WI
Operating System
Windows
On CISA KEVExploited in the wildRansomware-linked
3,283
CVEs
190
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 62High 419Medium 19Low 0
Watch
Add Windows to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-26865 | 8.8 | Mar 11 | Windows Container Execution Agent Elevation of Privilege Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2021-24093 | 8.8 | Feb 25 | Windows Graphics Component Remote Code Execution Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2021-24088 | 8.8 | Feb 25 | Windows Local Spooler Remote Code Execution Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2020-17162 | 8.8 | Feb 25 | Microsoft Windows Security Feature Bypass Vulnerability Affected: 1607; 1803; 1809; 1903; 1909; 2004 |
| CVE-2021-1701 | 8.8 | Jan 12 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2021-1700 | 8.8 | Jan 12 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2021-1678 | 8.8 | Jan 12 | Windows Print Spooler Spoofing Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2021-1674 | 8.8 | Jan 12 | Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2021-1673 | 8.8 | Jan 12 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2021-1671 | 8.8 | Jan 12 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2021-1669 | 8.8 | Jan 12 | Windows Remote Desktop Security Feature Bypass Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2021-1667 | 8.8 | Jan 12 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2021-1666 | 8.8 | Jan 12 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2021-1664 | 8.8 | Jan 12 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2021-1660 | 8.8 | Jan 12 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2021-1658 | 8.8 | Jan 12 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2020-17042 | 8.8 | Nov 11 | Windows Print Spooler Remote Code Execution Vulnerability Affected: 20h2; 1607; 1803; 1809; 1903; 1909; +1 more |
| CVE-2020-1080 | 8.8 | Oct 16 | <p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory Affected: 1803; 1809; 1903; 1909; 2004 |
| CVE-2020-16911 | 8.8 | Oct 16 | <p>A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more |
| CVE-2020-16898 | 8.8 | Oct 16 | <p>A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets Affected: 1709; 1803; 1809; 1903; 1909; 2004 |
| CVE-2020-16891 | 8.8 | Oct 16 | <p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more |
| CVE-2020-1129 | 8.8 | Sep 11 | <p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more |
| CVE-2020-0922 | 8.8 | Sep 11 | <p>A remote code execution vulnerability exists in the way that Microsoft COM for Windows handles objects in memory Affected: 1607; 1607; 1709; 1803; 1809; 1903; +2 more |
| CVE-2020-1585 | 8.8 | Aug 17 | A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory Affected: 1709; 1803; 1809; 1903; 1909; 2004 |
| CVE-2020-1561 | 8.8 | Aug 17 | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory Affected: 1607; 1607; 1709; 1803; 1809; 1903; +2 more |
| CVE-2020-1436 | 8.8 | Jul 14 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except Windows 10, an attacker who… Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more |
| CVE-2020-1435 | 8.8 | Jul 14 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution… Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more |
| CVE-2020-1421 | 8.8 | Jul 14 | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this… Affected: 1607; 1607; 1709; 1709; 1709; 1803; +14 more |
| CVE-2020-1412 | 8.8 | Jul 14 | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution… Affected: 1607; 1607; 1709; 1709; 1709; 1803; +14 more |
| CVE-2020-1408 | 8.8 | Jul 14 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution… Affected: 1607; 1607; 1709; 1709; 1709; 1803; +14 more |
| CVE-2020-1317 | 8.8 | Jun 9 | An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege Vulnerability' Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more |
| CVE-2020-1301 | 8.8 | Jun 9 | A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests, aka 'Windows SMB Remote Code Execution… Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more |
| CVE-2020-1300 | 8.8 | Jun 9 | A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an attacker would have to convince a user… Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more |
| CVE-2020-1299 | 8.8 | Jun 9 | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this… Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more |
| CVE-2020-1286 | 8.8 | Jun 9 | A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully exploited this vulnerability could run… Affected: 1803; 1809; 1903; 1909; 2004 |
| CVE-2020-1281 | 8.8 | Jun 9 | A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability' Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more |
| CVE-2020-1255 | 8.8 | Jun 9 | An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content, aka 'Windows… Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more |
| CVE-2020-1248 | 8.8 | Jun 9 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution… Affected: 1903; 1909; 2004 |
| CVE-2020-1239 | 8.8 | Jun 9 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability' Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more |
| CVE-2020-1238 | 8.8 | Jun 9 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability' Affected: 1709; 1803; 1809; 1903; 1909; 2004 |
| CVE-2020-1126 | 8.8 | May 21 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory Affected: 1607; 1607; 1709; 1803; 1809; 1903; +1 more |
| CVE-2020-1117 | 8.8 | May 21 | A remote code execution vulnerability exists in the way that the Color Management Module (ICM32.dll) handles objects in memory Affected: 1607; 1607; 1709; 1803; 1809; 1903; +1 more |
| CVE-2020-0981 | 8.8 | Apr 15 | A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an… Affected: 1903; 1909 |
| CVE-2020-0964 | 8.8 | Apr 15 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution… Affected: 1607; 1709; 1803; 1809; 1903; 1909 |
| CVE-2020-0950 | 8.8 | Apr 15 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability' Affected: 1607; 1709; 1803; 1809; 1903; 1909 |
| CVE-2020-0949 | 8.8 | Apr 15 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability' Affected: 1607; 1709; 1803; 1809; 1903; 1909 |
| CVE-2020-0948 | 8.8 | Apr 15 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability' Affected: 1607; 1709; 1803; 1809; 1903; 1909 |
| CVE-2020-0687 | 8.8 | Apr 15 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution… Affected: 1607; 1709; 1803; 1809; 1903; 1909 |
| CVE-2020-0883 | 8.8 | Mar 12 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution… Affected: 1607; 1709; 1803; 1809; 1903; 1909 |
| CVE-2020-0881 | 8.8 | Mar 12 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution… Affected: 1607; 1709; 1803; 1809; 1903; 1909 |
The 500 most important CVEs for this product (exploited first, then by severity)
