Microsoft Windows 10 Version 1803 vulnerabilities, page 4
622 vulnerabilities
Known vulnerabilities in Microsoft Windows 10 Version 1803, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-1666microsoftwindows_10+28
EPSS score3.20%
Remote Procedure Call Runtime Remote Code Execution VulnerabilityCVE-2021-1704microsoftwindows_10+25EPSS score1.03%
Windows Hyper-V Elevation of Privilege VulnerabilityCVE-2021-1702microsoftwindows_10+28EPSS score0.79%
Windows Remote Procedure Call Runtime Elevation of Privilege VulnerabilityCVE-2021-1710microsoftwindows_10+20EPSS score3.22%
Microsoft Windows Media Foundation Remote Code Execution VulnerabilityCVE-2021-1646microsoftwindows_10+11EPSS score0.79%
Windows WLAN Service Elevation of Privilege VulnerabilityCVE-2021-1656microsoftwindows_10+25EPSS score3.01%
TPM Device Driver Information Disclosure VulnerabilityCVE-2021-26901microsoftwindows_10+27EPSS score0.81%
Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-26863microsoftwindows_10+11EPSS score11.94%
Windows Win32k Elevation of Privilege VulnerabilityCVE-2021-26869microsoftwindows_10+25EPSS score1.03%
Windows ActiveX Installer Service Information Disclosure VulnerabilityCVE-2021-26872microsoftwindows_10+27EPSS score0.75%
Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-26887microsoftwindows_10+27EPSS score1.06%
An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting another user's personal data to a created folder.
To exploit the vulnerability, an attacker can create a new folder under the Folder Redirection root path and create a junction on a newly created User folder. When the new user logs in, Folder Redirection would start redirecting to the folder and copying personal data.
This elevation of privilege vulnerability can only be addressed by reconfiguring Folder Redirection with Offline files and restricting permissions, and NOT via a security update for affected Windows Servers. See the FAQ section of this CVE for configuration guidance.CVE-2021-26873microsoftwindows_10+27EPSS score1.15%
Windows User Profile Service Elevation of Privilege VulnerabilityCVE-2021-26866microsoftwindows_10+14EPSS score1.16%
Windows Update Service Elevation of Privilege VulnerabilityCVE-2021-26892microsoftwindows_10+13EPSS score1.31%
Windows Extensible Firmware Interface Security Feature Bypass VulnerabilityCVE-2021-26868microsoftwindows_10+20EPSS score3.08%
Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2021-26884microsoftwindows_10+20EPSS score1.03%
Windows Media Photo Codec Information Disclosure VulnerabilityCVE-2021-26881microsoftwindows_10+25EPSS score2.83%
Microsoft Windows Media Foundation Remote Code Execution VulnerabilityCVE-2021-26889microsoftwindows_10+11EPSS score1.17%
Windows Update Stack Elevation of Privilege VulnerabilityCVE-2021-26898microsoftwindows_10+27EPSS score0.87%
Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-26415microsoftwindows_10+28EPSS score3.57%
Windows Installer Elevation of Privilege Vulnerability