS 2.5%
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
-
HighCVSS 7.3 EPSS 0.82%
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
-
HighCVSS 7.3 EPSS 0.82%
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
-
HighCVSS 7.3 EPSS 0.82%
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
-
HighCVSS 7.3 EPSS 0.81%
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
-
HighCVSS 7.3 EPSS 0.81%
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
-
HighCVSS 7.3 EPSS 0.81%
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
-
HighCVSS 7.3 EPSS 0.82%
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
-
HighCVSS 7.5 EPSS 69.4%
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
-
HighCVSS 8.0 EPSS 2.2%
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
-
MediumCVSS 5.3 EPSS 1.7%
PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can s...
-
HighCVSS 7.5 EPSS 1.7%
Microsoft Message Queuing Information Disclosure Vulnerability
-
CriticalCVSS 9.8 EPSS 1.7%
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
-
HighCVSS 7.5 EPSS 2.1%
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
-
CriticalCVSS 9.8 EPSS 2.5%
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
-
MediumCVSS 6.5 EPSS 0.97%
Windows Hyper-V Information Disclosure Vulnerability
-
MediumCVSS 6.5 EPSS 2.1%
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
-
HighCVSS 7.5 EPSS 2.0%
Windows Cryptographic Services Information Disclosure Vulnerability
-
HighCVSS 7.5 EPSS 1.7%
Windows Cryptographic Services Information Disclosure Vulnerability
-
HighCVSS 7.5 EPSS 1.7%
Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
-
CriticalCVSS 9.8 EPSS 1.6%
Windows System Assessment Tool Elevation of Privilege Vulnerability
-
HighCVSS 7.8 EPSS 10.2%
Windows Common Log File System Driver Elevation of Privilege Vulnerability
-
CVE-2023-21712 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
PublishedHighCVSS 8.1 EPSS 0.99%Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.