Windows 10 1703 (Microsoft) - vulnerabilities (CVEs)

32 CVEs, 0 in the last 30 days, 198 known versions, newest CVE from 2023-02-12. Vendor: Microsoft.

CVEs of Windows 10 1703

• CVE-2022-38396 - CVSS 7.8 (high), 2023-02-12: HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via…
• CVE-2019-1315 - CVSS 7.8 (high), 2019-10-10: An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager…
• CVE-2019-1253 - CVSS 7.8 (high), 2019-09-11: An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker…
• CVE-2019-1215 - CVSS 7.8 (high), 2019-09-11: An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege…
• CVE-2019-1214 - CVSS 7.8 (high), 2019-09-11: An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common…
• CVE-2019-1130 - CVSS 7.8 (high), 2019-07-15: An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of…
• CVE-2019-1129 - CVSS 7.8 (high), 2019-07-15: An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of…
• CVE-2019-0880 - CVSS 7.8 (high), 2019-07-15: A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
• CVE-2019-1064 - CVSS 7.8 (high), 2019-06-12: An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfully…
• CVE-2019-1069 - CVSS 7.8 (high), 2019-06-12: An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited…
• CVE-2019-0903 - CVSS 8.8 (high), 2019-05-16: A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code…
• CVE-2019-0863 - CVSS 7.8 (high), 2019-05-16: An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege…
• CVE-2019-0859 - CVSS 7.8 (high), 2019-04-09: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of…
• CVE-2019-0841 - CVSS 7.8 (high), 2019-04-09: An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of…
• CVE-2019-0803 - CVSS 7.8 (high), 2019-04-09: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of…
• CVE-2019-0797 - CVSS 7.8 (high), 2019-04-09: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of…
• CVE-2019-0703 - CVSS 6.5 (medium), 2019-04-09: An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure…
• CVE-2019-0543 - CVSS 7.8 (high), 2019-01-08: An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege…
• CVE-2018-8639 - CVSS 8.4 (high), 2018-12-12: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of…
• CVE-2018-8611 - CVSS 7.8 (high), 2018-12-12: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege…
• CVE-2018-8493 - CVSS 7.5 (high), 2018-10-10: An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP Information…
• CVE-2018-8453 - CVSS 7.8 (high), 2018-10-10: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of…
• CVE-2018-8440 - CVSS 7.8 (high), 2018-09-13: An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of…
• CVE-2018-8405 - CVSS 7.8 (high), 2018-08-15: An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics…
• CVE-2018-8414 - CVSS 8.8 (high), 2018-08-15: A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution…
• CVE-2018-8406 - CVSS 7.8 (high), 2018-08-15: An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics…
• CVE-2018-8174 - CVSS 7.5 (high), 2018-05-09: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution…
• CVE-2018-0824 - CVSS 8.8 (high), 2018-05-09: A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for…
• CVE-2017-8543 - CVSS 9.8 (critical), 2017-06-15: Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows…
• CVE-2017-8464 - CVSS 8.8 (high), 2017-06-15: Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows…
• CVE-2017-0263 - CVSS 7.8 (high), 2017-05-12: The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows…
• CVE-2017-0213 - CVSS 7.3 (high), 2017-05-12: Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…