Windows 10 21H2

DATE	CVE	VULNERABILITY TITLE	RISK
2023-11-28	CVE-2023-24023	Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS. high complexity bluetooth microsoft	6.8
2023-11-14	CVE-2023-36017	Out-of-bounds Write vulnerability in Microsoft products Windows Scripting Engine Memory Corruption Vulnerability network low complexity microsoft CWE-787	8.8
2023-11-14	CVE-2023-36025	Unspecified vulnerability in Microsoft products Windows SmartScreen Security Feature Bypass Vulnerability network low complexity microsoft	8.8
2023-11-14	CVE-2023-36028	Unspecified vulnerability in Microsoft products Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability network low complexity microsoft critical	9.8
2023-11-14	CVE-2023-36033	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft products Windows DWM Core Library Elevation of Privilege Vulnerability local low complexity microsoft CWE-119	7.8
2023-11-14	CVE-2023-36036	Out-of-bounds Write vulnerability in Microsoft products Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability local low complexity microsoft CWE-787	7.8
2023-11-14	CVE-2023-36047	Unspecified vulnerability in Microsoft products Windows Authentication Elevation of Privilege Vulnerability local low complexity microsoft	7.8
2023-11-14	CVE-2023-36393	Unspecified vulnerability in Microsoft products Windows User Interface Application Core Remote Code Execution Vulnerability local low complexity microsoft	7.8
2023-11-14	CVE-2023-36394	Unspecified vulnerability in Microsoft products Windows Search Service Elevation of Privilege Vulnerability local high complexity microsoft	7.0
2023-11-14	CVE-2023-36397	Unspecified vulnerability in Microsoft products Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability network low complexity microsoft critical	9.8