Advisories · Technology

Microsoft Windows 10 Version 20H2.

Every CVE that names Microsoft Windows 10 Version 20H2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-38006 CVE record

CVSS 6.5 Medium

Windows Graphics Component Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-38005 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-38004 CVE record

CVSS 7.8 High

Windows Fax Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-37969 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Sept 2022
CVE-2022-37958 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-37957 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-37955 CVE record

CVSS 7.8 High

Windows Group Policy Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-37954 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

DirectX Graphics Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-35841 CVE record

CVSS 8.8 High

Windows Enterprise App Management Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-35840 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-35836 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-35835 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-35834 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-35833 CVE record

CVSS 7.5 High

Windows Secure Channel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-35832 CVE record

CVSS 5.5 Medium

Windows Event Tracing Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-35831 CVE record

CVSS 5.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-35803 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 21H1
Not analysed yet 13 Sept 2022
CVE-2022-34734 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-34733 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-34732 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-34731 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-34730 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-34729 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Windows GDI Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-34728 CVE record

CVSS 5.5 Medium

Windows Graphics Component Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-34727 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-34726 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-34725 CVE record

CVSS 7.0 High

Windows ALPC Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-34722 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-34721 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-34720 CVE record

CVSS 7.5 High

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-34719 CVE record

CVSS 7.8 High

Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-34718 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows TCP/IP Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-30200 CVE record

CVSS 7.8 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-30196 CVE record

CVSS 8.2 High

Windows Secure Channel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-30170 CVE record

CVSS 7.3 High

Windows Credential Roaming Service Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Sept 2022
CVE-2022-26928 CVE record

CVSS 7.0 High

Windows Photo Import API Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-37956 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-35837 CVE record

CVSS 6.5 Medium

Windows Graphics Component Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-35822 CVE record

CVSS 7.1 High

Windows Defender Credential Guard Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Aug 2022
CVE-2022-34711 CVE record

CVSS 7.8 High

Windows Defender Credential Guard Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Aug 2022
CVE-2022-35820 CVE record

CVSS 7.8 High

Windows Bluetooth Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Aug 2022
CVE-2022-35797 CVE record

CVSS 6.1 Medium

Windows Hello Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H1
Not analysed yet 9 Aug 2022
CVE-2022-35795 CVE record

CVSS 7.8 High

Windows Error Reporting Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Aug 2022
CVE-2022-35794 CVE record

CVSS 8.1 High

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Aug 2022
CVE-2022-35793 CVE record

CVSS 7.3 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Aug 2022
CVE-2022-35792 CVE record

CVSS 7.8 High

Storage Spaces Direct Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Aug 2022
CVE-2022-35771 CVE record

CVSS 7.8 High

Windows Defender Credential Guard Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Privilege escalation
Not analysed yet 9 Aug 2022
CVE-2022-35769 CVE record

CVSS 7.5 High

Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Denial of service
Not analysed yet 9 Aug 2022
CVE-2022-35768 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Privilege escalation
Not analysed yet 9 Aug 2022
CVE-2022-35767 CVE record

CVSS 8.1 High

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Code injection
Not analysed yet 9 Aug 2022
CVE-2022-35766 CVE record

CVSS 8.1 High

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Code injection
Not analysed yet 9 Aug 2022
CVE-2022-35765 CVE record

CVSS 7.8 High

Storage Spaces Direct Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Privilege escalation
Not analysed yet 9 Aug 2022
CVE-2022-35764 CVE record

CVSS 7.8 High

Storage Spaces Direct Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Privilege escalation
Not analysed yet 9 Aug 2022
CVE-2022-35763 CVE record

CVSS 7.8 High

Storage Spaces Direct Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Privilege escalation
Not analysed yet 9 Aug 2022
CVE-2022-35762 CVE record

CVSS 7.8 High

Storage Spaces Direct Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Privilege escalation
Not analysed yet 9 Aug 2022
CVE-2022-35761 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Privilege escalation
Not analysed yet 9 Aug 2022
CVE-2022-35760 CVE record

CVSS 7.8 High

Microsoft ATA Port Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H1
- Microsoft Windows 10 Version 21H2
Not analysed yet 9 Aug 2022
CVE-2022-34714 CVE record

CVSS 8.1 High

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Code injection
Not analysed yet 9 Aug 2022
CVE-2022-34713 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Aug 2022
CVE-2022-34712 CVE record

CVSS 5.5 Medium

Windows Defender Credential Guard Information Disclosure Vulnerability
- Microsoft Windows 10 Version 21H1
- Microsoft Windows Server 2022
- Information disclosure
Not analysed yet 9 Aug 2022