Windows 10 1909

DATE	CVE	VULNERABILITY TITLE	RISK
2023-02-12	CVE-2022-38396	Unspecified vulnerability in Microsoft products HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path. local low complexity microsoft	7.8
2022-05-10	CVE-2022-26925	Missing Authentication for Critical Function vulnerability in Microsoft products Windows LSA Spoofing Vulnerability network high complexity microsoft CWE-306	5.9
2022-05-10	CVE-2022-26934	Unspecified vulnerability in Microsoft products Windows Graphics Component Information Disclosure Vulnerability network low complexity microsoft	6.5
2022-01-11	CVE-2022-21871	Unspecified vulnerability in Microsoft products Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability local low complexity microsoft	7.8
2022-01-11	CVE-2022-21882	Out-of-bounds Write vulnerability in Microsoft products Win32k Elevation of Privilege Vulnerability local low complexity microsoft CWE-787	7.8
2020-03-12	CVE-2020-0787	Link Following vulnerability in Microsoft products An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'. local low complexity microsoft CWE-59	7.8
2013-12-11	CVE-2013-3900	Improper Verification of Cryptographic Signature vulnerability in Microsoft products Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. local low complexity microsoft CWE-347	5.5