WI
Operating System
Windows
On CISA KEVExploited in the wildRansomware-linked
3,289
CVEs
190
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 62High 419Medium 19Low 0
Watch
Add Windows to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-34722 | 9.8 | Sep 13 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809 |
| CVE-2022-34721 | 9.8 | Sep 13 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809 |
| CVE-2022-34718 | 9.8 | Sep 13 | Windows TCP/IP Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809 |
| CVE-2022-30133 | 9.8 | Aug 9 | Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability Affected: 20h2; 21h1; 1607; 1809 |
| CVE-2022-29130 | 9.8 | May 10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 20h2 |
| CVE-2022-26937 | 9.8 | May 10 | Windows Network File System Remote Code Execution Vulnerability Affected: 20h2 |
| CVE-2022-22012 | 9.8 | May 10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 20h2; 20h2; 20h2; 21h1; 21h1; 21h1; +11 more |
| CVE-2022-26809 | 9.8 | Apr 15 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809; 1909 |
| CVE-2022-24497 | 9.8 | Apr 15 | Windows Network File System Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809; 1909 |
| CVE-2022-24491 | 9.8 | Apr 15 | Windows Network File System Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809; 1909 |
| CVE-2022-21907 | 9.8 | Jan 11 | HTTP Protocol Stack Remote Code Execution Vulnerability Affected: 20h2; 2022 |
| CVE-2022-21898 | 9.8 | Jan 11 | DirectX Graphics Kernel Remote Code Execution Vulnerability Affected: 20h2; 2022 |
| CVE-2022-21874 | 9.8 | Jan 11 | Windows Security Center API Remote Code Execution Vulnerability Affected: 20h2; 2022 |
| CVE-2022-21849 | 9.8 | Jan 11 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Affected: 20h2; 2022 |
| CVE-2021-43217 | 9.8 | Dec 15 | Windows Encrypting File System (EFS) Remote Code Execution Vulnerability Affected: 20h2; 2022 |
| CVE-2021-43215 | 9.8 | Dec 15 | iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution Affected: 20h2; 2022 |
| CVE-2021-26432 | 9.8 | Aug 12 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability Affected: 20h2; 21h1; 1607; 1809; 1909; 2004 |
| CVE-2021-24094 | 9.8 | Feb 25 | Windows TCP/IP Remote Code Execution Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2021-24077 | 9.8 | Feb 25 | Windows Fax Service Remote Code Execution Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2021-24074 | 9.8 | Feb 25 | Windows TCP/IP Remote Code Execution Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2020-0690 | 9.8 | Mar 12 | An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability' Affected: 1607; 1709; 1803; 1809; 1903; 1909 |
| CVE-2019-1226 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system… Affected: 1803; 1809; 1903 |
| CVE-2019-1222 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system… Affected: 1803; 1809; 1903 |
| CVE-2019-1212 | 9.8 | Aug 14 | A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets Affected: 1607; 1709; 1803; 1809; 1903 |
| CVE-2019-1182 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system… Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-1181 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system… Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-0736 | 9.8 | Aug 14 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client Affected: 1607; 1703; 1709; 1803 |
| CVE-2019-0786 | 9.8 | Apr 9 | An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server when an attacker with valid credentials attempts to open a specially crafted file… Affected: 1709; 1803; 1809 |
| CVE-2019-0726 | 9.8 | Apr 9 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code… Affected: 1803; 1809 |
| CVE-2019-0698 | 9.8 | Apr 9 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code… Affected: 1803; 1809 |
| CVE-2019-0697 | 9.8 | Apr 9 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code… Affected: 1803; 1809 |
| CVE-2019-0626 | 9.8 | Mar 5 | A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code… Affected: 2008 R2 for x64-based Systems Service Pack 1 (Core installation); 2008 R2 for Itanium-Based Systems Service Pack 1; 2008 R2 for x64-based Systems Service Pack 1; 2008 for 32-bit Systems Service Pack 2 (Core installation); 2012; 2012 (Core installation); +12 more |
| CVE-2019-0547 | 9.8 | Jan 8 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka "Windows DHCP Client Remote Code… Affected: 1803 |
| CVE-2018-8626 | 9.8 | Dec 12 | A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Windows DNS Server Heap Overflow… Affected: 1607; 1709; 1803; 1809 |
| CVE-2017-11899 | 9.8 | Dec 12 | Device Guard in Windows 10 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to the way untrusted… Affected: 1511; 1607; 1703; 1709 |
| CVE-2017-11771 | 9.8 | Oct 13 | The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10… Affected: 1511; 1607; 1703 |
| CVE-2017-8589 | 9.8 | Jul 11 | Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016… Affected: 1511; 1607; 1703 |
| CVE-2016-7182 | 9.8 | Oct 14 | The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10… Affected: 1511; 1607 |
| CVE-2016-3236 | 9.8 | Jun 16 | The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… Affected: 1511 |
| CVE-2021-31962 | 9.4 | Jun 8 | Kerberos AppContainer Security Feature Bypass Vulnerability Affected: 20h2; 21h1; 1607; 1809; 1909; 2004 |
| CVE-2016-0088 | 9.3 | Apr 12 | Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to execute arbitrary code on the host OS via a crafted application, aka… Affected: All versions, or not specified |
| CVE-2019-0721 | 9.1 | Nov 12 | A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating… Affected: 1709; 1803; 1809; 1903 |
| CVE-2019-0719 | 9.1 | Nov 12 | A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating… Affected: 1607; 1709; 1803; 1809; 1903 |
| CVE-2016-3312 | 9.1 | Aug 9 | ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging failure of Universal Outlook to obtain a secure connection, aka… Affected: 1511; 1511 |
| CVE-2021-26443 | 9.0 | Nov 10 | Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability Affected: 20h2; 21h1; 1809; 1909 |
| CVE-2017-0021 | 9.0 | Mar 17 | Hyper-V in Microsoft Windows 10 1607 and Windows Server 2016 does not properly validate vSMB packet data, which allows attackers to execute arbitrary code on a target OS, aka… Affected: 1607 |
| CVE-2023-21695 | 8.8 | Feb 14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability Affected: before 10.0.10240.19747 |
| CVE-2022-41048 | 8.8 | Nov 9 | Microsoft ODBC Driver Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 22h2; 1607; 1809 |
| CVE-2022-41047 | 8.8 | Nov 9 | Microsoft ODBC Driver Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 22h2; 1607; 1809 |
| CVE-2022-37975 | 8.8 | Oct 11 | Windows Group Policy Elevation of Privilege Vulnerability Affected: 22h2; 22h2 |
The 500 most important CVEs for this product (exploited first, then by severity)