Advisories · Technology

Microsoft Windows 10 Version 1909.

Every CVE that names Microsoft Windows 10 Version 1909 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-43244 CVE record

CVSS 6.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43240 CVE record

CVSS 7.8 High

NTFS Set Short Name Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1909
- Microsoft Windows 10 Version 21H1
Not analysed yet 15 Dec 2021
CVE-2021-43238 CVE record

CVSS 7.8 High

Windows Remote Access Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43237 CVE record

CVSS 7.8 High

Windows Setup Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1909
- Microsoft Windows 10 Version 21H1
- Path traversal
Not analysed yet 15 Dec 2021
CVE-2021-43236 CVE record

CVSS 7.5 High

Microsoft Message Queuing Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43235 CVE record

CVSS 5.5 Medium

Storage Spaces Controller Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43234 CVE record

CVSS 7.8 High

Windows Fax Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43233 CVE record

CVSS 7.5 High

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43232 CVE record

CVSS 7.8 High

Windows Event Tracing Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43231 CVE record

CVSS 7.8 High

Windows NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43230 CVE record

CVSS 7.8 High

Windows NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43229 CVE record

CVSS 7.8 High

Windows NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43228 CVE record

CVSS 7.5 High

SymCrypt Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43227 CVE record

CVSS 5.5 Medium

Storage Spaces Controller Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43226 CVE record

CVSS 7.8 HighCritical · KEVKEV · ransomware

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43224 CVE record

CVSS 5.5 Medium

Windows Common Log File System Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43223 CVE record

CVSS 7.8 High

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43222 CVE record

CVSS 7.5 High

Microsoft Message Queuing Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43219 CVE record

CVSS 7.4 High

DirectX Graphics Kernel File Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43217 CVE record

CVSS 8.1 High

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43216 CVE record

CVSS 6.5 Medium

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43215 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43207 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-41333 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-42288 CVE record

CVSS 5.7 Medium

Windows Hello Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 10 Nov 2021
CVE-2021-42285 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-42284 CVE record

CVSS 6.8 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-42283 CVE record

CVSS 8.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-42280 CVE record

CVSS 5.5 Medium

Windows Feedback Hub Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
Not analysed yet 10 Nov 2021
CVE-2021-42277 CVE record

CVSS 5.5 Medium

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2015 Update 3
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Not analysed yet 10 Nov 2021
CVE-2021-42276 CVE record

CVSS 7.8 High

Microsoft Windows Media Foundation Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-42275 CVE record

CVSS 8.8 High

Microsoft COM for Windows Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41379 CVE record

CVSS 5.5 MediumCritical · KEVKEV · ransomware

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 10 Nov 2021
CVE-2021-41378 CVE record

CVSS 7.8 High

Windows NTFS Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 10 Nov 2021
CVE-2021-41377 CVE record

CVSS 7.8 High

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41371 CVE record

CVSS 4.4 Medium

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41370 CVE record

CVSS 7.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41367 CVE record

CVSS 7.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41366 CVE record

CVSS 7.8 High

Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41356 CVE record

CVSS 7.5 High

Windows Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-38666 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows 10 Version 1507
Not analysed yet 10 Nov 2021
CVE-2021-38665 CVE record

CVSS 7.4 High

Remote Desktop Protocol Client Information Disclosure Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows 10 Version 1507
Not analysed yet 10 Nov 2021
CVE-2021-38631 CVE record

CVSS 4.4 Medium

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-36957 CVE record

CVSS 7.8 High

Windows Desktop Bridge Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
Not analysed yet 10 Nov 2021
CVE-2021-26443 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 10 Nov 2021
CVE-2021-41347 CVE record

CVSS 7.8 High

Windows AppX Deployment Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-41345 CVE record

CVSS 7.8 High

Storage Spaces Controller Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Oct 2021
CVE-2021-41343 CVE record

CVSS 5.5 Medium

Windows Fast FAT File System Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-41342 CVE record

CVSS 6.8 Medium

Windows MSHTML Platform Remote Code Execution Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
Not analysed yet 13 Oct 2021
CVE-2021-41340 CVE record

CVSS 7.8 High

Windows Graphics Component Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-41339 CVE record

CVSS 4.7 Medium

Microsoft DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1909
- Microsoft Windows 10 Version 21H1
Not analysed yet 13 Oct 2021
CVE-2021-41338 CVE record

CVSS 5.5 Medium

Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-41335 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-41332 CVE record

CVSS 6.5 Medium

Windows Print Spooler Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-41331 CVE record

CVSS 7.8 High

Windows Media Audio Decoder Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-41330 CVE record

CVSS 7.8 High

Microsoft Windows Media Foundation Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40489 CVE record

CVSS 7.8 High

Storage Spaces Controller Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40488 CVE record

CVSS 7.8 High

Storage Spaces Controller Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40478 CVE record

CVSS 7.8 High

Storage Spaces Controller Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40477 CVE record

CVSS 7.8 High

Windows Event Tracing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021