Windows 10 21H2

DATE	CVE	VULNERABILITY TITLE	RISK
2023-10-10	CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. network low complexity ietf nghttp2 netty envoyproxy eclipse caddyserver golang f5 apache apple grpc microsoft nodejs dena facebook amazon debian kazu-yamamoto istio varnish-cache-project traefik projectcontour linkerd linecorp redhat fedoraproject netapp akka konghq jenkins openresty cisco	7.5
2023-09-15	CVE-2023-38039	Allocation of Resources Without Limits or Throttling vulnerability in multiple products When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory. network low complexity haxx fedoraproject microsoft CWE-770	7.5
2023-08-08	CVE-2023-20569	Information Exposure Through Discrepancy vulnerability in multiple products A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. local high complexity fedoraproject debian amd microsoft CWE-203	4.7
2023-08-08	CVE-2023-20588	Divide By Zero vulnerability in multiple products A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. local low complexity debian amd xen fedoraproject microsoft CWE-369	5.5
2023-08-08	CVE-2023-35384	Unspecified vulnerability in Microsoft products Windows HTML Platforms Security Feature Bypass Vulnerability network low complexity microsoft	6.5
2023-08-08	CVE-2023-36903	Unspecified vulnerability in Microsoft products Windows System Assessment Tool Elevation of Privilege Vulnerability network low complexity microsoft critical	9.8
2023-08-08	CVE-2023-36905	Unspecified vulnerability in Microsoft products Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability network low complexity microsoft	7.5
2023-08-08	CVE-2023-36906	Unspecified vulnerability in Microsoft products Windows Cryptographic Services Information Disclosure Vulnerability network low complexity microsoft	7.5
2023-08-08	CVE-2023-36907	Unspecified vulnerability in Microsoft products Windows Cryptographic Services Information Disclosure Vulnerability network low complexity microsoft	7.5
2023-08-08	CVE-2023-36908	Unspecified vulnerability in Microsoft products Windows Hyper-V Information Disclosure Vulnerability low complexity microsoft	6.5