Windows 10 1709
Vendor:
First CVE: May 9, 2018 · Active for 8 years
60
Total CVEs
More Total CVEs than 98% of tracked products
10.0
Avg CVEs / Year
Higher CVE frequency than 96% of tracked products
7.8
Avg CVSS
Higher Avg CVSS than 63% of tracked products
86.7%
KEV Rate
Higher KEV Rate than 99% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Windows 10 1709 over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 9, 2018
8 years ago
Most Recent CVE
Aug 7, 2024
717 days ago
CVE Severity & Scoring
Windows 10 170960 CVEs
93%
All CVEs352,708 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local38 (63.3%)
Network22 (36.7%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low49 (81.7%)
High11 (18.3%)
Unknown0 (0.0%)
User Interaction
None36 (60.0%)
Unknown0 (0.0%)
Required24 (40.0%)
Privileges Required
Low36 (60.0%)
High0 (0.0%)
None24 (40.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (60 CVEs).
60 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-0646CRITICAL A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'. | Jan 14, 2020 | 9.8 | 99 | YES | YES |
CVE-2020-0601HIGH A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by u | Jan 14, 2020 | 8.1 | 97 | YES | YES |
CVE-2018-8453HIGH An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." T | Oct 10, 2018 | 7.8 | 96 | YES | YES |
CVE-2018-8174HIGH A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This | May 9, 2018 | 7.5 | 96 | YES | YES |
CVE-2018-0824HIGH A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Executio | May 9, 2018 | 8.8 | 96 | YES | YES |
CVE-2020-0674HIGH A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerabil | Feb 11, 2020 | 7.5 | 95 | YES | YES |
CVE-2019-0752HIGH A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerabil | Apr 9, 2019 | 7.5 | 95 | YES | YES |
CVE-2019-1429HIGH A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerabil | Nov 12, 2019 | 7.5 | 94 | YES | YES |
CVE-2019-0841HIGH An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. Thi | Apr 9, 2019 | 7.8 | 92 | YES | YES |
CVE-2019-0541HIGH A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Mic | Jan 8, 2019 | 8.8 | 92 | YES | YES |
Exploit Exposure
Signals from CVEs in this product scope (60 CVEs).
CISA KEV
52 CVEs
86.7% of CVEs· 99th percentile
Metasploit
8 CVEs
13.3% of CVEs· 97th percentile
Nuclei
1 CVE
1.7% of CVEs· 96th percentile
ExploitDB
17 CVEs
28.3% of CVEs· 90th percentile
Social Chatter
Signals from CVEs in this product scope (60 CVEs).
Media Mentions
Signals from CVEs in this product scope (60 CVEs).
Top CNAs Publishing CVEs For Windows 10 1709
Top CWEs
Versions
No cataloged versions.