# Microsoft Windows 10.

Every CVE that names Microsoft Windows 10 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Medium to High Integrity Privilege Escalation in Microsoft Windows](https://agentprime.io/advisories/CVE-2024-6769.md)
  `CVE-2024-6769` · CVE record: Microsoft Windows 10 and 4 more · CVSS 8.4 High · Not analysed yet · Published 26 Sept 2024 · Tags: CWE-426, CWE-427
- [Denial of Service in CLFS.sys](https://agentprime.io/advisories/CVE-2024-6768.md)
  `CVE-2024-6768` · CVE record: Microsoft Windows 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 12 Aug 2024 · Tags: CWE-1284
- [Microsoft Windows 7: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0584.md)
  `CVE-2019-0584` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.14 · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows 7: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0583.md)
  `CVE-2019-0583` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.16 · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows 7: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0582.md)
  `CVE-2019-0582` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.12 · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows 7: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0581.md)
  `CVE-2019-0581` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.14 · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows 7: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0580.md)
  `CVE-2019-0580` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.17 · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows 7: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0579.md)
  `CVE-2019-0579` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.17 · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows 7: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0577.md)
  `CVE-2019-0577` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.17 · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows 7: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0576.md)
  `CVE-2019-0576` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.17 · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows 7: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0575.md)
  `CVE-2019-0575` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.14 · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows Server 2016: An elevation of privilege vulnerability exists when the Windows Data Sharing Service…](https://agentprime.io/advisories/CVE-2019-0574.md)
  `CVE-2019-0574` · CVE record: Microsoft Windows Server 2016 and 3 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows Server 2016: An elevation of privilege vulnerability exists when the Windows Data Sharing Service…](https://agentprime.io/advisories/CVE-2019-0573.md)
  `CVE-2019-0573` · CVE record: Microsoft Windows Server 2016 and 3 more · No CVSS score · EPSS 0.20 · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows Server 2016: An elevation of privilege vulnerability exists when the Windows Data Sharing Service…](https://agentprime.io/advisories/CVE-2019-0572.md)
  `CVE-2019-0572` · CVE record: Microsoft Windows Server 2016 and 3 more · No CVSS score · EPSS 0.25 · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows Server 2016: An elevation of privilege vulnerability exists when the Windows Data Sharing Service…](https://agentprime.io/advisories/CVE-2019-0571.md)
  `CVE-2019-0571` · CVE record: Microsoft Windows Server 2016 and 3 more · No CVSS score · EPSS 0.16 · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows Server 2012 R2: An elevation of privilege vulnerability exists when the Windows Runtime improperly…](https://agentprime.io/advisories/CVE-2019-0570.md)
  `CVE-2019-0570` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · No CVSS score · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2019-0569.md)
  `CVE-2019-0569` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2019-0554.md)
  `CVE-2019-0554` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows 10 Servers: An information disclosure vulnerability exists when Windows Subsystem for Linux…](https://agentprime.io/advisories/CVE-2019-0553.md)
  `CVE-2019-0553` · CVE record: Microsoft Windows 10 Servers and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows Server 2012 R2: An elevation of privilege exists in Windows COM Desktop Broker…](https://agentprime.io/advisories/CVE-2019-0552.md)
  `CVE-2019-0552` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · No CVSS score · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows Server 2016: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails…](https://agentprime.io/advisories/CVE-2019-0551.md)
  `CVE-2019-0551` · CVE record: Microsoft Windows Server 2016 and 3 more · No CVSS score · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows 10 Servers: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails…](https://agentprime.io/advisories/CVE-2019-0550.md)
  `CVE-2019-0550` · CVE record: Microsoft Windows 10 Servers and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2019-0549.md)
  `CVE-2019-0549` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows 10: A memory corruption vulnerability exists in the Windows DHCP client when an attacker…](https://agentprime.io/advisories/CVE-2019-0547.md)
  `CVE-2019-0547` · CVE record: Microsoft Windows 10 and 1 more · No CVSS score · EPSS 0.71 · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2019-0536.md)
  `CVE-2019-0536` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 8 Jan 2019
- [Microsoft Windows 10: A denial of service vulnerability exists when Windows improperly handles objects in…](https://agentprime.io/advisories/CVE-2018-8649.md)
  `CVE-2018-8649` · CVE record: Microsoft Windows 10 and 1 more · No CVSS score · Not analysed yet · Published 12 Dec 2018
- [Microsoft Windows 7: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode…](https://agentprime.io/advisories/CVE-2018-8641.md)
  `CVE-2018-8641` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 12 Dec 2018
- [Improper resource shutdown in Microsoft Windows 7 and others](https://agentprime.io/advisories/CVE-2018-8639.md)
  `CVE-2018-8639` · CVE record: Microsoft Windows 7 and 4 more · CVSS 8.4 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.22 · Not analysed yet · Published 12 Dec 2018 · Tags: Denial of service
- [Microsoft Windows 10: An information disclosure vulnerability exists when DirectX improperly handles objects in…](https://agentprime.io/advisories/CVE-2018-8638.md)
  `CVE-2018-8638` · CVE record: Microsoft Windows 10 and 1 more · No CVSS score · Not analysed yet · Published 12 Dec 2018
- [Microsoft Windows 10 Servers: An information disclosure vulnerability exists in Windows kernel that could allow an…](https://agentprime.io/advisories/CVE-2018-8637.md)
  `CVE-2018-8637` · CVE record: Microsoft Windows 10 Servers and 2 more · No CVSS score · Not analysed yet · Published 12 Dec 2018
- [Microsoft Windows Server 2016: A remote code execution vulnerability exists in Windows where Microsoft text-to-speech…](https://agentprime.io/advisories/CVE-2018-8634.md)
  `CVE-2018-8634` · CVE record: Microsoft Windows Server 2016 and 3 more · No CVSS score · EPSS 0.15 · Not analysed yet · Published 12 Dec 2018
- [Microsoft Windows Server 2012 R2: A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers…](https://agentprime.io/advisories/CVE-2018-8626.md)
  `CVE-2018-8626` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · No CVSS score · EPSS 0.21 · Not analysed yet · Published 12 Dec 2018
- [Microsoft Windows Server 2016: A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry…](https://agentprime.io/advisories/CVE-2018-8612.md)
  `CVE-2018-8612` · CVE record: Microsoft Windows Server 2016 and 3 more · No CVSS score · Not analysed yet · Published 12 Dec 2018
- [Improper resource shutdown in Microsoft Windows 7 and others](https://agentprime.io/advisories/CVE-2018-8611.md)
  `CVE-2018-8611` · CVE record: Microsoft Windows 7 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 12 Dec 2018 · Tags: Denial of service
- [Microsoft Visual Studio: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard…](https://agentprime.io/advisories/CVE-2018-8599.md)
  `CVE-2018-8599` · CVE record: Microsoft Microsoft Visual Studio and 4 more · No CVSS score · Not analysed yet · Published 12 Dec 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows GDI component improperly…](https://agentprime.io/advisories/CVE-2018-8596.md)
  `CVE-2018-8596` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 12 Dec 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows GDI component improperly…](https://agentprime.io/advisories/CVE-2018-8595.md)
  `CVE-2018-8595` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 12 Dec 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when Remote Procedure Call runtime…](https://agentprime.io/advisories/CVE-2018-8514.md)
  `CVE-2018-8514` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 12 Dec 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2018-8477.md)
  `CVE-2018-8477` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 12 Dec 2018
- [Microsoft Windows 10: An elevation of privilege vulnerability exists in Windows 10 version 1809 when installed…](https://agentprime.io/advisories/CVE-2018-8592.md)
  `CVE-2018-8592` · CVE record: Microsoft Windows 10 and 1 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows Server 2016: An elevation of privilege vulnerability exists when Windows improperly handles calls to…](https://agentprime.io/advisories/CVE-2018-8584.md)
  `CVE-2018-8584` · CVE record: Microsoft Windows Server 2016 and 3 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows Server 2016: A security feature bypass vulnerability exists when Windows improperly suspends BitLocker…](https://agentprime.io/advisories/CVE-2018-8566.md)
  `CVE-2018-8566` · CVE record: Microsoft Windows Server 2016 and 3 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when the win32k component improperly…](https://agentprime.io/advisories/CVE-2018-8565.md)
  `CVE-2018-8565` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 7: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…](https://agentprime.io/advisories/CVE-2018-8562.md)
  `CVE-2018-8562` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows Server 2012 R2: An elevation of privilege vulnerability exists when DirectX improperly handles objects in…](https://agentprime.io/advisories/CVE-2018-8561.md)
  `CVE-2018-8561` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 10 Servers: An elevation of privilege vulnerability exists when DirectX improperly handles objects in…](https://agentprime.io/advisories/CVE-2018-8554.md)
  `CVE-2018-8554` · CVE record: Microsoft Windows 10 Servers and 2 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists in the way that Microsoft Graphics…](https://agentprime.io/advisories/CVE-2018-8553.md)
  `CVE-2018-8553` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows Server 2012 R2: A cross-site-scripting (XSS) vulnerability exists when an open source customization for…](https://agentprime.io/advisories/CVE-2018-8547.md)
  `CVE-2018-8547` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists in the way that the VBScript engine handles…](https://agentprime.io/advisories/CVE-2018-8544.md)
  `CVE-2018-8544` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.48 · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows Server 2012 R2: An elevation of privilege vulnerability exists when DirectX improperly handles objects in…](https://agentprime.io/advisories/CVE-2018-8485.md)
  `CVE-2018-8485` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows Server 2016: An elevation of privilege vulnerability exists in the way that the Microsoft RemoteFX…](https://agentprime.io/advisories/CVE-2018-8471.md)
  `CVE-2018-8471` · CVE record: Microsoft Windows Server 2016 and 4 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 10 Servers: An information disclosure vulnerability exists when Windows Audio Service fails to…](https://agentprime.io/advisories/CVE-2018-8454.md)
  `CVE-2018-8454` · CVE record: Microsoft Windows 10 Servers and 2 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists when Windows Search handles objects in…](https://agentprime.io/advisories/CVE-2018-8450.md)
  `CVE-2018-8450` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.16 · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows Server 2016: A security feature bypass vulnerability exists in Microsoft JScript that could allow an…](https://agentprime.io/advisories/CVE-2018-8417.md)
  `CVE-2018-8417` · CVE record: Microsoft Windows Server 2016 and 3 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 7: A tampering vulnerability exists in PowerShell that could allow an attacker to execute…](https://agentprime.io/advisories/CVE-2018-8415.md)
  `CVE-2018-8415` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows kernel improperly…](https://agentprime.io/advisories/CVE-2018-8408.md)
  `CVE-2018-8408` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when "Kernel Remote Procedure Call…](https://agentprime.io/advisories/CVE-2018-8407.md)
  `CVE-2018-8407` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists when PowerShell improperly handles specially…](https://agentprime.io/advisories/CVE-2018-8256.md)
  `CVE-2018-8256` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.23 · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 10 Servers: An Information Disclosure vulnerability exists in the way that Microsoft Windows Codecs…](https://agentprime.io/advisories/CVE-2018-8506.md)
  `CVE-2018-8506` · CVE record: Microsoft Windows 10 Servers and 2 more · No CVSS score · Not analysed yet · Published 10 Oct 2018
- [Microsoft Windows Server 2016: An elevation of privilege vulnerability exists in the way that the Windows Kernel handles…](https://agentprime.io/advisories/CVE-2018-8497.md)
  `CVE-2018-8497` · CVE record: Microsoft Windows Server 2016 and 3 more · No CVSS score · Not analysed yet · Published 10 Oct 2018

Older: <https://agentprime.io/advisories/technology/microsoft-windows-10.md?cursor=WyIyMDE4LTEwLTEwVDEzOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOC04NDk3Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-10>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-10/>. Everything for agents: <https://agentprime.io/llms.txt>.