W1
Product
Windows 10 Version 20H2
On CISA KEVExploited in the wildRansomware-linked
283
CVEs
54
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 211Medium 61Low 0
Watch
Add Windows 10 Version 20H2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-35756 | 7.8 | May 31 | Windows Kerberos Elevation of Privilege Vulnerability Affected: before 10.0.19042.1889; before 10.0.19042.1889; before 10.0.19042.1889 |
| CVE-2022-35751 | 7.8 | May 31 | Windows Hyper-V Elevation of Privilege Vulnerability Affected: before 10.0.19042.1889 |
| CVE-2022-35750 | 7.8 | May 31 | Win32k Elevation of Privilege Vulnerability Affected: before 10.0.19042.1889; before 10.0.19042.1889; before 10.0.19042.1889 |
| CVE-2022-35749 | 7.8 | May 31 | Windows Digital Media Receiver Elevation of Privilege Vulnerability Affected: before 10.0.19042.1889 |
| CVE-2022-35746 | 7.8 | May 31 | Windows Digital Media Receiver Elevation of Privilege Vulnerability Affected: before 10.0.19042.1889 |
| CVE-2022-35743 | 7.8 | May 31 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Affected: before 10.0.19042.1889 |
| CVE-2023-24949 | 7.8 | May 9 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-24946 | 7.8 | May 9 | Windows Backup Service Elevation of Privilege Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-24905 | 7.8 | May 9 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-28293 | 7.8 | Apr 11 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28274 | 7.8 | Apr 11 | Windows Win32k Elevation of Privilege Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28272 | 7.8 | Apr 11 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28248 | 7.8 | Apr 11 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28237 | 7.8 | Apr 11 | Windows Kernel Remote Code Execution Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28236 | 7.8 | Apr 11 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28225 | 7.8 | Apr 11 | Windows NTLM Elevation of Privilege Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-24912 | 7.8 | Apr 11 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-24910 | 7.8 | Mar 14 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-23423 | 7.8 | Mar 14 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-23422 | 7.8 | Mar 14 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-23421 | 7.8 | Mar 14 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-23420 | 7.8 | Mar 14 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-23417 | 7.8 | Mar 14 | Windows Partition Management Driver Elevation of Privilege Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-23416 | 7.8 | Mar 14 | Windows Cryptographic Services Remote Code Execution Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-23412 | 7.8 | Mar 14 | Windows Accounts Picture Elevation of Privilege Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-23410 | 7.8 | Mar 14 | Windows HTTP.sys Elevation of Privilege Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-23402 | 7.8 | Mar 14 | Windows Media Remote Code Execution Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-23401 | 7.8 | Mar 14 | Windows Media Remote Code Execution Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-1017 | 7.8 | Feb 28 | An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine Affected: before 10.0.19042.2728 |
| CVE-2023-21822 | 7.8 | Feb 14 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21817 | 7.8 | Feb 14 | Windows Kerberos Elevation of Privilege Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21812 | 7.8 | Feb 14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21805 | 7.8 | Feb 14 | Windows MSHTML Platform Remote Code Execution Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21804 | 7.8 | Feb 14 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21802 | 7.8 | Feb 14 | Windows Media Remote Code Execution Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21801 | 7.8 | Feb 14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21688 | 7.8 | Feb 14 | NT OS Kernel Elevation of Privilege Vulnerability Affected: before 10.0.19042.2604; before 10.0.19042.2604; before 10.0.19042.2604 |
| CVE-2022-38396 | 7.8 | Feb 12 | HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain… Affected: All versions, or not specified |
| CVE-2023-21774 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21773 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21772 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21755 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21754 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21749 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21748 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21747 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21730 | 7.8 | Jan 10 | Microsoft Cryptographic Services Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21726 | 7.8 | Jan 10 | Windows Credential Manager User Interface Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21724 | 7.8 | Jan 10 | Microsoft DWM Core Library Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21680 | 7.8 | Jan 10 | Windows Win32k Elevation of Privilege Vulnerability Affected: All versions, or not specified |