W1
Product
Windows 10 Version 20H2
On CISA KEVExploited in the wildRansomware-linked
283
CVEs
54
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 211Medium 61Low 0
Watch
Add Windows 10 Version 20H2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-34448 In wildKEV | 6.8 | Jul 16 | Scripting Engine Memory Corruption Vulnerability Affected: before 10.0.19042.1110 |
| CVE-2022-26925 In wildKEV | 5.9 | May 10 | Windows LSA Spoofing Vulnerability Affected: before 10.0.19042.1706 |
| CVE-2021-41379 RansomwareIn wildKEV | 5.5 | Nov 10 | Windows Installer Elevation of Privilege Vulnerability Affected: before 10.0.19042.1348 |
| CVE-2021-31955 In wildKEV | 5.5 | Jun 8 | Windows Kernel Information Disclosure Vulnerability Affected: 10.0.0 before 10.0.19042.1052 |
| CVE-2013-3900 In wildKEV | 5.5 | Dec 11 | WinVerifyTrust Signature Validation Vulnerability Affected: All versions, or not specified |
| CVE-2022-44698 RansomwareIn wildKEV | 5.4 | Dec 13 | Windows SmartScreen Security Feature Bypass Vulnerability Affected: before 10.0.19042.2364 |
| CVE-2022-41091 RansomwareIn wildKEV | 5.4 | Nov 9 | Windows Mark of the Web Security Feature Bypass Vulnerability Affected: before 10.0.19042.2251 |
| CVE-2022-41049 In wildKEV | 5.4 | Nov 9 | Windows Mark of the Web Security Feature Bypass Vulnerability Affected: before 10.0.19042.2251 |
| CVE-2021-31199 In wildKEV | 5.2 | Jun 8 | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19042.1052 |
| CVE-2021-31201 In wildKEV | 5.2 | Jun 8 | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19042.1052 |
| CVE-2023-24880 RansomwareIn wildKEV | 4.4 | Mar 14 | Windows SmartScreen Security Feature Bypass Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-28270 | 6.8 | Apr 11 | Windows Lock Screen Security Feature Bypass Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28269 | 6.8 | Apr 11 | Windows Boot Manager Security Feature Bypass Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28249 | 6.8 | Apr 11 | Windows Boot Manager Security Feature Bypass Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28235 | 6.8 | Apr 11 | Windows Lock Screen Security Feature Bypass Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-21694 | 6.8 | Feb 14 | Windows Fax Service Remote Code Execution Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21563 | 6.8 | Jan 10 | BitLocker Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2023-24932 | 6.7 | May 9 | Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-21560 | 6.6 | Jan 10 | Windows Boot Manager Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2022-44684 | 6.5 | Dec 20 | Windows Local Session Manager (LSM) Denial of Service Vulnerability Affected: before 10.0.19042.2364 |
| CVE-2022-35759 | 6.5 | May 31 | Windows Local Security Authority (LSA) Denial of Service Vulnerability Affected: before 10.0.19042.1889; before 10.0.19042.1889; before 10.0.19042.1889 |
| CVE-2023-29324 | 6.5 | May 9 | Windows MSHTML Platform Security Feature Bypass Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-24954 | 6.5 | May 9 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-24944 | 6.5 | May 9 | Windows Bluetooth Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-28267 | 6.5 | Apr 11 | Remote Desktop Protocol Client Information Disclosure Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-24883 | 6.5 | Apr 11 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-24906 | 6.5 | Mar 14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-24870 | 6.5 | Mar 14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-24866 | 6.5 | Mar 14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-24865 | 6.5 | Mar 14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-24863 | 6.5 | Mar 14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-24857 | 6.5 | Mar 14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-23411 | 6.5 | Mar 14 | Windows Hyper-V Denial of Service Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2022-26934 | 6.5 | May 10 | Windows Graphics Component Information Disclosure Vulnerability Affected: before 10.0.19042.1706 |
| CVE-2022-35747 | 5.9 | May 31 | Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability Affected: before 10.0.19042.1889 |
| CVE-2023-24900 | 5.9 | May 9 | Windows NTLM Security Support Provider Information Disclosure Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-21693 | 5.7 | Feb 14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2022-35758 | 5.5 | May 31 | Windows Kernel Memory Information Disclosure Vulnerability Affected: before 10.0.19042.1889; before 10.0.19042.1889; before 10.0.19042.1889 |
| CVE-2023-28251 | 5.5 | May 9 | Windows Driver Revocation List Security Feature Bypass Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-24945 | 5.5 | May 9 | Windows iSCSI Target Service Information Disclosure Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-28298 | 5.5 | Apr 11 | Windows Kernel Denial of Service Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28271 | 5.5 | Apr 11 | Windows Kernel Memory Information Disclosure Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28266 | 5.5 | Apr 11 | Windows Common Log File System Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28253 | 5.5 | Apr 11 | Windows Kernel Information Disclosure Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28228 | 5.5 | Apr 11 | Windows Spoofing Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-24862 | 5.5 | Mar 14 | Windows Secure Channel Denial of Service Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-23409 | 5.5 | Mar 14 | Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-23394 | 5.5 | Mar 14 | Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-1018 | 5.5 | Feb 28 | An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine Affected: before 10.0.19042.2728 |
| CVE-2023-21697 | 5.5 | Feb 14 | Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability Affected: before 10.0.19042.2604 |