Filtered by vendor Microsoft Subscriptions
Filtered by product Windows 10 21h2 Subscriptions
Total 1201 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-0056 2 Microsoft, Redhat 21 .net, .net Framework, Microsoft.data.sqlclient and 18 more 2024-12-31 8.7 High
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
CVE-2024-21313 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2024-12-31 5.3 Medium
Windows TCP/IP Information Disclosure Vulnerability
CVE-2024-21307 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2024-12-31 7.5 High
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2024-21305 1 Microsoft 9 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 6 more 2024-12-31 4.4 Medium
Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability
CVE-2024-20700 1 Microsoft 9 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 6 more 2024-12-31 7.5 High
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2024-20699 1 Microsoft 9 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 6 more 2024-12-31 5.5 Medium
Windows Hyper-V Denial of Service Vulnerability
CVE-2024-20698 1 Microsoft 9 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 6 more 2024-12-31 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-20694 1 Microsoft 11 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 8 more 2024-12-31 5.5 Medium
Windows CoreMessaging Information Disclosure Vulnerability
CVE-2024-20691 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2024-12-31 4.7 Medium
Windows Themes Information Disclosure Vulnerability
CVE-2024-20690 1 Microsoft 6 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 3 more 2024-12-31 6.5 Medium
Windows Nearby Sharing Spoofing Vulnerability
CVE-2024-20683 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2024-12-31 7.8 High
Win32k Elevation of Privilege Vulnerability
CVE-2024-20682 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2024-12-31 7.8 High
Windows Cryptographic Services Remote Code Execution Vulnerability
CVE-2024-20680 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2024-12-31 6.5 Medium
Windows Message Queuing Client (MSMQC) Information Disclosure
CVE-2024-20657 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2024-12-31 7 High
Windows Group Policy Elevation of Privilege Vulnerability
CVE-2024-20654 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2024-12-31 8 High
Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2024-20674 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2024-12-31 8.8 High
Windows Kerberos Security Feature Bypass Vulnerability
CVE-2023-24023 3 Bluetooth, Microsoft, Redhat 11 Bluetooth Core Specification, Windows 10 1809, Windows 10 21h2 and 8 more 2024-11-21 6.4 Medium
Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS.
CVE-2023-20588 5 Amd, Debian, Fedoraproject and 2 more 78 Athlon Gold 3150g, Athlon Gold 3150g Firmware, Athlon Gold 3150ge and 75 more 2024-11-21 5.5 Medium
A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. 
CVE-2023-20569 5 Amd, Debian, Fedoraproject and 2 more 302 Epyc 72f3, Epyc 72f3 Firmware, Epyc 7313 and 299 more 2024-11-21 4.7 Medium
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.
CVE-2023-1017 3 Microsoft, Redhat, Trustedcomputinggroup 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2024-11-21 7.8 High
An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.