Windows 10 20h2 vulnerabilities

55 known vulnerabilities in Windows 10 20h2 from Microsoft. 45 are rated high or critical, and 54 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Microsoft Windows Kernel Privilege Escalation Exploited

  CVE-2021-33771Jul 14, 2021MicrosoftEPSS 10.2%

  Windows Kernel Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Kernel Privilege Escalation Exploited

  CVE-2021-31979Jul 14, 2021MicrosoftEPSS 4.54%

  Windows Kernel Elevation of Privilege Vulnerability

• 8.8 High severity

  Microsoft Windows Print Spooler Remote Code Execution Exploited

  CVE-2021-34527Jul 2, 2021MicrosoftEPSS 99.8%

  A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could the

• 8.8 High severity

  Microsoft Windows MSHTML Platform Remote Code Execution Exploited

  CVE-2021-33742Jun 8, 2021MicrosoftEPSS 59.4%

  Windows MSHTML Platform Remote Code Execution Vulnerability

• 7.8 High severity

  Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Exploited

  CVE-2021-33739Jun 8, 2021MicrosoftEPSS 6.61%

  Microsoft DWM Core Library Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows NTFS Privilege Escalation Exploited

  CVE-2021-31956Jun 8, 2021MicrosoftEPSS 22.3%

  Windows NTFS Elevation of Privilege Vulnerability

• 5.5 Medium severity

  Microsoft Windows Kernel Information Disclosure Exploited

  CVE-2021-31955Jun 8, 2021MicrosoftEPSS 81.1%

  Windows Kernel Information Disclosure Vulnerability

• 7.8 High severity

  Microsoft Enhanced Cryptographic Provider Privilege Escalation Exploited

  CVE-2021-31201Jun 8, 2021MicrosoftEPSS 2.62%

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Enhanced Cryptographic Provider Privilege Escalation Exploited

  CVE-2021-31199Jun 8, 2021MicrosoftEPSS 2.98%

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Print Spooler Remote Code Execution Exploited

  CVE-2021-1675Jun 8, 2021MicrosoftEPSS 85.3%

  Windows Print Spooler Remote Code Execution Vulnerability

• 9.8 Critical severity

  Microsoft HTTP Protocol Stack Remote Code Execution Exploited

  CVE-2021-31166May 11, 2021MicrosoftEPSS 99.9%

  HTTP Protocol Stack Remote Code Execution Vulnerability

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2021-28310Apr 13, 2021MicrosoftEPSS 8.4%

  Win32k Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2021-1732Feb 25, 2021MicrosoftEPSS 78.4%

  Windows Win32k Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Kernel Privilege Escalation Exploited

  CVE-2020-17087Nov 11, 2020MicrosoftEPSS 5.43%

  Windows Kernel Local Elevation of Privilege Vulnerability

• 8.8 High severity

  Microsoft WinVerifyTrust function Remote Code Execution Exploited

  CVE-2013-3900Dec 11, 2013MicrosoftEPSS 44.6%

  Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windo