W1
Product
Windows 10 Version 20H2
On CISA KEVExploited in the wildRansomware-linked
283
CVEs
54
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 211Medium 61Low 0
Watch
Add Windows 10 Version 20H2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-24866 | 6.5 | Mar 14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-24865 | 6.5 | Mar 14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-24863 | 6.5 | Mar 14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-24857 | 6.5 | Mar 14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-23411 | 6.5 | Mar 14 | Windows Hyper-V Denial of Service Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2022-26934 | 6.5 | May 10 | Windows Graphics Component Information Disclosure Vulnerability Affected: before 10.0.19042.1706 |
| CVE-2022-35747 | 5.9 | May 31 | Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability Affected: before 10.0.19042.1889 |
| CVE-2023-24900 | 5.9 | May 9 | Windows NTLM Security Support Provider Information Disclosure Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-21693 | 5.7 | Feb 14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2022-35758 | 5.5 | May 31 | Windows Kernel Memory Information Disclosure Vulnerability Affected: before 10.0.19042.1889; before 10.0.19042.1889; before 10.0.19042.1889 |
| CVE-2023-28251 | 5.5 | May 9 | Windows Driver Revocation List Security Feature Bypass Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-24945 | 5.5 | May 9 | Windows iSCSI Target Service Information Disclosure Vulnerability Affected: before 10.0.19042.2965 |
| CVE-2023-28298 | 5.5 | Apr 11 | Windows Kernel Denial of Service Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28271 | 5.5 | Apr 11 | Windows Kernel Memory Information Disclosure Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28266 | 5.5 | Apr 11 | Windows Common Log File System Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28253 | 5.5 | Apr 11 | Windows Kernel Information Disclosure Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-28228 | 5.5 | Apr 11 | Windows Spoofing Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-24862 | 5.5 | Mar 14 | Windows Secure Channel Denial of Service Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-23409 | 5.5 | Mar 14 | Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-23394 | 5.5 | Mar 14 | Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability Affected: before 10.0.19042.2728 |
| CVE-2023-1018 | 5.5 | Feb 28 | An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine Affected: before 10.0.19042.2728 |
| CVE-2023-21697 | 5.5 | Feb 14 | Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21559 | 5.5 | Jan 10 | Windows Cryptographic Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2023-21550 | 5.5 | Jan 10 | Windows Cryptographic Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2023-21540 | 5.5 | Jan 10 | Windows Cryptographic Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2023-28226 | 5.3 | Apr 11 | Windows Enroll Engine Security Feature Bypass Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-21729 | 5.3 | Apr 11 | Remote Procedure Call Runtime Information Disclosure Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-21699 | 5.3 | Feb 14 | Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability Affected: before 10.0.19042.2604 |
| CVE-2023-21682 | 5.3 | Jan 10 | Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2023-21525 | 5.3 | Jan 10 | Remote Procedure Call Runtime Denial of Service Vulnerability Affected: All versions, or not specified |
| CVE-2023-21536 | 4.7 | Jan 10 | Event Tracing for Windows Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2023-28276 | 4.4 | Apr 11 | Windows Group Policy Security Feature Bypass Vulnerability Affected: before 10.0.19042.2846 |
| CVE-2023-24911 | 4.3 | Mar 14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Affected: before 10.0.19042.2728; before 10.0.19042.2728; before 10.0.19042.2728 |