Microsoft
Microsoft Windows 10 20h2: vulnerabilidades y CVE
Microsoft Windows 10 20h2 tiene 283 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 12 son críticas y 54 figuran en el catálogo de explotación activa de CISA.
CVE283
Últimos 12 meses0
Críticas12
Explotadas activamente54
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-43226 | Alta (7.8) | 3.1% | ⚠ Explotación activa | 15 dic 2021 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2022-38028 | Alta (7.8) | 15% | ⚠ Explotación activa | 11 oct 2022 | Windows Print Spooler Elevation of Privilege Vulnerability |
| CVE-2023-28229 | Alta (7) | 1.7% | ⚠ Explotación activa | 11 abr 2023 | Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
| CVE-2023-28252 | Alta (7.8) | 49% | ⚠ Explotación activa | 11 abr 2023 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2023-24880 | Media (4.4) | 78% | ⚠ Explotación activa | 14 mar 2023 | Windows SmartScreen Security Feature Bypass Vulnerability |
| CVE-2023-23376 | Alta (7.8) | 11% | ⚠ Explotación activa | 14 feb 2023 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2023-21823 | Alta (7.8) | 5.6% | ⚠ Explotación activa | 14 feb 2023 | Windows Graphics Component Remote Code Execution Vulnerability |
| CVE-2023-21674 | Alta (8.8) | 41% | ⚠ Explotación activa | 10 ene 2023 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
| CVE-2022-44698 | Media (5.4) | 76% | ⚠ Explotación activa | 13 dic 2022 | Windows SmartScreen Security Feature Bypass Vulnerability |
| CVE-2022-41049 | Media (5.4) | 2.5% | ⚠ Explotación activa | 9 nov 2022 | Windows Mark of the Web Security Feature Bypass Vulnerability |
| CVE-2022-41125 | Alta (7.8) | 3.0% | ⚠ Explotación activa | 9 nov 2022 | Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
| CVE-2022-41128 | Alta (8.8) | 25% | ⚠ Explotación activa | 9 nov 2022 | Windows Scripting Languages Remote Code Execution Vulnerability |
| CVE-2022-41073 | Alta (7.8) | 2.3% | ⚠ Explotación activa | 9 nov 2022 | Windows Print Spooler Elevation of Privilege Vulnerability |
| CVE-2022-41091 | Media (5.4) | 1.8% | ⚠ Explotación activa | 9 nov 2022 | Windows Mark of the Web Security Feature Bypass Vulnerability |
| CVE-2022-41033 | Alta (7.8) | 1.7% | ⚠ Explotación activa | 11 oct 2022 | Windows COM+ Event System Service Elevation of Privilege Vulnerability |
| CVE-2022-37969 | Alta (7.8) | 28% | ⚠ Explotación activa | 13 sept 2022 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2022-21971 | Alta (7.8) | 54% | ⚠ Explotación activa | 9 feb 2022 | Windows Runtime Remote Code Execution Vulnerability |
| CVE-2022-26923 | Alta (8.8) | 84% | ⚠ Explotación activa | 10 may 2022 | Active Directory Domain Services Elevation of Privilege Vulnerability |
| CVE-2022-34713 | Alta (7.8) | 68% | ⚠ Explotación activa | 9 ago 2022 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability |
| CVE-2022-22047 | Alta (7.8) | 19% | ⚠ Explotación activa | 12 jul 2022 | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-44684 | Media (6.5) | 1.5% | — | 20 dic 2023 | Windows Local Session Manager (LSM) Denial of Service Vulnerability |
| CVE-2022-35759 | Media (6.5) | 1.7% | — | 31 may 2023 | Windows Local Security Authority (LSA) Denial of Service Vulnerability |
| CVE-2022-35758 | Media (5.5) | 0.50% | — | 31 may 2023 | Windows Kernel Memory Information Disclosure Vulnerability |
| CVE-2022-35757 | Alta (7.3) | 0.78% | — | 31 may 2023 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2022-35756 | Alta (7.8) | 11% | — | 31 may 2023 | Windows Kerberos Elevation of Privilege Vulnerability |
| CVE-2022-35755 | Alta (7.3) | 9.8% | — | 31 may 2023 | Windows Print Spooler Elevation of Privilege Vulnerability |
| CVE-2022-35753 | Alta (8.1) | 1.2% | — | 31 may 2023 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
| CVE-2022-35752 | Alta (8.1) | 1.2% | — | 31 may 2023 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
| CVE-2022-35751 | Alta (7.8) | 5.5% | — | 31 may 2023 | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2022-35750 | Alta (7.8) | 6.5% | — | 31 may 2023 | Win32k Elevation of Privilege Vulnerability |
| CVE-2022-35749 | Alta (7.8) | 0.55% | — | 31 may 2023 | Windows Digital Media Receiver Elevation of Privilege Vulnerability |
| CVE-2022-35747 | Media (5.9) | 1.7% | — | 31 may 2023 | Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability |
| CVE-2022-35746 | Alta (7.8) | 0.55% | — | 31 may 2023 | Windows Digital Media Receiver Elevation of Privilege Vulnerability |
| CVE-2022-35745 | Alta (8.1) | 1.2% | — | 31 may 2023 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
| CVE-2022-35744 | Crítica (9.8) | 2.0% | — | 31 may 2023 | Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability |
| CVE-2022-35743 | Alta (7.8) | 1.5% | — | 31 may 2023 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability |
| CVE-2023-29335 | Alta (7.5) | 1.2% | — | 9 may 2023 | Microsoft Word Security Feature Bypass Vulnerability |
| CVE-2023-29325 | Alta (7.5) | 84% | — | 9 may 2023 | Windows OLE Remote Code Execution Vulnerability |
| CVE-2023-29324 | Media (6.5) | 2.9% | — | 9 may 2023 | Windows MSHTML Platform Security Feature Bypass Vulnerability |
| CVE-2023-28283 | Alta (8.1) | 0.97% | — | 9 may 2023 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
| CVE-2023-28251 | Media (5.5) | 0.45% | — | 9 may 2023 | Windows Driver Revocation List Security Feature Bypass Vulnerability |
| CVE-2023-24954 | Media (6.5) | 1.8% | — | 9 may 2023 | Microsoft SharePoint Server Information Disclosure Vulnerability |
| CVE-2023-24949 | Alta (7.8) | 25% | — | 9 may 2023 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2023-24948 | Alta (7.4) | 0.95% | — | 9 may 2023 | Windows Bluetooth Driver Elevation of Privilege Vulnerability |
| CVE-2023-24947 | Alta (8.8) | 0.70% | — | 9 may 2023 | Windows Bluetooth Driver Remote Code Execution Vulnerability |
| CVE-2023-24946 | Alta (7.8) | 0.44% | — | 9 may 2023 | Windows Backup Service Elevation of Privilege Vulnerability |
| CVE-2023-24945 | Media (5.5) | 0.56% | — | 9 may 2023 | Windows iSCSI Target Service Information Disclosure Vulnerability |
| CVE-2023-24944 | Media (6.5) | 0.69% | — | 9 may 2023 | Windows Bluetooth Driver Information Disclosure Vulnerability |
| CVE-2023-24943 | Crítica (9.8) | 4.7% | — | 9 may 2023 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
| CVE-2023-24942 | Alta (7.5) | 1.9% | — | 9 may 2023 | Remote Procedure Call Runtime Denial of Service Vulnerability |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.