Windows 10 20h2 CVEs and Security Vulnerabilities

CVE-2022-24454

Windows Security Support Provider Interface Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2022-24502

Windows HTML Platforms Security Feature Bypass Vulnerability

CVSS 3.1 · 4.3 Medium EPSS 33.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 20 more

CVE-2022-23299

Windows PDEV Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 7.6% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 20 more

CVE-2022-23298

Windows NT OS Kernel Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 20 more

CVE-2022-23291

Windows DWM Core Library Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1809 Windows 10 1909 and 9 more

CVE-2022-23290

Windows Inking COM Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 20 more

CVE-2022-21990

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 18.8% KEV · Not listed

Vendors

Microsoft

Products

Remote Desktop Windows 10 Windows 10 1507 and 21 more

CVE-2022-21977

Media Foundation Information Disclosure Vulnerability

CVSS 3.1 · 3.3 Low EPSS 2.5% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 16 more

CVE-2023-28267

Remote Desktop Protocol Client Information Disclosure Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed

Vendors

Microsoft

Products

Remote Desktop Client Windows 10 1507 Windows 10 1607 and 11 more

CVE-2021-1669

Windows Remote Desktop Security Feature Bypass Vulnerability

CVSS 3.1 · 8.8 High EPSS 3.2% KEV · Not listed

Vendors

Microsoft

Products

Remote Desktop Remote Desktop Client Windows 10 and 11 more

CVE-2022-22015

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 2.7% KEV · Not listed

Vendors

Microsoft

Products

Remote Desktop Remote Desktop Client Windows 10 and 20 more

CVE-2022-35751

Windows Hyper-V Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 5.5% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 19 more

CVE-2023-21754

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 20h2 and 12 more

CVE-2023-21524

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 20h2 and 9 more

CVE-2023-21676

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1809 Windows 10 20h2 Windows 10 21h2 and 5 more

CVE-2022-38396

HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path. This potential vulnerability was remediated starting with Windows 10 versions 21H2 on October 31, 2021.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1511 Windows 10 1607 and 7 more

CVE-2022-30170

Windows Credential Roaming Service Elevation of Privilege Vulnerability

CVSS 3.1 · 7.3 High EPSS 1.7% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2022-37958

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

CVSS 3.1 · 8.1 High EPSS 86.4% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 15 more

CVE-2022-38006

Windows Graphics Component Information Disclosure Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 2.3% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 16 more

CVE-2022-38005

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 16 more

Search vulnerabilities

Windows Security Support Provider Interface Elevation of Privilege Vulnerability

Windows HTML Platforms Security Feature Bypass Vulnerability

Windows PDEV Elevation of Privilege Vulnerability

Windows NT OS Kernel Elevation of Privilege Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows Inking COM Elevation of Privilege Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Media Foundation Information Disclosure Vulnerability

Remote Desktop Protocol Client Information Disclosure Vulnerability

Windows Remote Desktop Security Feature Bypass Vulnerability

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Windows Credential Roaming Service Elevation of Privilege Vulnerability

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability