Summary
| Detail | |||
|---|---|---|---|
| Vendor | Microsoft | First view | 2020-07-14 |
| Product | Windows 10 | Last view | 2022-05-10 |
| Version | 1909 | Type | Os |
| Update | * | ||
| Edition | * | ||
| Language | * | ||
| Sofware Edition | * | ||
| Target Software | * | ||
| Target Hardware | x86 | ||
| Other | * | ||
| CPE Product | cpe:2.3:o:microsoft:windows_10 | ||
Activity : Overall
Related : CVE
| Date | Alert | Description | |
|---|---|---|---|
| 7 | 2022-05-10 | CVE-2022-29125 | Windows Push Notifications Apps Elevation of Privilege Vulnerability. |
| 6.5 | 2022-05-10 | CVE-2022-29121 | Windows WLAN AutoConfig Service Denial of Service Vulnerability. |
| 7.8 | 2022-05-10 | CVE-2022-29115 | Windows Fax Service Remote Code Execution Vulnerability. |
| 5.5 | 2022-05-10 | CVE-2022-29114 | Windows Print Spooler Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-29140. |
| 7.8 | 2022-05-10 | CVE-2022-29113 | Windows Digital Media Receiver Elevation of Privilege Vulnerability. |
| 6.5 | 2022-05-10 | CVE-2022-29112 | Windows Graphics Component Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-22011, CVE-2022-26934. |
| 7.8 | 2022-05-10 | CVE-2022-29105 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability. |
| 7.8 | 2022-05-10 | CVE-2022-29104 | Windows Print Spooler Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-29132. |
| 7.8 | 2022-05-10 | CVE-2022-29103 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability. |
| 6.5 | 2022-05-10 | CVE-2022-26936 | Windows Server Service Information Disclosure Vulnerability. |
| 6.5 | 2022-05-10 | CVE-2022-26935 | Windows WLAN AutoConfig Service Information Disclosure Vulnerability. |
| 6.5 | 2022-05-10 | CVE-2022-26934 | Windows Graphics Component Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-22011, CVE-2022-29112. |
| 5.5 | 2022-05-10 | CVE-2022-26933 | Windows NTFS Information Disclosure Vulnerability. |
| 7.5 | 2022-05-10 | CVE-2022-26931 | Windows Kerberos Elevation of Privilege Vulnerability. |
| 5.5 | 2022-05-10 | CVE-2022-26930 | Windows Remote Access Connection Manager Information Disclosure Vulnerability. |
| 8.8 | 2022-05-10 | CVE-2022-26927 | Windows Graphics Component Remote Code Execution Vulnerability. |
| 7.8 | 2022-05-10 | CVE-2022-26926 | Windows Address Book Remote Code Execution Vulnerability. |
| 5.9 | 2022-05-10 | CVE-2022-26925 | Windows LSA Spoofing Vulnerability. |
| 8.8 | 2022-05-10 | CVE-2022-26923 | Active Directory Domain Services Elevation of Privilege Vulnerability. |
| 7.4 | 2022-05-10 | CVE-2022-26913 | Windows Authentication Security Feature Bypass Vulnerability. |
| 7 | 2022-05-10 | CVE-2022-23279 | Windows ALPC Elevation of Privilege Vulnerability. |
| 8.1 | 2022-05-10 | CVE-2022-23270 | Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21972. |
| 8.8 | 2022-05-10 | CVE-2022-22019 | Remote Procedure Call Runtime Remote Code Execution Vulnerability. |
| 7 | 2022-05-10 | CVE-2022-22016 | Windows PlayToManager Elevation of Privilege Vulnerability. |
| 6.5 | 2022-05-10 | CVE-2022-22015 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability. |
CWE : Common Weakness Enumeration
| % | id | Name |
|---|---|---|
| 64% (64) | CWE-269 | Improper Privilege Management |
| 15% (15) | CWE-668 | Exposure of Resource to Wrong Sphere |
| 8% (8) | CWE-400 | Uncontrolled Resource Consumption ('Resource Exhaustion') |
| 7% (7) | CWE-94 | Failure to Control Generation of Code ('Code Injection') |
| 2% (2) | CWE-125 | Out-of-bounds Read |
| 1% (1) | CWE-362 | Race Condition |
| 1% (1) | CWE-346 | Origin Validation Error |
| 1% (1) | CWE-312 | Cleartext Storage of Sensitive Information |
| 1% (1) | CWE-290 | Authentication Bypass by Spoofing |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2021-01-12 | Microsoft Windows SMB2 SET_INFO information disclosure attempt RuleID : 56571 - Type : OS-WINDOWS - Revision : 1 |
| 2020-08-13 | Microsoft Windows Address Book Contact file integer overflow attempt RuleID : 54533 - Type : FILE-OTHER - Revision : 1 |
| 2020-08-13 | Microsoft Windows Address Book Contact file integer overflow attempt RuleID : 54532 - Type : FILE-OTHER - Revision : 1 |
| 2020-08-13 | Microsoft Windows Address Book Contact file integer overflow attempt RuleID : 54531 - Type : FILE-OTHER - Revision : 1 |
| 2020-08-13 | Microsoft Windows Address Book Contact file integer overflow attempt RuleID : 54530 - Type : FILE-OTHER - Revision : 1 |
| 2020-08-13 | Microsoft Windows Address Book Contact file integer overflow attempt RuleID : 54529 - Type : FILE-OTHER - Revision : 1 |
| 2020-08-13 | Microsoft Windows Address Book Contact file integer overflow attempt RuleID : 54528 - Type : FILE-OTHER - Revision : 1 |
