Microsoft
Microsoft Windows 10 21h1: vulnerabilidades y CVE
Microsoft Windows 10 21h1 tiene 83 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 2 son críticas y 44 figuran en el catálogo de explotación activa de CISA.
CVE83
Últimos 12 meses0
Críticas2
Explotadas activamente44
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-43226 | Alta (7.8) | 3.1% | ⚠ Explotación activa | 15 dic 2021 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2022-38028 | Alta (7.8) | 15% | ⚠ Explotación activa | 11 oct 2022 | Windows Print Spooler Elevation of Privilege Vulnerability |
| CVE-2023-36584 | Media (5.4) | 3.1% | ⚠ Explotación activa | 10 oct 2023 | Windows Mark of the Web Security Feature Bypass Vulnerability |
| CVE-2022-44698 | Media (5.4) | 76% | ⚠ Explotación activa | 13 dic 2022 | Windows SmartScreen Security Feature Bypass Vulnerability |
| CVE-2022-41049 | Media (5.4) | 2.5% | ⚠ Explotación activa | 9 nov 2022 | Windows Mark of the Web Security Feature Bypass Vulnerability |
| CVE-2022-41128 | Alta (8.8) | 25% | ⚠ Explotación activa | 9 nov 2022 | Windows Scripting Languages Remote Code Execution Vulnerability |
| CVE-2022-41073 | Alta (7.8) | 2.3% | ⚠ Explotación activa | 9 nov 2022 | Windows Print Spooler Elevation of Privilege Vulnerability |
| CVE-2022-41091 | Media (5.4) | 1.8% | ⚠ Explotación activa | 9 nov 2022 | Windows Mark of the Web Security Feature Bypass Vulnerability |
| CVE-2022-41125 | Alta (7.8) | 3.0% | ⚠ Explotación activa | 9 nov 2022 | Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
| CVE-2022-41033 | Alta (7.8) | 1.7% | ⚠ Explotación activa | 11 oct 2022 | Windows COM+ Event System Service Elevation of Privilege Vulnerability |
| CVE-2022-37969 | Alta (7.8) | 28% | ⚠ Explotación activa | 13 sept 2022 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2022-21971 | Alta (7.8) | 54% | ⚠ Explotación activa | 9 feb 2022 | Windows Runtime Remote Code Execution Vulnerability |
| CVE-2022-26923 | Alta (8.8) | 84% | ⚠ Explotación activa | 10 may 2022 | Active Directory Domain Services Elevation of Privilege Vulnerability |
| CVE-2022-34713 | Alta (7.8) | 68% | ⚠ Explotación activa | 9 ago 2022 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability |
| CVE-2022-22047 | Alta (7.8) | 19% | ⚠ Explotación activa | 12 jul 2022 | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
| CVE-2022-26925 | Media (5.9) | 10% | ⚠ Explotación activa | 10 may 2022 | Windows LSA Spoofing Vulnerability |
| CVE-2022-30190 | Alta (7.8) | 99% | ⚠ Explotación activa | 1 jun 2022 | A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the… |
| CVE-2022-21919 | Alta (7) | 2.4% | ⚠ Explotación activa | 11 ene 2022 | Windows User Profile Service Elevation of Privilege Vulnerability |
| CVE-2021-40450 | Alta (7.8) | 1.6% | ⚠ Explotación activa | 13 oct 2021 | Win32k Elevation of Privilege Vulnerability |
| CVE-2021-41357 | Alta (7.8) | 1.6% | ⚠ Explotación activa | 13 oct 2021 | Win32k Elevation of Privilege Vulnerability |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-38257 | Alta (7.5) | 4.5% | — | 10 sept 2024 | Microsoft AllJoyn API Information Disclosure Vulnerability |
| CVE-2024-38256 | Media (5.5) | 0.72% | — | 10 sept 2024 | Windows Kernel-Mode Driver Information Disclosure Vulnerability |
| CVE-2024-38254 | Media (6.2) | 0.72% | — | 10 sept 2024 | Windows Authentication Information Disclosure Vulnerability |
| CVE-2024-38252 | Alta (7.8) | 0.60% | — | 10 sept 2024 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2024-38250 | Alta (7.8) | 0.70% | — | 10 sept 2024 | Windows Graphics Component Elevation of Privilege Vulnerability |
| CVE-2024-38119 | Alta (7.5) | 0.76% | — | 10 sept 2024 | Windows Network Address Translation (NAT) Remote Code Execution Vulnerability |
| CVE-2024-38046 | Alta (7.8) | 0.69% | — | 10 sept 2024 | PowerShell Elevation of Privilege Vulnerability |
| CVE-2024-30080 | Crítica (9.8) | 43% | — | 11 jun 2024 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
| CVE-2024-21420 | Alta (8.8) | 1.7% | — | 13 feb 2024 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-21357 | Alta (8.1) | 27% | — | 13 feb 2024 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
| CVE-2022-44684 | Media (6.5) | 1.5% | — | 20 dic 2023 | Windows Local Session Manager (LSM) Denial of Service Vulnerability |
| CVE-2023-36602 | Alta (7.5) | 2.3% | — | 10 oct 2023 | Windows TCP/IP Denial of Service Vulnerability |
| CVE-2023-36598 | Alta (7.8) | 0.97% | — | 10 oct 2023 | Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability |
| CVE-2023-36596 | Alta (7.5) | 2.0% | — | 10 oct 2023 | Remote Procedure Call Information Disclosure Vulnerability |
| CVE-2023-36594 | Alta (7.8) | 12% | — | 10 oct 2023 | Windows Graphics Component Elevation of Privilege Vulnerability |
| CVE-2023-36585 | Alta (7.5) | 2.5% | — | 10 oct 2023 | Windows upnphost.dll Denial of Service Vulnerability |
| CVE-2023-36584 | Media (5.4) | 3.1% | ⚠ Explotación activa | 10 oct 2023 | Windows Mark of the Web Security Feature Bypass Vulnerability |
| CVE-2023-36577 | Alta (8.8) | 1.7% | — | 10 oct 2023 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
| CVE-2023-36576 | Media (5.5) | 1.0% | — | 10 oct 2023 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2023-36567 | Alta (7.5) | 2.0% | — | 10 oct 2023 | Windows Deployment Services Information Disclosure Vulnerability |
| CVE-2023-36436 | Alta (7.8) | 1.0% | — | 10 oct 2023 | Windows MSHTML Platform Remote Code Execution Vulnerability |
| CVE-2022-35759 | Media (6.5) | 1.7% | — | 31 may 2023 | Windows Local Security Authority (LSA) Denial of Service Vulnerability |
| CVE-2022-35758 | Media (5.5) | 0.50% | — | 31 may 2023 | Windows Kernel Memory Information Disclosure Vulnerability |
| CVE-2022-35757 | Alta (7.3) | 0.78% | — | 31 may 2023 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2022-35756 | Alta (7.8) | 11% | — | 31 may 2023 | Windows Kerberos Elevation of Privilege Vulnerability |
| CVE-2022-35755 | Alta (7.3) | 9.8% | — | 31 may 2023 | Windows Print Spooler Elevation of Privilege Vulnerability |
| CVE-2022-35754 | Media (6.7) | 0.41% | — | 31 may 2023 | Unified Write Filter Elevation of Privilege Vulnerability |
| CVE-2022-35753 | Alta (8.1) | 1.2% | — | 31 may 2023 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
| CVE-2022-35752 | Alta (8.1) | 1.2% | — | 31 may 2023 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
| CVE-2022-35750 | Alta (7.8) | 6.5% | — | 31 may 2023 | Win32k Elevation of Privilege Vulnerability |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.