Advisories · Technology

Microsoft Windows 10 Version 20H2.

Every CVE that names Microsoft Windows 10 Version 20H2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-23417 CVE record

CVSS 7.8 High

Windows Partition Management Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-23416 CVE record

CVSS 7.8 High

Windows Cryptographic Services Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 14 Mar 2023
CVE-2023-23415 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-23414 CVE record

CVSS 7.1 High

Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 14 Mar 2023
CVE-2023-23413 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-23412 CVE record

CVSS 7.8 High

Windows Accounts Picture Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Privilege escalation
Not analysed yet 14 Mar 2023
CVE-2023-23410 CVE record

CVSS 7.8 High

Windows HTTP.sys Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-23409 CVE record

CVSS 5.5 Medium

Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 14 Mar 2023
CVE-2023-23407 CVE record

CVSS 7.1 High

Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 14 Mar 2023
CVE-2023-23406 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-23405 CVE record

CVSS 8.1 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-23404 CVE record

CVSS 8.1 High

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-23402 CVE record

CVSS 7.8 High

Windows Media Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-23401 CVE record

CVSS 7.8 High

Windows Media Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-681
Not analysed yet 14 Mar 2023
CVE-2023-21708 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24856 CVE record

CVSS 7.5 High

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 14 Mar 2023
CVE-2023-23403 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-23394 CVE record

CVSS 5.5 Medium

Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-23393 CVE record

CVSS 7.0 High

Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 14 Mar 2023
CVE-2023-23388 CVE record

CVSS 8.8 High

Windows Bluetooth Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-681
Not analysed yet 14 Mar 2023
CVE-2023-23385 CVE record

CVSS 7.0 High

Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-21823 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows Graphics Component Remote Code Execution Vulnerability
- Microsoft Office for Android
- Microsoft Office for iOS
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-23376 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21702 CVE record

CVSS 7.5 High

Windows iSCSI Service Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21701 CVE record

CVSS 7.5 High

Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 14 Feb 2023
CVE-2023-21700 CVE record

CVSS 7.5 High

Windows iSCSI Discovery Service Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21699 CVE record

CVSS 5.3 Medium

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21697 CVE record

CVSS 6.2 Medium

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 14 Feb 2023
CVE-2023-21695 CVE record

CVSS 7.5 High

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21694 CVE record

CVSS 6.8 Medium

Windows Fax Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21693 CVE record

CVSS 5.7 Medium

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21692 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21691 CVE record

CVSS 7.5 High

Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21690 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21689 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21688 CVE record

CVSS 7.8 High

NT OS Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21686 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21685 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 14 Feb 2023
CVE-2023-21822 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21820 CVE record

CVSS 7.4 High

Windows Distributed File System (DFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 14 Feb 2023
CVE-2023-21819 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Windows Secure Channel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 20H2
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21818 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Windows Secure Channel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 14 Feb 2023
CVE-2023-21817 CVE record

CVSS 7.8 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Authentication bypass
Not analysed yet 14 Feb 2023
CVE-2023-21816 CVE record

CVSS 7.5 High

Windows Active Directory Domain Services API Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 14 Feb 2023
CVE-2023-21813 CVE record

CVSS 7.5 High

Windows Secure Channel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 14 Feb 2023
CVE-2023-21812 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21811 CVE record

CVSS 7.5 High

Windows iSCSI Service Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 14 Feb 2023
CVE-2023-21805 CVE record

CVSS 7.8 High

Windows MSHTML Platform Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Command injection
Not analysed yet 14 Feb 2023
CVE-2023-21804 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21803 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows iSCSI Discovery Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21802 CVE record

CVSS 7.8 High

Windows Media Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21801 CVE record

CVSS 7.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-189
Not analysed yet 14 Feb 2023
CVE-2023-21799 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21798 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21797 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21684 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21776 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21774 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21773 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21772 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023