Windows 10

2872 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-31165 HIGH PATCH This Week

Windows Container Manager Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Incorrect Authorization vulnerability could allow attackers to bypass authorization checks to access restricted resources.

Microsoft Authentication Bypass Windows 10 Windows Server 2016

NVD

CVSS 3.1

7.8

EPSS

1.0%

CVE-2021-28479 MEDIUM PATCH This Month

Windows CSC Service Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 8 1 Windows Rt 8 1 +3

NVD

CVSS 3.1

5.5

EPSS

0.8%

CVE-2021-28476 CRITICAL PATCH Act Now

Windows Hyper-V Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity.

Microsoft RCE Windows 10 Windows 7 Windows 8 1 +4

NVD

CVSS 3.1

9.9

EPSS

38.6%

CVE-2021-28455 HIGH PATCH This Week

Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Microsoft RCE 365 Apps Office Windows 10 +7

NVD

CVSS 3.1

8.8

EPSS

2.1%

CVE-2021-28447 MEDIUM POC PATCH This Month

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. Public exploit code available.

Microsoft Authentication Bypass Windows 10 Windows 7 Windows 8 1 +4

NVD

CVSS 3.1

4.4

EPSS

2.0%

CVE-2021-28446 HIGH PATCH This Week

Windows Portmapping Information Disclosure Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

7.1

EPSS

0.8%

CVE-2021-28445 HIGH PATCH This Week

Windows Network File System Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.

Microsoft RCE Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

8.1

EPSS

2.7%

CVE-2021-28444 MEDIUM PATCH This Month

Windows Hyper-V Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.7), this vulnerability is low attack complexity.

Microsoft Authentication Bypass Windows 10 Windows 8 1 Windows Server 2012 +2

NVD

CVSS 3.1

5.7

EPSS

1.7%

CVE-2021-28443 MEDIUM PATCH This Month

Windows Console Driver Denial of Service Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Denial Of Service Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

5.5

EPSS

0.6%

CVE-2021-28442 MEDIUM PATCH This Month

Windows TCP/IP Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Microsoft Information Disclosure Windows 10 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

6.5

EPSS

6.5%

CVE-2021-28441 MEDIUM PATCH This Month

Windows Hyper-V Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

6.5

EPSS

0.8%

CVE-2021-28440 HIGH PATCH This Week

Windows Installer Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Microsoft Information Disclosure Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

7.0

EPSS

0.6%

CVE-2021-28439 HIGH PATCH This Week

Windows TCP/IP Driver Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Microsoft Denial Of Service Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

7.5

EPSS

6.1%

CVE-2021-28438 MEDIUM PATCH This Month

Windows Console Driver Denial of Service Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Microsoft Denial Of Service Windows 10 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

5.5

EPSS

0.7%

CVE-2021-28437 MEDIUM PATCH This Month

Windows Installer Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

5.5

EPSS

0.8%

CVE-2021-28436 HIGH PATCH This Week

Windows Speech Runtime Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

7.8

EPSS

0.5%

CVE-2021-28435 MEDIUM PATCH This Month

Windows Event Tracing Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 8 1 Windows Rt 8 1 +3

NVD

CVSS 3.1

5.5

EPSS

0.8%

CVE-2021-28434 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28358 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28357 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28356 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.5%

CVE-2021-28355 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28354 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28353 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28352 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28351 HIGH PATCH This Week

Windows Speech Runtime Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

7.8

EPSS

0.5%

CVE-2021-28350 HIGH PATCH This Week

Windows GDI+ Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft RCE Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2021-28349 HIGH PATCH This Week

Windows GDI+ Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft RCE Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2021-28348 HIGH PATCH This Week

Windows GDI+ Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft RCE Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2021-28347 HIGH PATCH This Week

Windows Speech Runtime Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

7.8

EPSS

0.5%

CVE-2021-28346 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28345 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28344 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.5%

CVE-2021-28343 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28342 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28341 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28340 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.5%

CVE-2021-28339 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28338 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28337 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28336 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28335 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28334 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28333 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.5%

CVE-2021-28332 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28331 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28330 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28329 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2021-28328 MEDIUM PATCH This Month

Windows DNS Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

6.5

EPSS

2.5%

CVE-2021-28327 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

8.8

EPSS

2.5%

CVE-2021-28326 MEDIUM PATCH This Month

Windows AppX Deployment Server Denial of Service Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Microsoft Denial Of Service Windows 10 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

5.5

EPSS

1.0%

CVE-2021-28325 MEDIUM PATCH This Month

Windows SMB Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 8 1 Windows Rt 8 1 +3

NVD

CVSS 3.1

6.5

EPSS

61.6%

CVE-2021-28324 HIGH PATCH This Week

Windows SMB Information Disclosure Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Microsoft Information Disclosure Windows 10 Windows Server 2016

NVD

CVSS 3.1

7.5

EPSS

6.2%

CVE-2021-28323 MEDIUM PATCH This Month

Windows DNS Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

6.5

EPSS

4.3%

CVE-2021-28322 HIGH PATCH This Week

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Visual Studio Visual Studio 2017 Visual Studio 2019 Windows 10 +2

NVD

CVSS 3.1

7.8

EPSS

1.0%

CVE-2021-28321 HIGH PATCH This Week

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Visual Studio Visual Studio 2017 Visual Studio 2019 Windows 10 +2

NVD

CVSS 3.1

7.8

EPSS

1.3%

CVE-2021-28320 HIGH PATCH This Week

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

7.8

EPSS

0.5%

CVE-2021-28319 HIGH PATCH This Week

Windows TCP/IP Driver Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Microsoft Denial Of Service Windows 10 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

7.5

EPSS

9.4%

CVE-2021-28318 MEDIUM PATCH This Month

Windows GDI+ Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

5.5

EPSS

0.8%

CVE-2021-28317 MEDIUM PATCH This Month

Microsoft Windows Codecs Library Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

5.5

EPSS

0.8%

CVE-2021-28316 MEDIUM PATCH This Month

Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.2), this vulnerability is no authentication required.

Microsoft Authentication Bypass Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

4.2

EPSS

1.1%

CVE-2021-28315 HIGH PATCH This Week

Windows Media Video Decoder Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

7.8

EPSS

1.6%

CVE-2021-28314 HIGH PATCH This Week

Windows Hyper-V Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

7.8

EPSS

0.6%

CVE-2021-28313 HIGH PATCH This Week

Privilege Escalation Visual Studio Visual Studio 2017 Visual Studio 2019 Windows 10 +2

NVD

CVSS 3.1

7.8

EPSS

1.0%

CVE-2021-28312 LOW PATCH Monitor

Windows NTFS Denial of Service Vulnerability. Rated low severity (CVSS 3.3), this vulnerability is no authentication required, low attack complexity.

Microsoft Denial Of Service Windows 10 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

3.3

EPSS

6.6%

CVE-2021-28311 MEDIUM PATCH This Month

Windows Application Compatibility Cache Denial of Service Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Microsoft Denial Of Service Windows 10 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

6.5

EPSS

2.5%

CVE-2021-28309 MEDIUM PATCH This Month

Windows Kernel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

5.5

EPSS

0.8%

CVE-2021-27096 HIGH PATCH This Week

NTFS Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Windows 10 Windows 7 Windows 8 1 Windows Rt 8 1 +4

NVD

CVSS 3.1

7.8

EPSS

0.6%

CVE-2021-27095 HIGH PATCH This Week

Windows Media Video Decoder Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

7.8

EPSS

4.1%

CVE-2021-27094 MEDIUM POC PATCH This Month

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. Public exploit code available.

Microsoft Authentication Bypass Windows 10 Windows 8 1 Windows Rt 8 1 +3

NVD

CVSS 3.1

4.4

EPSS

1.0%

CVE-2021-27093 MEDIUM PATCH This Month

Windows Kernel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

5.5

EPSS

0.8%

CVE-2021-27092 MEDIUM PATCH This Month

Azure AD Web Sign-in Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity.

Microsoft Authentication Bypass Windows 10 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

6.8

EPSS

2.6%

CVE-2021-27090 HIGH PATCH This Week

Windows Secure Kernel Mode Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows Server 2016

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2021-27089 HIGH PATCH This Week

Microsoft Internet Messaging API Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

7.8

EPSS

2.3%

CVE-2021-27088 HIGH PATCH This Week

Windows Event Tracing Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

7.8

EPSS

0.6%

CVE-2021-27086 HIGH PATCH This Week

Windows Services and Controller App Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Incorrect Authorization vulnerability could allow attackers to bypass authorization checks to access restricted resources.

Microsoft Authentication Bypass Windows 10 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2021-27079 MEDIUM PATCH This Month

Windows Media Photo Codec Information Disclosure Vulnerability. Rated medium severity (CVSS 5.7), this vulnerability is remotely exploitable, low attack complexity.

Microsoft Information Disclosure Windows 10 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

5.7

EPSS

2.9%

CVE-2021-27072 HIGH PATCH This Week

Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Information Disclosure Windows 10 Windows 8 1 Windows Rt 8 1 Windows Server 2012 +2

NVD

CVSS 3.1

7.0

EPSS

0.6%

CVE-2021-26417 MEDIUM PATCH This Month

Windows Overlay Filter Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

5.5

EPSS

0.8%

CVE-2021-26416 HIGH PATCH This Week

Windows Hyper-V Denial of Service Vulnerability. Rated high severity (CVSS 7.7), this vulnerability is remotely exploitable, low attack complexity.

Microsoft Denial Of Service Windows 10 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

7.7

EPSS

3.9%

CVE-2021-26415 HIGH PATCH This Week

Windows Installer Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

7.8

EPSS

3.6%

CVE-2021-26413 MEDIUM PATCH This Month

Windows Installer Spoofing Vulnerability. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

6.2

EPSS

0.7%

CVE-2021-27077 HIGH PATCH This Week

Windows Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Microsoft Privilege Escalation Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

7.8

EPSS

1.4%

CVE-2021-27070 HIGH PATCH This Week

Windows 10 Update Assistant Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. This Incorrect Permission Assignment vulnerability could allow attackers to access resources due to misconfigured permissions.

Microsoft Information Disclosure Windows 10 Windows Server 2016

NVD

CVSS 3.1

7.3

EPSS

2.9%

CVE-2021-26901 HIGH PATCH This Week

Windows Event Tracing Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2021-26900 HIGH PATCH This Week

Windows Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Use After Free Microsoft Memory Corruption Information Disclosure Windows 10 +1

NVD

CVSS 3.1

7.8

EPSS

2.4%

CVE-2021-26899 HIGH PATCH This Week

Windows UPnP Device Host Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

7.8

EPSS

0.9%

CVE-2021-26898 HIGH PATCH This Week

Windows Event Tracing Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2021-26892 MEDIUM PATCH This Month

Windows Extensible Firmware Interface Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity.

Microsoft Authentication Bypass Windows 10 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

6.2

EPSS

1.1%

CVE-2021-26891 HIGH PATCH This Week

Windows Container Execution Agent Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2021-31165

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Authentication Bypass Windows 10 +1

NVD

CVE-2021-28479

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Windows CSC Service Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +5

NVD

CVE-2021-28476

EPSS 39% CVSS 9.9

CRITICAL PATCH Act Now

Windows Hyper-V Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity.

Microsoft RCE Windows 10 +6

NVD

CVE-2021-28455

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Microsoft RCE 365 Apps +9

NVD

CVE-2021-28447

EPSS 2% CVSS 4.4

MEDIUM POC PATCH This Month

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. Public exploit code available.

Microsoft Authentication Bypass Windows 10 +6

NVD

CVE-2021-28446

EPSS 1% CVSS 7.1

HIGH PATCH This Week

Windows Portmapping Information Disclosure Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +7

NVD

CVE-2021-28445

EPSS 3% CVSS 8.1

HIGH PATCH This Week

Windows Network File System Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.

Microsoft RCE Windows 10 +7

NVD

CVE-2021-28444

EPSS 2% CVSS 5.7

MEDIUM PATCH This Month

Windows Hyper-V Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.7), this vulnerability is low attack complexity.

Microsoft Authentication Bypass Windows 10 +4

NVD

CVE-2021-28443

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Windows Console Driver Denial of Service Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Denial Of Service Windows 10 +7

NVD

CVE-2021-28442

EPSS 6% CVSS 6.5

MEDIUM PATCH This Month

Windows TCP/IP Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Microsoft Information Disclosure Windows 10 +2

NVD

CVE-2021-28441

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

Windows Hyper-V Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +2

NVD

CVE-2021-28440

EPSS 1% CVSS 7.0

HIGH PATCH This Week

Windows Installer Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Microsoft Information Disclosure Windows 10 +7

NVD

CVE-2021-28439

EPSS 6% CVSS 7.5

HIGH PATCH This Week

Windows TCP/IP Driver Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Microsoft Denial Of Service Windows 10 +7

NVD

CVE-2021-28438

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Windows Console Driver Denial of Service Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Microsoft Denial Of Service Windows 10 +2

NVD

CVE-2021-28437

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Windows Installer Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +7

NVD

CVE-2021-28436

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Windows Speech Runtime Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +2

NVD

CVE-2021-28435

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Windows Event Tracing Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +5

NVD

CVE-2021-28434

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28358

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28357

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28356

EPSS 3% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28355

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28354

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28353

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28352

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28351

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Windows Speech Runtime Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +2

NVD

CVE-2021-28350

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Windows GDI+ Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft RCE Windows 10 +7

NVD

CVE-2021-28349

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Windows GDI+ Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft RCE Windows 10 +7

NVD

CVE-2021-28348

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Windows GDI+ Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft RCE Windows 10 +7

NVD

CVE-2021-28347

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Windows Speech Runtime Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +2

NVD

CVE-2021-28346

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28345

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28344

EPSS 3% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28343

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28342

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28341

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28340

EPSS 3% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28339

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28338

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28337

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28336

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28335

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28334

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28333

EPSS 3% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28332

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28331

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28330

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28329

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28328

EPSS 2% CVSS 6.5

MEDIUM PATCH This Month

Windows DNS Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Microsoft Information Disclosure Windows 10 +7

NVD

CVE-2021-28327

EPSS 3% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Windows 10 Windows 7 +6

NVD

CVE-2021-28326

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Windows AppX Deployment Server Denial of Service Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Microsoft Denial Of Service Windows 10 +2

NVD

CVE-2021-28325

EPSS 62% CVSS 6.5

MEDIUM PATCH This Month

Windows SMB Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Microsoft Information Disclosure Windows 10 +5

NVD

CVE-2021-28324

EPSS 6% CVSS 7.5

HIGH PATCH This Week

Windows SMB Information Disclosure Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Microsoft Information Disclosure Windows 10 +1

NVD

CVE-2021-28323

EPSS 4% CVSS 6.5

MEDIUM PATCH This Month

Windows DNS Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Microsoft Information Disclosure Windows 10 +7

NVD

CVE-2021-28322

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Privilege Escalation Visual Studio Visual Studio 2017 +4

NVD

CVE-2021-28321

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Visual Studio Visual Studio 2017 +4

NVD

CVE-2021-28320

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +2

NVD

CVE-2021-28319

EPSS 9% CVSS 7.5

HIGH PATCH This Week

Windows TCP/IP Driver Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Microsoft Denial Of Service Windows 10 +2

NVD

CVE-2021-28318

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Windows GDI+ Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +7

NVD

CVE-2021-28317

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Microsoft Windows Codecs Library Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +7

NVD

CVE-2021-28316

EPSS 1% CVSS 4.2

MEDIUM PATCH This Month

Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.2), this vulnerability is no authentication required.

Microsoft Authentication Bypass Windows 10 +7

NVD

CVE-2021-28315

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Windows Media Video Decoder Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE Windows 10 +7

NVD

CVE-2021-28314

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Windows Hyper-V Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +2

NVD

CVE-2021-28313

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Privilege Escalation Visual Studio Visual Studio 2017 +4

NVD

CVE-2021-28312

EPSS 7% CVSS 3.3

LOW PATCH Monitor

Windows NTFS Denial of Service Vulnerability. Rated low severity (CVSS 3.3), this vulnerability is no authentication required, low attack complexity.

Microsoft Denial Of Service Windows 10 +2

NVD

CVE-2021-28311

EPSS 3% CVSS 6.5

MEDIUM PATCH This Month

Microsoft Denial Of Service Windows 10 +2

NVD

CVE-2021-28309

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Windows Kernel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +7

NVD

CVE-2021-27096

EPSS 1% CVSS 7.8

HIGH PATCH This Week

NTFS Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Windows 10 Windows 7 +6

NVD

CVE-2021-27095

EPSS 4% CVSS 7.8

HIGH PATCH This Week

Windows Media Video Decoder Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE Windows 10 +7

NVD

CVE-2021-27094

EPSS 1% CVSS 4.4

MEDIUM POC PATCH This Month

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. Public exploit code available.

Microsoft Authentication Bypass Windows 10 +5

NVD

CVE-2021-27093

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Windows Kernel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +7

NVD

CVE-2021-27092

EPSS 3% CVSS 6.8

MEDIUM PATCH This Month

Azure AD Web Sign-in Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity.

Microsoft Authentication Bypass Windows 10 +2

NVD

CVE-2021-27090

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Windows Secure Kernel Mode Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +1

NVD

CVE-2021-27089

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Internet Messaging API Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE Windows 10 +7

NVD

CVE-2021-27088

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Windows Event Tracing Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +2

NVD

CVE-2021-27086

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Authentication Bypass Windows 10 +2

NVD

CVE-2021-27079

EPSS 3% CVSS 5.7

MEDIUM PATCH This Month

Windows Media Photo Codec Information Disclosure Vulnerability. Rated medium severity (CVSS 5.7), this vulnerability is remotely exploitable, low attack complexity.

Microsoft Information Disclosure Windows 10 +2

NVD

CVE-2021-27072

EPSS 1% CVSS 7.0

HIGH PATCH This Week

Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Information Disclosure Windows 10 Windows 8 1 +4

NVD

CVE-2021-26417

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Windows Overlay Filter Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +2

NVD

CVE-2021-26416

EPSS 4% CVSS 7.7

HIGH PATCH This Week

Windows Hyper-V Denial of Service Vulnerability. Rated high severity (CVSS 7.7), this vulnerability is remotely exploitable, low attack complexity.

Microsoft Denial Of Service Windows 10 +2

NVD

CVE-2021-26415

EPSS 4% CVSS 7.8

HIGH PATCH This Week

Windows Installer Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +7

NVD

CVE-2021-26413

EPSS 1% CVSS 6.2

MEDIUM PATCH This Month

Windows Installer Spoofing Vulnerability. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity.

Microsoft Information Disclosure Windows 10 +7

NVD

CVE-2021-27077

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Privilege Escalation Windows 10 +7

NVD

CVE-2021-27070

EPSS 3% CVSS 7.3

HIGH PATCH This Week

Microsoft Information Disclosure Windows 10 +1

NVD

CVE-2021-26901

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Windows Event Tracing Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +7

NVD

CVE-2021-26900

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Use After Free Microsoft Memory Corruption +3

NVD

CVE-2021-26899

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Windows UPnP Device Host Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +7

NVD

CVE-2021-26898

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Windows Event Tracing Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +7

NVD

CVE-2021-26892

EPSS 1% CVSS 6.2

MEDIUM PATCH This Month

Windows Extensible Firmware Interface Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity.

Microsoft Authentication Bypass Windows 10 +2

NVD

CVE-2021-26891

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Windows Container Execution Agent Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +2

NVD

Prev Page 9 of 32 Next