[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftOw_0AamxH9CZEeQbznbSCNA7F8k5QJJWY0ev6GCVkw":3,"g5a-family:microsoft\u002Fwindows_10":310,"g5a-ex:microsoft\u002Fwindows_10@*":346},{"success":4,"data":5},true,{"product":6,"versions":67,"topVulnerabilitiesByEpss":83,"kevVulnerabilities":144,"seoMetadata":288,"meta":307},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":66},"microsoft","windows_10",15,4066,20,"2023-10-10",[14,18,22,25,29,33,38,42,45,49,52,54,57,60,63],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},"1511",717,1,{"version":19,"cve_count":20,"kev_count":21,"has_kev":4},"1607",2798,6,{"version":23,"cve_count":24,"kev_count":17,"has_kev":4},"1703",1185,{"version":26,"cve_count":27,"kev_count":28,"has_kev":4},"1709",1682,3,{"version":30,"cve_count":31,"kev_count":32,"has_kev":4},"1803",1794,4,{"version":34,"cve_count":35,"kev_count":36,"has_kev":37},"1807",2,0,false,{"version":39,"cve_count":40,"kev_count":41,"has_kev":4},"1809",2400,7,{"version":43,"cve_count":44,"kev_count":28,"has_kev":4},"1903",1241,{"version":46,"cve_count":47,"kev_count":48,"has_kev":4},"1909",1530,5,{"version":50,"cve_count":51,"kev_count":28,"has_kev":4},"2004",952,{"version":53,"cve_count":36,"kev_count":36,"has_kev":37},"2019",{"version":55,"cve_count":56,"kev_count":35,"has_kev":4},"20h2",1051,{"version":58,"cve_count":59,"kev_count":17,"has_kev":4},"21h1",728,{"version":61,"cve_count":62,"kev_count":36,"has_kev":37},"21h2",520,{"version":64,"cve_count":65,"kev_count":36,"has_kev":37},"22h2",68,"Windows 10 by Microsoft is a technology product with 15 tracked versions and 4066 known security vulnerabilities including 20 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[68,69,70,71,72,73,74,75,76,77,78,79,80,81,82],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},{"version":19,"cve_count":20,"kev_count":21,"has_kev":4},{"version":23,"cve_count":24,"kev_count":17,"has_kev":4},{"version":26,"cve_count":27,"kev_count":28,"has_kev":4},{"version":30,"cve_count":31,"kev_count":32,"has_kev":4},{"version":34,"cve_count":35,"kev_count":36,"has_kev":37},{"version":39,"cve_count":40,"kev_count":41,"has_kev":4},{"version":43,"cve_count":44,"kev_count":28,"has_kev":4},{"version":46,"cve_count":47,"kev_count":48,"has_kev":4},{"version":50,"cve_count":51,"kev_count":28,"has_kev":4},{"version":53,"cve_count":36,"kev_count":36,"has_kev":37},{"version":55,"cve_count":56,"kev_count":35,"has_kev":4},{"version":58,"cve_count":59,"kev_count":17,"has_kev":4},{"version":61,"cve_count":62,"kev_count":36,"has_kev":37},{"version":64,"cve_count":65,"kev_count":36,"has_kev":37},[84,92,99,106,113,119,126,131,136,141],{"cveId":85,"description":86,"publishedDate":87,"cvssScore":88,"cvssVersion":89,"severity":90,"isKev":4,"epssScore":91},"CVE-2015-2426","Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka \"OpenType Font Driver Vulnerability.\"","2015-07-20",8.8,"v3.1","High",0.8669,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":96,"cvssVersion":97,"severity":90,"isKev":37,"epssScore":98},"CVE-2015-6132","Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle library loading, which allows local users to gain privileges via a crafted application, aka \"Windows Library Loading Remote Code Execution Vulnerability.\"","2015-12-09",7.2,"v2",0.84701,{"cveId":100,"description":101,"publishedDate":102,"cvssScore":103,"cvssVersion":104,"severity":90,"isKev":37,"epssScore":105},"CVE-2016-0041","Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 10 and 11 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka \"DLL Loading Remote Code Execution Vulnerability.\"","2016-02-10",7.8,"v3.0",0.83285,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":110,"cvssVersion":104,"severity":111,"isKev":37,"epssScore":112},"CVE-2017-0038","gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process heap memory via a crafted EMF file, as demonstrated by an EMR_SETDIBITSTODEVICE record with modified Device Independent Bitmap (DIB) dimensions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-3216, CVE-2016-3219, and\u002For CVE-2016-3220.","2017-02-20",5.5,"Medium",0.821,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":117,"cvssVersion":104,"severity":90,"isKev":37,"epssScore":118},"CVE-2017-0070","A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151.","2017-03-17",7.5,0.78538,{"cveId":120,"description":121,"publishedDate":122,"cvssScore":123,"cvssVersion":104,"severity":124,"isKev":37,"epssScore":125},"CVE-2016-3236","The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles proxy discovery, which allows remote attackers to redirect network traffic via unspecified vectors, aka \"Windows WPAD Proxy Discovery Elevation of Privilege Vulnerability.\"","2016-06-16",9.8,"Critical",0.77658,{"cveId":127,"description":128,"publishedDate":129,"cvssScore":103,"cvssVersion":104,"severity":90,"isKev":37,"epssScore":130},"CVE-2017-0290","The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 does not properly scan a specially crafted file leading to memory corruption, aka \"Microsoft Malware Protection Engine Remote Code Execution Vulnerability.\"","2017-05-09",0.77207,{"cveId":132,"description":133,"publishedDate":134,"cvssScore":103,"cvssVersion":104,"severity":90,"isKev":37,"epssScore":135},"CVE-2016-0117","The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted PDF document, aka \"Windows Remote Code Execution Vulnerability.\"","2016-03-09",0.72934,{"cveId":137,"description":138,"publishedDate":139,"cvssScore":117,"cvssVersion":104,"severity":90,"isKev":37,"epssScore":140},"CVE-2017-8729","Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764.","2017-09-13",0.72171,{"cveId":142,"description":143,"publishedDate":139,"cvssScore":117,"cvssVersion":104,"severity":90,"isKev":37,"epssScore":140},"CVE-2017-8740","Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764.",[145,154,162,169,178,187,191,198,205,213,219,226,233,241,248,256,262,269,276,281],{"cveId":146,"description":147,"publishedDate":148,"cvssScore":103,"severity":90,"isKev":4,"epssScore":149,"cisaVulnName":150,"cisaDateAdded":151,"cisaShortDescription":152,"cisaRequiredAction":153},"CVE-2021-43226","Windows Common Log File System Driver Elevation of Privilege Vulnerability","2021-12-15",0.03072,"Microsoft Windows Privilege Escalation Vulnerability","2025-10-06","Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":155,"description":156,"publishedDate":102,"cvssScore":88,"severity":90,"isKev":4,"epssScore":157,"cisaVulnName":158,"cisaDateAdded":159,"cisaShortDescription":160,"cisaRequiredAction":161},"CVE-2016-0984","Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.",0.55375,"Adobe Flash Player and AIR Use-After-Free Vulnerability","2022-05-25","Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.","The impacted products are end-of-life and should be disconnected if still in use.",{"cveId":163,"description":164,"publishedDate":165,"cvssScore":88,"severity":90,"isKev":4,"epssScore":166,"cisaVulnName":167,"cisaDateAdded":159,"cisaShortDescription":168,"cisaRequiredAction":161},"CVE-2016-1010","Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0963 and CVE-2016-0993.","2016-03-12",0.19785,"Adobe Flash Player and AIR Integer Overflow Vulnerability","Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code.",{"cveId":170,"description":171,"publishedDate":172,"cvssScore":173,"severity":111,"isKev":4,"epssScore":174,"cisaVulnName":175,"cisaDateAdded":159,"cisaShortDescription":176,"cisaRequiredAction":177},"CVE-2015-1769","Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka \"Mount Manager Elevation of Privilege Vulnerability.\"","2015-08-15",6.6,0.04339,"Microsoft Windows Mount Manager Privilege Escalation Vulnerability","A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links.","Apply updates per vendor instructions.",{"cveId":179,"description":180,"publishedDate":181,"cvssScore":123,"severity":124,"isKev":4,"epssScore":182,"cisaVulnName":183,"cisaDateAdded":184,"cisaShortDescription":185,"cisaRequiredAction":186},"CVE-2018-5002","Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.","2018-07-09",0.25353,"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","2022-05-23","Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":85,"description":86,"publishedDate":87,"cvssScore":88,"severity":90,"isKev":4,"epssScore":91,"cisaVulnName":188,"cisaDateAdded":189,"cisaShortDescription":190,"cisaRequiredAction":177},"Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability","2022-03-28","A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts.",{"cveId":192,"description":193,"publishedDate":122,"cvssScore":123,"severity":124,"isKev":4,"epssScore":194,"cisaVulnName":195,"cisaDateAdded":196,"cisaShortDescription":197,"cisaRequiredAction":186},"CVE-2016-4171","Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.",0.19903,"Adobe Flash Player Remote Code Execution Vulnerability","2022-03-25","Unspecified vulnerability in Adobe Flash Player allows for remote code execution.",{"cveId":199,"description":200,"publishedDate":201,"cvssScore":88,"severity":90,"isKev":4,"epssScore":202,"cisaVulnName":203,"cisaDateAdded":196,"cisaShortDescription":204,"cisaRequiredAction":186},"CVE-2016-7892","Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.","2016-12-15",0.18786,"Adobe Flash Player Use-After-Free Vulnerability","Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class.",{"cveId":206,"description":207,"publishedDate":208,"cvssScore":123,"severity":124,"isKev":4,"epssScore":209,"cisaVulnName":210,"cisaDateAdded":211,"cisaShortDescription":212,"cisaRequiredAction":186},"CVE-2016-1019","Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.","2016-04-07",0.22487,"Adobe Flash Player Arbitrary Code Execution Vulnerability","2022-03-03","Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.",{"cveId":214,"description":215,"publishedDate":216,"cvssScore":88,"severity":90,"isKev":4,"epssScore":217,"cisaVulnName":203,"cisaDateAdded":211,"cisaShortDescription":218,"cisaRequiredAction":186},"CVE-2016-7855","Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in October 2016.","2016-11-01",0.25198,"Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code.",{"cveId":220,"description":221,"publishedDate":222,"cvssScore":88,"severity":90,"isKev":4,"epssScore":223,"cisaVulnName":224,"cisaDateAdded":211,"cisaShortDescription":225,"cisaRequiredAction":186},"CVE-2017-11292","Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution.","2017-10-22",0.12104,"Adobe Flash Player Type Confusion Vulnerability","Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.",{"cveId":227,"description":228,"publishedDate":229,"cvssScore":123,"severity":124,"isKev":4,"epssScore":230,"cisaVulnName":203,"cisaDateAdded":231,"cisaShortDescription":232,"cisaRequiredAction":186},"CVE-2018-15982","Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.","2019-01-18",0.81971,"2022-02-15","Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability",{"cveId":234,"description":235,"publishedDate":236,"cvssScore":103,"severity":90,"isKev":4,"epssScore":237,"cisaVulnName":238,"cisaDateAdded":239,"cisaShortDescription":240,"cisaRequiredAction":177},"CVE-2019-0803","An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859.","2019-04-09",0.4523,"Microsoft Win32k Privilege Escalation Vulnerability","2021-11-03","Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.",{"cveId":242,"description":243,"publishedDate":244,"cvssScore":123,"severity":124,"isKev":4,"epssScore":245,"cisaVulnName":246,"cisaDateAdded":239,"cisaShortDescription":247,"cisaRequiredAction":177},"CVE-2020-0646","A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.","2020-01-14",0.99193,"Microsoft .NET Framework Remote Code Execution Vulnerability","Microsoft .NET Framework contains an improper input validation vulnerability that allows for remote code execution.",{"cveId":249,"description":250,"publishedDate":251,"cvssScore":252,"severity":111,"isKev":4,"epssScore":253,"cisaVulnName":254,"cisaDateAdded":239,"cisaShortDescription":255,"cisaRequiredAction":177},"CVE-2020-0878","\u003Cp>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\u003C\u002Fp>\n\u003Cp>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.\u003C\u002Fp>\n\u003Cp>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.\u003C\u002Fp>\n","2020-09-11",4.2,0.02696,"Microsoft Edge and Internet Explorer Memory Corruption Vulnerability","Microsoft Edge and Internet Explorer contain a memory corruption vulnerability that allows attackers to execute code in the context of the current user.",{"cveId":257,"description":258,"publishedDate":259,"cvssScore":123,"severity":124,"isKev":4,"epssScore":260,"cisaVulnName":203,"cisaDateAdded":239,"cisaShortDescription":261,"cisaRequiredAction":186},"CVE-2018-4878","A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018.","2018-02-06",0.89618,"Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution.",{"cveId":263,"description":264,"publishedDate":265,"cvssScore":103,"severity":90,"isKev":4,"epssScore":266,"cisaVulnName":267,"cisaDateAdded":239,"cisaShortDescription":268,"cisaRequiredAction":177},"CVE-2020-17087","Windows Kernel Local Elevation of Privilege Vulnerability","2020-11-11",0.05387,"Microsoft Windows Kernel Privilege Escalation Vulnerability","Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":270,"description":271,"publishedDate":272,"cvssScore":103,"severity":90,"isKev":4,"epssScore":273,"cisaVulnName":274,"cisaDateAdded":239,"cisaShortDescription":275,"cisaRequiredAction":177},"CVE-2021-31956","Windows NTFS Elevation of Privilege Vulnerability","2021-06-08",0.20268,"Microsoft Windows NTFS Privilege Escalation Vulnerability","Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application.",{"cveId":277,"description":278,"publishedDate":279,"cvssScore":103,"severity":90,"isKev":4,"epssScore":280,"cisaVulnName":267,"cisaDateAdded":239,"cisaShortDescription":268,"cisaRequiredAction":177},"CVE-2021-31979","Windows Kernel Elevation of Privilege Vulnerability","2021-07-14",0.02634,{"cveId":282,"description":283,"publishedDate":284,"cvssScore":103,"severity":90,"isKev":4,"epssScore":285,"cisaVulnName":286,"cisaDateAdded":239,"cisaShortDescription":287,"cisaRequiredAction":177},"CVE-2020-1147","A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.","2020-07-14",0.94243,"Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability","Microsoft .NET Framework, Microsoft SharePoint, and Visual Studio contain a remote code execution vulnerability when the software fails to check the source markup of XML file input. Successful exploitation allows an attacker to execute code in the context of the process responsible for deserialization of the XML content.",{"title":289,"metaDescription":290,"keywords":291,"structuredData":292},"Windows 10 by Microsoft - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Windows 10 by Microsoft covering 15 versions with 4066 tracked vulnerabilities including 6 critical and 12 high-severity issues and 20 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Windows 10 vulnerabilities, Windows 10 security, Windows 10 CVE, Microsoft Windows 10, Windows 10 threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Windows 10 KEV, Windows 10 exploited vulnerabilities",{"@context":293,"@type":294,"name":295,"description":290,"url":296,"manufacturer":297,"applicationCategory":301,"softwareVersion":302,"mainEntity":303},"https:\u002F\u002Fschema.org","SoftwareApplication","Windows 10","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fwindows_10",{"@type":298,"name":299,"url":300},"Organization","Microsoft","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fmicrosoft","Security Software","15 versions tracked",{"@type":304,"name":305,"description":306,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Windows 10 Security Vulnerabilities","Security vulnerabilities affecting Windows 10 by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":308,"apiVersion":309},"2026-10-28T13:45:32.811Z","3.0",[311,314,317,320,323,326,329,332,335,338,340,343],{"product":312,"cves":313},"windows_10_1809",1465,{"product":315,"cves":316},"windows_10_21h2",1430,{"product":318,"cves":319},"windows_10_22h2",1425,{"product":321,"cves":322},"windows_10_1607",1294,{"product":324,"cves":325},"windows_10_1507",1131,{"product":327,"cves":328},"windows_10_20h2",293,{"product":330,"cves":331},"windows_10_21h1",89,{"product":333,"cves":334},"windows_10_1803",64,{"product":336,"cves":337},"windows_10_1709",58,{"product":339,"cves":337},"windows_10_1909",{"product":341,"cves":342},"windows_10_1703",47,{"product":344,"cves":345},"windows_10_1511",40,{"rows":347,"total":11,"capped":37,"failed":36},[348,352,356,360,364,368,372,376,380,384,388,392,396,400,404,408,413,417,421,425],{"cveId":146,"name":150,"severity":90,"cvss":103,"added":151,"epss":149,"published":349,"ranges":350,"checked":4,"hits":351,"covers":37},"2021-12-15T15:15:09.737",[55,58,19,39,46,50],[],{"cveId":155,"name":158,"severity":90,"cvss":88,"added":159,"epss":157,"published":353,"ranges":354,"checked":4,"hits":355,"covers":37},"2016-02-10T20:59:32.563",[],[],{"cveId":163,"name":167,"severity":90,"cvss":88,"added":159,"epss":166,"published":357,"ranges":358,"checked":4,"hits":359,"covers":37},"2016-03-12T15:59:25.09",[],[],{"cveId":170,"name":175,"severity":111,"cvss":173,"added":159,"epss":174,"published":361,"ranges":362,"checked":4,"hits":363,"covers":37},"2015-08-15T00:59:01.467",[],[],{"cveId":179,"name":183,"severity":124,"cvss":123,"added":184,"epss":182,"published":365,"ranges":366,"checked":4,"hits":367,"covers":37},"2018-07-09T19:29:03.75",[],[],{"cveId":85,"name":188,"severity":90,"cvss":88,"added":189,"epss":91,"published":369,"ranges":370,"checked":4,"hits":371,"covers":37},"2015-07-20T18:59:01.21",[],[],{"cveId":192,"name":195,"severity":124,"cvss":123,"added":196,"epss":194,"published":373,"ranges":374,"checked":4,"hits":375,"covers":37},"2016-06-16T14:59:51.017",[],[],{"cveId":199,"name":203,"severity":90,"cvss":88,"added":196,"epss":202,"published":377,"ranges":378,"checked":4,"hits":379,"covers":37},"2016-12-15T06:59:56.313",[],[],{"cveId":206,"name":210,"severity":124,"cvss":123,"added":211,"epss":209,"published":381,"ranges":382,"checked":4,"hits":383,"covers":37},"2016-04-07T10:59:01.447",[],[],{"cveId":214,"name":203,"severity":90,"cvss":88,"added":211,"epss":217,"published":385,"ranges":386,"checked":4,"hits":387,"covers":37},"2016-11-01T22:59:00.167",[],[],{"cveId":220,"name":224,"severity":90,"cvss":88,"added":211,"epss":223,"published":389,"ranges":390,"checked":4,"hits":391,"covers":37},"2017-10-22T19:29:00.237",[],[],{"cveId":227,"name":203,"severity":124,"cvss":123,"added":231,"epss":230,"published":393,"ranges":394,"checked":4,"hits":395,"covers":37},"2019-01-18T17:29:01.573",[],[],{"cveId":234,"name":238,"severity":90,"cvss":103,"added":239,"epss":237,"published":397,"ranges":398,"checked":4,"hits":399,"covers":37},"2019-04-09T21:29:01.037",[19,23,26,30,39],[],{"cveId":242,"name":246,"severity":124,"cvss":123,"added":239,"epss":245,"published":401,"ranges":402,"checked":4,"hits":403,"covers":37},"2020-01-14T23:15:33.143",[19,26,30,39,43,46],[],{"cveId":249,"name":254,"severity":111,"cvss":252,"added":239,"epss":253,"published":405,"ranges":406,"checked":4,"hits":407,"covers":37},"2020-09-11T17:15:14.37",[46],[],{"cveId":257,"name":203,"severity":124,"cvss":123,"added":239,"epss":260,"published":409,"ranges":410,"checked":4,"hits":412,"covers":37},"2018-02-06T21:29:00.347",[411],"all versions",[],{"cveId":263,"name":267,"severity":90,"cvss":103,"added":239,"epss":266,"published":414,"ranges":415,"checked":4,"hits":416,"covers":37},"2020-11-11T07:15:18.997",[55,19,30,39,43,46,50],[],{"cveId":270,"name":274,"severity":90,"cvss":103,"added":239,"epss":273,"published":418,"ranges":419,"checked":4,"hits":420,"covers":37},"2021-06-08T23:15:08.847",[39],[],{"cveId":277,"name":267,"severity":90,"cvss":103,"added":239,"epss":280,"published":422,"ranges":423,"checked":4,"hits":424,"covers":37},"2021-07-14T18:15:09.597",[39],[],{"cveId":282,"name":286,"severity":90,"cvss":103,"added":239,"epss":285,"published":426,"ranges":427,"checked":4,"hits":428,"covers":37},"2020-07-14T23:15:12.057",[19,26,30,39,43,46,50],[]]