Windows 10 1909 vulnerabilities

44 known vulnerabilities in Windows 10 1909 from Microsoft. 37 are rated high or critical, and 44 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Microsoft Windows Installer Privilege Escalation Exploited

  CVE-2020-0683Feb 11, 2020MicrosoftEPSS 7.67%

  An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.

• 7.8 High severity

  Microsoft Update Notification Manager Privilege Escalation Exploited

  CVE-2020-0638Jan 14, 2020MicrosoftEPSS 2.54%

  An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Update Notification Manager Elevation of Privilege

• 8.1 High severity

  Microsoft Windows CryptoAPI Spoofing Exploited

  CVE-2020-0601Jan 14, 2020MicrosoftEPSS 89.1%

  A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making i

• 8.8 High severity

  Microsoft WinVerifyTrust function Remote Code Execution Exploited

  CVE-2013-3900Dec 11, 2013MicrosoftEPSS 44.6%

  Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windo