Windows 10
Vendor:
First CVE: Jul 20, 2015 · Active for 11 years
4,057
Total CVEs
More Total CVEs than 100% of tracked products
450.8
Avg CVEs / Year
Higher CVE frequency than 100% of tracked products
7.3
Avg CVSS
Higher Avg CVSS than 48% of tracked products
0.3%
KEV Rate
Higher KEV Rate than 96% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Windows 10 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 20, 2015
11 years ago
Most Recent CVE
Oct 10, 2023
1,018 days ago
CVE Severity & Scoring
Windows 104,057 CVEs
25%
71%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local2,142 (52.8%)
Network1,740 (42.9%)
Unknown56 (1.4%)
Physical34 (0.8%)
Adjacent Network85 (2.1%)
Attack Complexity
Low3,096 (76.3%)
High905 (22.3%)
Unknown56 (1.4%)
User Interaction
None2,380 (58.7%)
Unknown56 (1.4%)
Required1,621 (40.0%)
Privileges Required
Low1,955 (48.2%)
High126 (3.1%)
None1,920 (47.3%)
Unknown56 (1.4%)
Top CVEs
Signals from CVEs in this product scope (4057 CVEs).
4,057 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-1147HIGH A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '. | Jul 14, 2020 | 7.8 | 98 | YES | YES |
CVE-2015-2426HIGH Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, W | Jul 20, 2015 | 8.8 | 97 | YES | YES |
CVE-2018-4878HIGH A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media pla | Feb 6, 2018 | 7.8 | 96 | YES | YES |
CVE-2018-15982HIGH Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. | Jan 18, 2019 | 7.8 | 95 | YES | YES |
CVE-2018-1000006HIGH GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows | Jan 24, 2018 | 8.8 | 88 | NO | YES |
CVE-2022-21907CRITICAL HTTP Protocol Stack Remote Code Execution Vulnerability | Jan 11, 2022 | 9.8 | 87 | NO | YES |
CVE-2019-0539HIGH A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption | Jan 8, 2019 | 7.5 | 82 | NO | YES |
CVE-2022-26809CRITICAL Remote Procedure Call Runtime Remote Code Execution Vulnerability | Apr 15, 2022 | 9.8 | 80 | NO | NO |
CVE-2016-0041HIGH Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet | Feb 10, 2016 | 7.8 | 80 | NO | YES |
CVE-2015-6132HIGH Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gol | Dec 9, 2015 | 7.2 | 80 | NO | YES |
Exploit Exposure
Signals from CVEs in this product scope (4057 CVEs).
CISA KEV
12 CVEs
0.3% of CVEs· 96th percentile
Metasploit
16 CVEs
0.4% of CVEs· 96th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
384 CVEs
9.5% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (4057 CVEs).
Media Mentions
Signals from CVEs in this product scope (4057 CVEs).
Top CNAs Publishing CVEs For Windows 10
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 22h2 | 67 | 7.3 | 4.3% | 0 | 1 |
| 21h2 | 512 | 7.4 | 4.6% | 0 | 2 |
| 21h1 | 717 | 7.4 | 4.0% | 0 | 1 |
| 20h2 | 1,029 | 7.5 | 3.9% | 0 | 3 |
| 2004 | 913 | 7.5 | 3.1% | 0 | 3 |
| 1909 | 1,430 | 7.5 | 3.4% | 0 | 6 |
| 1903 | 1,056 | 7.4 | 4.4% | 0 | 40 |
| 1809 | 2,105 | 7.4 | 4.4% | 0 | 61 |
| 1807 | 2 | 6.2 | 4.0% | 0 | 0 |
| 1803 | 1,447 | 7.4 | 5.2% | 0 | 67 |
| 1709 | 1,241 | 7.2 | 5.6% | 0 | 97 |
| 1703 | 712 | 6.7 | 7.8% | 0 | 122 |
| 1607 | 2,264 | 7.2 | 5.2% | 0 | 152 |
| 1511 | 471 | 6.6 | 11.1% | 0 | 132 |