This CPE summary could be partial or incomplete. Please contact us for a detailed listing.

Summary

Detail
Vendor Microsoft First view 2016-08-09
Product Windows 10 Last view 2020-09-11
Version 1607 Type Os
Update *  
Edition *  
Language *  
Sofware Edition *  
Target Software *  
Target Hardware *  
Other *  
 
CPE Product cpe:2.3:o:microsoft:windows_10

Activity : Overall

Related : CVE

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.
  Date Alert Description
8.8 2020-09-11 CVE-2020-1508

A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects, aka 'Windows Media Audio Decoder Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1593.

7.8 2020-09-11 CVE-2020-1491

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'.

7.8 2020-09-11 CVE-2020-1471

An elevation of privilege vulnerability exists when Microsoft Windows CloudExperienceHost fails to check COM objects, aka 'Windows CloudExperienceHost Elevation of Privilege Vulnerability'.

7.8 2020-09-11 CVE-2020-1376

An elevation of privilege vulnerability exists in the way that fdSSDP.dll handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1052, CVE-2020-1159.

7.8 2020-09-11 CVE-2020-1319

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1129.

7.8 2020-09-11 CVE-2020-1308

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1053.

8.8 2020-09-11 CVE-2020-1285

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

6.5 2020-09-11 CVE-2020-1256

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.

7.8 2020-09-11 CVE-2020-1252

A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Remote Code Execution Vulnerability'.

5.5 2020-09-11 CVE-2020-1250

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0941.

7.8 2020-09-11 CVE-2020-1245

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.

7.8 2020-09-11 CVE-2020-1152

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka 'Windows Win32k Elevation of Privilege Vulnerability'.

7.8 2020-09-11 CVE-2020-1146

An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Microsoft Store Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0766.

7.8 2020-09-11 CVE-2020-1133

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1130.

7.8 2020-09-11 CVE-2020-1130

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1133.

8.8 2020-09-11 CVE-2020-1129

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1319.

7.8 2020-09-11 CVE-2020-1115

An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.

6.5 2020-09-11 CVE-2020-1097

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1091.

6.5 2020-09-11 CVE-2020-1091

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1097.

5.5 2020-09-11 CVE-2020-1083

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0921.

7.8 2020-09-11 CVE-2020-1074

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1039.

7.8 2020-09-11 CVE-2020-1053

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1308.

7.8 2020-09-11 CVE-2020-1052

An elevation of privilege vulnerability exists in the way that the ssdpsrv.dll handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1159, CVE-2020-1376.

7.8 2020-09-11 CVE-2020-1039

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1074.

5.5 2020-09-11 CVE-2020-1038

A denial of service vulnerability exists when Windows Routing Utilities improperly handles objects in memory, aka 'Windows Routing Utilities Denial of Service'.

CWE : Common Weakness Enumeration

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.
%idName
31% (303) CWE-269 Improper Privilege Management
24% (237) CWE-200 Information Exposure
9% (90) CWE-119 Failure to Constrain Operations within the Bounds of a Memory Buffer
7% (75) CWE-20 Improper Input Validation
3% (29) CWE-404 Improper Resource Shutdown or Release
2% (28) CWE-264 Permissions, Privileges, and Access Controls
2% (24) CWE-787 Out-of-bounds Write
2% (20) CWE-665 Improper Initialization
1% (15) CWE-611 Information Leak Through XML External Entity File Disclosure
1% (15) CWE-281 Improper Preservation of Permissions
1% (15) CWE-59 Improper Link Resolution Before File Access ('Link Following')
1% (14) CWE-284 Access Control (Authorization) Issues
1% (11) CWE-125 Out-of-bounds Read
1% (10) CWE-19 Data Handling
0% (6) CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
0% (4) CWE-732 Incorrect Permission Assignment for Critical Resource
0% (4) CWE-416 Use After Free
0% (4) CWE-362 Race Condition
0% (4) CWE-287 Improper Authentication
0% (4) CWE-94 Failure to Control Generation of Code ('Code Injection')
0% (3) CWE-522 Insufficiently Protected Credentials
0% (3) CWE-401 Failure to Release Memory Before Removing Last Reference ('Memory L...
0% (3) CWE-254 Security Features
0% (2) CWE-755 Improper Handling of Exceptional Conditions
0% (2) CWE-502 Deserialization of Untrusted Data

SAINT Exploits

Description Link
Windows RRAS Service Remote Code Execution Vulnerability More info here

Snort® IPS/IDS

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.
Date Description
2020-09-15 Microsoft Windows DNS Resolver local privilege escalation attempt
RuleID : 54736 - Type : OS-WINDOWS - Revision : 1
2020-09-15 Microsoft Windows DNS Resolver local privilege escalation attempt
RuleID : 54735 - Type : OS-WINDOWS - Revision : 1
2020-09-15 Microsoft Windows AFD kernel driver privilege escalation attempt
RuleID : 54734 - Type : OS-WINDOWS - Revision : 1
2020-09-15 Microsoft Windows AFD kernel driver privilege escalation attempt
RuleID : 54733 - Type : OS-WINDOWS - Revision : 1
2020-09-02 Microsoft Windows WalletService SetGroup privilege escalation attempt
RuleID : 54593 - Type : OS-WINDOWS - Revision : 1
2020-09-02 Microsoft Windows WalletService SetGroup privilege escalation attempt
RuleID : 54592 - Type : OS-WINDOWS - Revision : 1
2020-09-02 Microsoft Windows WalletService SetGroup privilege escalation attempt
RuleID : 54591 - Type : OS-WINDOWS - Revision : 1
2020-09-02 Microsoft Windows WalletService SetGroup privilege escalation attempt
RuleID : 54590 - Type : OS-WINDOWS - Revision : 1
2020-08-13 Microsoft Windows null pointer dereference attempt
RuleID : 54535 - Type : OS-WINDOWS - Revision : 1
2020-08-13 Microsoft Windows null pointer dereference attempt
RuleID : 54534 - Type : OS-WINDOWS - Revision : 1
2020-08-13 Microsoft Windows CAB file szName directory traversal attempt
RuleID : 54527 - Type : FILE-OTHER - Revision : 1
2020-08-13 Microsoft Windows CAB file szName directory traversal attempt
RuleID : 54526 - Type : FILE-OTHER - Revision : 1
2020-08-13 Microsoft Windows RDP Client remote code execution attempt
RuleID : 54523 - Type : OS-WINDOWS - Revision : 1
2020-07-14 Microsoft Windows GDI+ printer out of bounds write attempt
RuleID : 54297 - Type : OS-WINDOWS - Revision : 1
2020-07-14 Microsoft Windows GDI+ printer out of bounds write attempt
RuleID : 54296 - Type : OS-WINDOWS - Revision : 1
2020-07-09 Microsoft Windows kernel security feature bypass attempt
RuleID : 54250 - Type : OS-WINDOWS - Revision : 1
2020-07-09 Microsoft Windows kernel security feature bypass attempt
RuleID : 54249 - Type : OS-WINDOWS - Revision : 1
2020-07-09 Microsoft Windows win32k.sys remote code execution attempt
RuleID : 54248 - Type : OS-WINDOWS - Revision : 1
2020-07-09 Microsoft Windows win32k.sys remote code execution attempt
RuleID : 54247 - Type : OS-WINDOWS - Revision : 1
2020-07-09 Microsoft Windows CreateDIBitmap privilege escalation attempt
RuleID : 54242 - Type : OS-WINDOWS - Revision : 1
2020-07-09 Microsoft Windows CreateDIBitmap privilege escalation attempt
RuleID : 54241 - Type : OS-WINDOWS - Revision : 1
2020-07-09 Microsoft Windows SMBv1 remote code execution attempt
RuleID : 54240 - Type : OS-WINDOWS - Revision : 1
2020-07-07 Microsoft Windows win32k type confusion attempt
RuleID : 54216 - Type : OS-WINDOWS - Revision : 1
2020-07-07 Microsoft Windows win32k type confusion attempt
RuleID : 54215 - Type : OS-WINDOWS - Revision : 1
2020-06-13 Windows print spooler elevation of privilege attempt
RuleID : 53984 - Type : OS-WINDOWS - Revision : 1

Nessus® Vulnerability Scanner

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.
id Description
2018-09-11 Name: An application installed on the remote macOS or Mac OS X host is affected by ...
File: macos_ms18_sep_office.nasl - Type: ACT_GATHER_INFO
2017-12-12 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_dec_4053578.nasl - Type: ACT_GATHER_INFO
2017-12-12 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_dec_4053579.nasl - Type: ACT_GATHER_INFO
2017-12-12 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_dec_4053580.nasl - Type: ACT_GATHER_INFO
2017-12-12 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_dec_4053581.nasl - Type: ACT_GATHER_INFO
2017-12-12 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_dec_4054517.nasl - Type: ACT_GATHER_INFO
2017-12-12 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_dec_4054518.nasl - Type: ACT_GATHER_INFO
2017-12-12 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_dec_4054519.nasl - Type: ACT_GATHER_INFO
2017-12-12 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_dec_4054520.nasl - Type: ACT_GATHER_INFO
2017-12-12 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_dec_win2008.nasl - Type: ACT_GATHER_INFO
2017-11-30 Name: The Internet Explorer installation on the remote host is affected by multiple...
File: smb_nt_ms17_jul_internet_explorer.nasl - Type: ACT_GATHER_INFO
2017-11-14 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_nov_4048952.nasl - Type: ACT_GATHER_INFO
2017-11-14 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_nov_4048953.nasl - Type: ACT_GATHER_INFO
2017-11-14 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_nov_4048954.nasl - Type: ACT_GATHER_INFO
2017-11-14 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_nov_4048955.nasl - Type: ACT_GATHER_INFO
2017-11-14 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_nov_4048956.nasl - Type: ACT_GATHER_INFO
2017-11-14 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_nov_4048957.nasl - Type: ACT_GATHER_INFO
2017-11-14 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_nov_4048958.nasl - Type: ACT_GATHER_INFO
2017-11-14 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_nov_4048959.nasl - Type: ACT_GATHER_INFO
2017-11-14 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_nov_win2008.nasl - Type: ACT_GATHER_INFO
2017-11-03 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_aug_4034668.nasl - Type: ACT_GATHER_INFO
2017-11-03 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_jul_4025338.nasl - Type: ACT_GATHER_INFO
2017-11-03 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_oct_4042895.nasl - Type: ACT_GATHER_INFO
2017-11-03 Name: The remote Windows host is affected by multiple vulnerabilities.
File: smb_nt_ms17_sep_4038781.nasl - Type: ACT_GATHER_INFO
2017-10-20 Name: The remote Windows host is affected by an information disclosure vulnerability.
File: smb_nt_ms17_apr_3217841.nasl - Type: ACT_GATHER_INFO