W1
Product
Windows 10 Version 20H2
On CISA KEVExploited in the wildRansomware-linked
283
CVEs
54
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 211Medium 61Low 0
Watch
Add Windows 10 Version 20H2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-1017 | 7.8 | Feb 28 | An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine Affected: before 10.0.19042.2728 |
| CVE-2023-21822 | 7.8 | Feb 14 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21817 | 7.8 | Feb 14 | Windows Kerberos Elevation of Privilege Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21812 | 7.8 | Feb 14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21805 | 7.8 | Feb 14 | Windows MSHTML Platform Remote Code Execution Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21804 | 7.8 | Feb 14 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21802 | 7.8 | Feb 14 | Windows Media Remote Code Execution Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21801 | 7.8 | Feb 14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21688 | 7.8 | Feb 14 | NT OS Kernel Elevation of Privilege Vulnerability Affected: before 10.0.19042.2604; before 10.0.19042.2604; before 10.0.19042.2604 |
| CVE-2022-38396 | 7.8 | Feb 12 | HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain… Affected: All versions, or not specified |
| CVE-2023-21774 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21773 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21772 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21755 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21754 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21749 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21748 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21747 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21730 | 7.8 | Jan 10 | Microsoft Cryptographic Services Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21726 | 7.8 | Jan 10 | Windows Credential Manager User Interface Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21724 | 7.8 | Jan 10 | Microsoft DWM Core Library Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21680 | 7.8 | Jan 10 | Windows Win32k Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21678 | 7.8 | Jan 10 | Windows Print Spooler Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21675 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21561 | 7.8 | Jan 10 | Microsoft Cryptographic Services Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21552 | 7.8 | Jan 10 | Windows GDI Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21551 | 7.8 | Jan 10 | Microsoft Cryptographic Services Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21541 | 7.8 | Jan 10 | Windows Task Scheduler Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21537 | 7.8 | Jan 10 | Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21524 | 7.8 | Jan 10 | Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2022-41094 | 7.8 | Dec 13 | Windows Hyper-V Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2022-21871 | 7.8 | Jan 11 | Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability Affected: before 10.0.19042.1466 |
| CVE-2023-29335 | 7.5 | May 9 | Microsoft Word Security Feature Bypass Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-29325 | 7.5 | May 9 | Windows OLE Remote Code Execution Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-24942 | 7.5 | May 9 | Remote Procedure Call Runtime Denial of Service Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-24940 | 7.5 | May 9 | Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-24939 | 7.5 | May 9 | Server for NFS Denial of Service Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-24901 | 7.5 | May 9 | Windows NFS Portmapper Information Disclosure Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-28302 | 7.5 | Apr 11 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28241 | 7.5 | Apr 11 | Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28238 | 7.5 | Apr 11 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28232 | 7.5 | Apr 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28227 | 7.5 | Apr 11 | Windows Bluetooth Driver Remote Code Execution Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28217 | 7.5 | Apr 11 | Windows Network Address Translation (NAT) Denial of Service Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-24931 | 7.5 | Apr 11 | Windows Secure Channel Denial of Service Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-21769 | 7.5 | Apr 11 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-24859 | 7.5 | Mar 14 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-24858 | 7.5 | Mar 14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-24856 | 7.5 | Mar 14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-21819 | 7.5 | Feb 14 | Windows Secure Channel Denial of Service Vulnerability Affected: before 10.0.19042.2604 |