Advisories · Technology

Microsoft Windows 10 Version 20H2.

Every CVE that names Microsoft Windows 10 Version 20H2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-21852 CVE record

CVSS 7.8 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21851 CVE record

CVSS 8.8 High

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21850 CVE record

CVSS 8.8 High

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21849 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21848 CVE record

CVSS 7.5 High

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21843 CVE record

CVSS 7.5 High

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21838 CVE record

CVSS 5.5 Medium

Windows Cleanup Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21836 CVE record

CVSS 7.8 High

Windows Certificate Spoofing Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21835 CVE record

CVSS 7.8 High

Microsoft Cryptographic Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21834 CVE record

CVSS 7.0 High

Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21833 CVE record

CVSS 7.8 High

Virtual Machine IDE Drive Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2021-43893 CVE record

CVSS 7.5 High

Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43883 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43248 CVE record

CVSS 7.8 High

Windows Digital Media Receiver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43247 CVE record

CVSS 7.8 High

Windows TCP/IP Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43244 CVE record

CVSS 6.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43240 CVE record

CVSS 7.8 High

NTFS Set Short Name Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1909
- Microsoft Windows 10 Version 21H1
Not analysed yet 15 Dec 2021
CVE-2021-43239 CVE record

CVSS 7.1 High

Windows Recovery Environment Agent Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H1
- Microsoft Windows Server 2022
Not analysed yet 15 Dec 2021
CVE-2021-43238 CVE record

CVSS 7.8 High

Windows Remote Access Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43237 CVE record

CVSS 7.8 High

Windows Setup Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1909
- Microsoft Windows 10 Version 21H1
- Path traversal
Not analysed yet 15 Dec 2021
CVE-2021-43236 CVE record

CVSS 7.5 High

Microsoft Message Queuing Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43235 CVE record

CVSS 5.5 Medium

Storage Spaces Controller Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43234 CVE record

CVSS 7.8 High

Windows Fax Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43233 CVE record

CVSS 7.5 High

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43232 CVE record

CVSS 7.8 High

Windows Event Tracing Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43231 CVE record

CVSS 7.8 High

Windows NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43230 CVE record

CVSS 7.8 High

Windows NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43229 CVE record

CVSS 7.8 High

Windows NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43228 CVE record

CVSS 7.5 High

SymCrypt Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43227 CVE record

CVSS 5.5 Medium

Storage Spaces Controller Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43226 CVE record

CVSS 7.8 HighCritical · KEVKEV · ransomware

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43224 CVE record

CVSS 5.5 Medium

Windows Common Log File System Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43223 CVE record

CVSS 7.8 High

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43222 CVE record

CVSS 7.5 High

Microsoft Message Queuing Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43219 CVE record

CVSS 7.4 High

DirectX Graphics Kernel File Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43217 CVE record

CVSS 8.1 High

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43216 CVE record

CVSS 6.5 Medium

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43215 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43207 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-41333 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-42288 CVE record

CVSS 5.7 Medium

Windows Hello Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 10 Nov 2021
CVE-2021-42286 CVE record

CVSS 7.8 High

Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 2004
- Microsoft Windows 10 Version 20H2
Not analysed yet 10 Nov 2021
CVE-2021-42285 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-42283 CVE record

CVSS 8.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-42280 CVE record

CVSS 5.5 Medium

Windows Feedback Hub Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
Not analysed yet 10 Nov 2021
CVE-2021-42277 CVE record

CVSS 5.5 Medium

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2015 Update 3
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Not analysed yet 10 Nov 2021
CVE-2021-42276 CVE record

CVSS 7.8 High

Microsoft Windows Media Foundation Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-42275 CVE record

CVSS 8.8 High

Microsoft COM for Windows Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41379 CVE record

CVSS 5.5 MediumCritical · KEVKEV · ransomware

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 10 Nov 2021
CVE-2021-41378 CVE record

CVSS 7.8 High

Windows NTFS Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 10 Nov 2021
CVE-2021-41377 CVE record

CVSS 7.8 High

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41371 CVE record

CVSS 4.4 Medium

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41370 CVE record

CVSS 7.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41367 CVE record

CVSS 7.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41366 CVE record

CVSS 7.8 High

Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41356 CVE record

CVSS 7.5 High

Windows Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-38666 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows 10 Version 1507
Not analysed yet 10 Nov 2021
CVE-2021-38665 CVE record

CVSS 7.4 High

Remote Desktop Protocol Client Information Disclosure Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows 10 Version 1507
Not analysed yet 10 Nov 2021
CVE-2021-38631 CVE record

CVSS 4.4 Medium

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-36957 CVE record

CVSS 7.8 High

Windows Desktop Bridge Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
Not analysed yet 10 Nov 2021