Advisories · Technology

Microsoft Windows 10 Version 20H2.

Every CVE that names Microsoft Windows 10 Version 20H2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-24491 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows Network File System Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24488 CVE record

CVSS 7.8 High

Windows Desktop Bridge Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H1
- Microsoft Windows Server 2022
Not analysed yet 15 Apr 2022
CVE-2022-24487 CVE record

CVSS 8.8 High

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24486 CVE record

CVSS 7.8 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24485 CVE record

CVSS 7.5 High

Win32 File Enumeration Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24483 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24482 CVE record

CVSS 7.0 High

Windows ALPC Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24481 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24479 CVE record

CVSS 7.8 High

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24474 CVE record

CVSS 7.8 High

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-21983 CVE record

CVSS 7.5 High

Win32 Stream Enumeration Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24525 CVE record

CVSS 7.0 High

Windows Update Stack Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1909
- Microsoft Windows 10 Version 21H1
Not analysed yet 9 Mar 2022
CVE-2022-24508 CVE record

CVSS 8.8 High

Win32 File Enumeration Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 21H1
- Microsoft Windows Server 2022
Not analysed yet 9 Mar 2022
CVE-2022-24507 CVE record

CVSS 7.8 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-24505 CVE record

CVSS 7.0 High

Windows ALPC Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-24503 CVE record

CVSS 5.4 Medium

Remote Desktop Protocol Client Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-24502 CVE record

CVSS 4.3 Medium

Windows HTML Platforms Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-24460 CVE record

CVSS 7.0 High

Tablet Windows User Interface Application Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-24459 CVE record

CVSS 7.8 High

Windows Fax and Scan Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-24454 CVE record

CVSS 7.8 High

Windows Security Support Provider Interface Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23299 CVE record

CVSS 7.8 High

Windows PDEV Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23298 CVE record

CVSS 7.0 High

Windows NT OS Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23297 CVE record

CVSS 5.5 Medium

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23296 CVE record

CVSS 7.8 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23294 CVE record

CVSS 8.8 High

Windows Event Tracing Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23293 CVE record

CVSS 7.8 High

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23291 CVE record

CVSS 7.8 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23290 CVE record

CVSS 7.8 High

Windows Inking COM Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23288 CVE record

CVSS 7.0 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23287 CVE record

CVSS 7.0 High

Windows ALPC Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23286 CVE record

CVSS 7.0 High

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23285 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23284 CVE record

CVSS 7.2 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23283 CVE record

CVSS 7.0 High

Windows ALPC Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23281 CVE record

CVSS 5.5 Medium

Windows Common Log File System Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23253 CVE record

CVSS 6.5 Medium

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-22010 CVE record

CVSS 4.4 Medium

Media Foundation Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-21990 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-21977 CVE record

CVSS 3.3 Low

Media Foundation Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-21967 CVE record

CVSS 7.0 High

Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 9 Mar 2022
CVE-2022-22718 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-22717 CVE record

CVSS 7.0 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-22715 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Named Pipe File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-22710 CVE record

CVSS 5.5 Medium

Windows Common Log File System Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-22002 CVE record

CVSS 5.5 Medium

Windows User Account Profile Picture Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-22001 CVE record

CVSS 7.8 High

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-22000 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21999 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 9 Feb 2022
CVE-2022-21998 CVE record

CVSS 5.5 Medium

Windows Common Log File System Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21997 CVE record

CVSS 7.1 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21994 CVE record

CVSS 7.8 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21993 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21992 CVE record

CVSS 7.8 High

Windows Mobile Device Management Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21989 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21985 CVE record

CVSS 5.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21984 CVE record

CVSS 8.8 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1909
- Microsoft Windows 10 Version 21H1
Not analysed yet 9 Feb 2022
CVE-2022-21981 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21974 CVE record

CVSS 7.8 High

Roaming Security Rights Management Services Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21971 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Feb 2022
CVE-2022-21963 CVE record

CVSS 6.4 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022