Microsoft Windows 10 Version 1507 vulnerabilities, page 5
2,323 vulnerabilities
Known vulnerabilities in Microsoft Windows 10 Version 1507, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-41343microsoftwindows_10+30
EPSS score0.73%
Windows Fast FAT File System Driver Information Disclosure VulnerabilityCVE-2021-41377microsoftwindows_10+29EPSS score0.49%
Windows Fast FAT File System Driver Elevation of Privilege VulnerabilityCVE-2021-41356microsoftwindows_10+16EPSS score3.02%
Windows Denial of Service VulnerabilityCVE-2021-41366microsoftwindows_10+22EPSS score0.49%
Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege VulnerabilityCVE-2021-41347microsoftwindows_10+16EPSS score0.71%
Windows AppX Deployment Service Elevation of Privilege VulnerabilityCVE-2021-41371microsoftwindows_10+29EPSS score1.65%
Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityCVE-2021-41338microsoftwindows_10+16EPSS score3.30%
Windows AppContainer Firewall Rules Security Feature Bypass VulnerabilityCVE-2021-41332microsoftwindows_10+30EPSS score2.71%
Windows Print Spooler Information Disclosure VulnerabilityCVE-2021-41331microsoftwindows_10+27EPSS score2.03%
Windows Media Audio Decoder Remote Code Execution VulnerabilityCVE-2021-41342microsoftwindows_10+22EPSS score1.63%
Windows MSHTML Platform Remote Code Execution VulnerabilityCVE-2021-41333microsoftwindows_10+31EPSS score1.07%
Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2021-26425microsoftwindows_10+26EPSS score0.90%
Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-26435microsoftwindows_10+27EPSS score5.38%
Windows Scripting Engine Memory Corruption VulnerabilityCVE-2021-26901microsoftwindows_10+27EPSS score0.81%
Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-26442microsoftwindows_10+30EPSS score0.79%
Windows HTTP.sys Elevation of Privilege VulnerabilityCVE-2021-26869microsoftwindows_10+25EPSS score1.03%
Windows ActiveX Installer Service Information Disclosure VulnerabilityCVE-2021-26872microsoftwindows_10+27EPSS score0.75%
Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-26887microsoftwindows_10+27EPSS score1.06%
An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting another user's personal data to a created folder.
To exploit the vulnerability, an attacker can create a new folder under the Folder Redirection root path and create a junction on a newly created User folder. When the new user logs in, Folder Redirection would start redirecting to the folder and copying personal data.
This elevation of privilege vulnerability can only be addressed by reconfiguring Folder Redirection with Offline files and restricting permissions, and NOT via a security update for affected Windows Servers. See the FAQ section of this CVE for configuration guidance.CVE-2021-26873microsoftwindows_10+27EPSS score1.15%
Windows User Profile Service Elevation of Privilege VulnerabilityCVE-2021-26866microsoftwindows_10+14EPSS score1.16%
Windows Update Service Elevation of Privilege Vulnerability