Advisories · Technology

Microsoft Windows 10 Version 20H2.

Every CVE that names Microsoft Windows 10 Version 20H2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-21771 CVE record

CVSS 7.0 High

Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 10 Version 20H2
- CWE-591
Not analysed yet 10 Jan 2023
CVE-2023-21767 CVE record

CVSS 7.8 High

Windows Overlay Filter Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 10 Jan 2023
CVE-2023-21766 CVE record

CVSS 4.7 Medium

Windows Overlay Filter Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 10 Jan 2023
CVE-2023-21765 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21760 CVE record

CVSS 7.1 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 10 Jan 2023
CVE-2023-21759 CVE record

CVSS 3.3 Low

Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 22H2
- Microsoft Windows 11 version 22H2
Not analysed yet 10 Jan 2023
CVE-2023-21758 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21757 CVE record

CVSS 7.5 High

Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21755 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 20H2
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21754 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21752 CVE record

CVSS 7.1 High

Windows Backup Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 22H2
- Microsoft Windows 11 version 22H2
- Broken access control
Not analysed yet 10 Jan 2023
CVE-2023-21750 CVE record

CVSS 7.1 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 10 Jan 2023
CVE-2023-21749 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 10 Jan 2023
CVE-2023-21748 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 Jan 2023
CVE-2023-21747 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21746 CVE record

CVSS 7.8 High

Windows NTLM Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 Jan 2023
CVE-2023-21739 CVE record

CVSS 7.0 High

Windows Bluetooth Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 20H2
- CWE-591
Not analysed yet 10 Jan 2023
CVE-2023-21733 CVE record

CVSS 7.0 High

Windows Bind Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 10 Version 20H2
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21732 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21730 CVE record

CVSS 7.8 High

Microsoft Cryptographic Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21728 CVE record

CVSS 7.5 High

Windows Netlogon Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Denial of service
Not analysed yet 10 Jan 2023
CVE-2023-21726 CVE record

CVSS 7.8 High

Windows Credential Manager User Interface Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-257
Not analysed yet 10 Jan 2023
CVE-2023-21724 CVE record

CVSS 7.8 High

Microsoft DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 10 Version 20H2
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21683 CVE record

CVSS 7.5 High

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21682 CVE record

CVSS 5.3 Medium

Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21681 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21680 CVE record

CVSS 7.8 High

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21679 CVE record

CVSS 8.1 High

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21678 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 10 Jan 2023
CVE-2023-21677 CVE record

CVSS 7.5 High

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21676 CVE record

CVSS 8.8 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 Jan 2023
CVE-2023-21675 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21674 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21563 CVE record

CVSS 6.8 Medium

BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 Jan 2023
CVE-2023-21561 CVE record

CVSS 7.8 High

Microsoft Cryptographic Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21560 CVE record

CVSS 6.6 Medium

Windows Boot Manager Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21559 CVE record

CVSS 5.5 Medium

Windows Cryptographic Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 10 Jan 2023
CVE-2023-21558 CVE record

CVSS 7.8 High

Windows Error Reporting Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 10 Jan 2023
CVE-2023-21557 CVE record

CVSS 7.5 High

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21556 CVE record

CVSS 8.1 High

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21555 CVE record

CVSS 8.1 High

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 10 Jan 2023
CVE-2023-21552 CVE record

CVSS 7.8 High

Windows GDI Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21551 CVE record

CVSS 7.8 High

Microsoft Cryptographic Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21550 CVE record

CVSS 5.5 Medium

Windows Cryptographic Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 10 Jan 2023
CVE-2023-21549 CVE record

CVSS 8.8 High

Windows SMB Witness Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 10 Jan 2023
CVE-2023-21548 CVE record

CVSS 8.1 High

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 10 Jan 2023
CVE-2023-21547 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21546 CVE record

CVSS 8.1 High

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 10 Jan 2023
CVE-2023-21543 CVE record

CVSS 8.1 High

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Denial of service
Not analysed yet 10 Jan 2023
CVE-2023-21541 CVE record

CVSS 7.8 High

Windows Task Scheduler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 Jan 2023
CVE-2023-21540 CVE record

CVSS 5.5 Medium

Windows Cryptographic Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 10 Jan 2023
CVE-2023-21539 CVE record

CVSS 7.5 High

Windows Authentication Remote Code Execution Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 10 Version 20H2
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21537 CVE record

CVSS 7.8 High

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 10 Jan 2023
CVE-2023-21536 CVE record

CVSS 4.7 Medium

Event Tracing for Windows Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21535 CVE record

CVSS 8.1 High

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 10 Jan 2023
CVE-2023-21532 CVE record

CVSS 7.0 High

Windows GDI Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21527 CVE record

CVSS 7.5 High

Windows iSCSI Service Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21525 CVE record

CVSS 5.3 Medium

Remote Procedure Call Runtime Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 Jan 2023
CVE-2023-21524 CVE record

CVSS 7.8 High

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Hard-coded credentials
Not analysed yet 10 Jan 2023
CVE-2022-44707 CVE record

CVSS 6.5 Medium

Windows Kernel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Dec 2022