W1
Product
Windows 10 Version 20H2
On CISA KEVExploited in the wildRansomware-linked
283
CVEs
54
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 211Medium 61Low 0
Watch
Add Windows 10 Version 20H2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-21818 | 7.5 | Feb 14 | Windows Secure Channel Denial of Service Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21816 | 7.5 | Feb 14 | Windows Active Directory Domain Services API Denial of Service Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21813 | 7.5 | Feb 14 | Windows Secure Channel Denial of Service Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21811 | 7.5 | Feb 14 | Windows iSCSI Service Denial of Service Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21702 | 7.5 | Feb 14 | Windows iSCSI Service Denial of Service Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21701 | 7.5 | Feb 14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21700 | 7.5 | Feb 14 | Windows iSCSI Discovery Service Denial of Service Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21691 | 7.5 | Feb 14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability Affected: before 10.0.19042.2604; before 10.0.19042.2604; before 10.0.19042.2604 |
| CVE-2023-21728 | 7.5 | Jan 10 | Windows Netlogon Denial of Service Vulnerability Affected: All versions, or not specified |
| CVE-2023-21683 | 7.5 | Jan 10 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Affected: All versions, or not specified |
| CVE-2023-21677 | 7.5 | Jan 10 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Affected: All versions, or not specified |
| CVE-2023-21557 | 7.5 | Jan 10 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability Affected: All versions, or not specified |
| CVE-2023-21539 | 7.5 | Jan 10 | Windows Authentication Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21527 | 7.5 | Jan 10 | Windows iSCSI Service Denial of Service Vulnerability Affected: All versions, or not specified |
| CVE-2023-24948 | 7.4 | May 9 | Windows Bluetooth Driver Elevation of Privilege Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-21820 | 7.4 | Feb 14 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2022-35757 | 7.3 | May 31 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Affected: before 10.0.19042.1889; before 10.0.19042.1889; before 10.0.19042.1889 |
| CVE-2022-35755 | 7.3 | May 31 | Windows Print Spooler Elevation of Privilege Vulnerability Affected: before 10.0.19042.1889; before 10.0.19042.1889; before 10.0.19042.1889 |
| CVE-2023-28224 | 7.1 | Apr 11 | Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28222 | 7.1 | Apr 11 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-23414 | 7.1 | Mar 14 | Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-23407 | 7.1 | Mar 14 | Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-21750 | 7.1 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-28273 | 7.0 | Apr 11 | Windows Clip Service Elevation of Privilege Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28221 | 7.0 | Apr 11 | Windows Error Reporting Service Elevation of Privilege Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28218 | 7.0 | Apr 11 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28216 | 7.0 | Apr 11 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-24861 | 7.0 | Mar 14 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-23393 | 7.0 | Mar 14 | Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-23385 | 7.0 | Mar 14 | Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-21739 | 7.0 | Jan 10 | Windows Bluetooth Driver Elevation of Privilege Vulnerability Affected: before 10.0.19042.2486; before 10.0.19042.2486 |
| CVE-2023-21733 | 7.0 | Jan 10 | Windows Bind Filter Driver Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21532 | 7.0 | Jan 10 | Windows GDI Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-28270 | 6.8 | Apr 11 | Windows Lock Screen Security Feature Bypass Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28269 | 6.8 | Apr 11 | Windows Boot Manager Security Feature Bypass Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28249 | 6.8 | Apr 11 | Windows Boot Manager Security Feature Bypass Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28235 | 6.8 | Apr 11 | Windows Lock Screen Security Feature Bypass Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-21694 | 6.8 | Feb 14 | Windows Fax Service Remote Code Execution Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21563 | 6.8 | Jan 10 | BitLocker Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2023-24932 | 6.7 | May 9 | Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-21560 | 6.6 | Jan 10 | Windows Boot Manager Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2022-44684 | 6.5 | Dec 20 | Windows Local Session Manager (LSM) Denial of Service Vulnerability Affected: before 10.0.19042.2364 |
| CVE-2022-35759 | 6.5 | May 31 | Windows Local Security Authority (LSA) Denial of Service Vulnerability Affected: before 10.0.19042.1889; before 10.0.19042.1889; before 10.0.19042.1889 |
| CVE-2023-29324 | 6.5 | May 9 | Windows MSHTML Platform Security Feature Bypass Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-24954 | 6.5 | May 9 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-24944 | 6.5 | May 9 | Windows Bluetooth Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-28267 | 6.5 | Apr 11 | Remote Desktop Protocol Client Information Disclosure Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-24883 | 6.5 | Apr 11 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-24906 | 6.5 | Mar 14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-24870 | 6.5 | Mar 14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2728 |