Microsoft Windows 10 20H2 vulnerabilities, page 3
283 vulnerabilities
Known vulnerabilities in Microsoft Windows 10 20H2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-26904microsoftwindows_10_1507+36KEV
EPSS score16.95%
Windows User Profile Service Elevation of Privilege VulnerabilityCVE-2022-26923microsoftwindows_10_1507+26KEVEPSS score83.50%
Active Directory Domain Services Elevation of Privilege VulnerabilityCVE-2022-26934microsoft365_apps+42EPSS score3.10%
Windows Graphics Component Information Disclosure VulnerabilityCVE-2022-37969microsoftwindows_10_1507+32KEVRansomwareEPSS score28.27%
Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2022-38028microsoftwindows_10_1507+25KEVEPSS score14.95%
Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2022-38396hp inc.hp factory preinstalled windows 10 20h2 images+10EPSS score0.41%
HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path. This potential vulnerability was remediated starting with Windows 10 versions 21H2 on October 31, 2021.CVE-2022-22047microsoftwindows_10_1507+34KEVEPSS score18.77%
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege VulnerabilityCVE-2022-22718microsoftwindows_10_1507+36KEVEPSS score18.46%
Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2022-44684microsoftwindows_10_20h2+13EPSS score1.54%
Windows Local Session Manager (LSM) Denial of Service VulnerabilityCVE-2022-44698microsoftwindows_10_1607+16KEVRansomwareEPSS score76.27%
Windows SmartScreen Security Feature Bypass VulnerabilityCVE-2022-24521microsoftwindows_10_1507+36KEVRansomwareEPSS score7.13%
Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2022-30190microsoftwindows_10_1507+31KEVRansomwareEPSS score99.16%
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights.
Please see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability.CVE-2022-34713microsoftwindows_10_1507+31KEVEPSS score67.76%
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityCVE-2022-35755microsoftwindows_10_1507+24EPSS score9.79%
Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2022-35747microsoftwindows_10_1507+34EPSS score1.68%
Windows Point-to-Point Protocol (PPP) Denial of Service VulnerabilityCVE-2022-35756microsoftwindows_10_1507+30EPSS score11.31%
Windows Kerberos Elevation of Privilege VulnerabilityCVE-2022-35753microsoftwindows_10_1507+33EPSS score1.23%
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityCVE-2022-35744microsoftwindows_10_1507+33EPSS score1.98%
Windows Point-to-Point Protocol (PPP) Remote Code Execution VulnerabilityCVE-2022-35751microsoftwindows_10_1507+31EPSS score5.46%
Windows Hyper-V Elevation of Privilege VulnerabilityCVE-2022-35743microsoftwindows_10_1507+31EPSS score1.45%
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability