Advisories · Technology

Microsoft Windows 10 Version 20H2.

Every CVE that names Microsoft Windows 10 Version 20H2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-28229 CVE record

CVSS 7.0 HighCritical · KEVKEV

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-28228 CVE record

CVSS 5.5 Medium

Windows Spoofing Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Weak cryptography or TLS
Not analysed yet 11 Apr 2023
CVE-2023-28227 CVE record

CVSS 7.5 High

Windows Bluetooth Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28226 CVE record

CVSS 5.3 Medium

Windows Enroll Engine Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 20H2
- Weak cryptography or TLS
Not analysed yet 11 Apr 2023
CVE-2023-28225 CVE record

CVSS 7.8 High

Windows NTLM Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28224 CVE record

CVSS 7.1 High

Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-28220 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-28219 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-24929 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24887 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24928 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24886 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24927 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24885 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24926 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24884 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-681
Not analysed yet 11 Apr 2023
CVE-2023-24925 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24883 CVE record

CVSS 6.5 Medium

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 11 Apr 2023
CVE-2023-24924 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24912 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-21554 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 11 Apr 2023
CVE-2023-28298 CVE record

CVSS 5.5 Medium

Windows Kernel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Apr 2023
CVE-2023-28297 CVE record

CVSS 8.8 High

Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28222 CVE record

CVSS 7.1 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 11 Apr 2023
CVE-2023-28221 CVE record

CVSS 7.0 High

Windows Error Reporting Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Information disclosure
Not analysed yet 11 Apr 2023
CVE-2023-28218 CVE record

CVSS 7.0 HighCritical · CVSS 7+ and EPSS

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28217 CVE record

CVSS 7.5 High

Windows Network Address Translation (NAT) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Denial of service
Not analysed yet 11 Apr 2023
CVE-2023-28216 CVE record

CVSS 7.0 High

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Apr 2023
CVE-2023-24931 CVE record

CVSS 7.5 High

Windows Secure Channel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-21769 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-21729 CVE record

CVSS 4.3 Medium

Remote Procedure Call Runtime Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-21727 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24880 CVE record

CVSS 4.4 MediumCritical · KEVKEV · ransomware

Windows SmartScreen Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 14 Mar 2023
CVE-2023-24876 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24913 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24872 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24871 CVE record

CVSS 8.8 High

Windows Bluetooth Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 10 Version 20H2
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24911 CVE record

CVSS 4.3 Medium

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24870 CVE record

CVSS 6.5 Medium

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 14 Mar 2023
CVE-2023-24910 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24909 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24869 CVE record

CVSS 8.1 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24908 CVE record

CVSS 8.1 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24868 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24907 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24867 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24906 CVE record

CVSS 6.5 Medium

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24866 CVE record

CVSS 6.5 Medium

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 14 Mar 2023
CVE-2023-24865 CVE record

CVSS 6.5 Medium

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 14 Mar 2023
CVE-2023-24864 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24863 CVE record

CVSS 6.5 Medium

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24862 CVE record

CVSS 5.5 Medium

Windows Secure Channel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24861 CVE record

CVSS 7.0 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 14 Mar 2023
CVE-2023-24859 CVE record

CVSS 7.5 High

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24858 CVE record

CVSS 7.5 High

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 14 Mar 2023
CVE-2023-24857 CVE record

CVSS 6.5 Medium

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 14 Mar 2023
CVE-2023-23423 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 14 Mar 2023
CVE-2023-23422 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 14 Mar 2023
CVE-2023-23421 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-23420 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023