Microsoft Windows 10

CVSS Base Metrics

Access Vector (AV)

The access vector (AV) shows how a vulnerability may be exploited.

Access Complexity (AC)

The access complexity (AC) metric describes how easy or difficult it is to exploit the discovered vulnerability.

Authentication (Au)

The authentication (Au) metric describes the number of times that an attacker must authenticate to a target to exploit it. It does not include (for example) authentication to a network in order to gain access. For locally exploitable vulnerabilities, this value should only be set to Single or Multiple if further authentication is required after initial access.

Attack Vector (AV)

This metric reflects the context by which vulnerability exploitation is possible.

Attack Complexity (AC)

This metric depicts the situations that are not under the attackers control and are required to exploit vulnerability.

Privileges Required (PR)

This metric describes the level of privileges an attacker must possess before successfully exploiting the vulnerability.

User Interaction (UI)

This metric captures the requirement for a user, other than the attacker, to participate in the successful compromise the vulnerable component.

Scope (S)

This metric is a determination on whether a vulnerability in one system or component can have carry over impact on another system or component.

CVSS Impact Metrics

Confidentiality (C)

The confidentiality (C) metric describes the impact on the confidentiality of data processed by the system.

Integrity (I)

The Integrity (I) metric describes the impact on the integrity of the exploited system.

Availability (A)

The availability (A) metric describes the impact on the availability of the target system. Attacks that consume network bandwidth, processor cycles, memory or any other resources affect the availability of a system.

Confidentiality (C)

This metric measures the impact to the confidentiality of the information resources managed by a software component due to a successfully exploited vulnerability. Confidentiality refers to limiting information access and disclosure to only authorized users, as well as preventing access by, or disclosure to, unauthorized ones.

Integrity (I)

This metric measures the impact to integrity of a successfully exploited vulnerability. Integrity refers to the trustworthiness and veracity of information.

Availability (A)

This metric measures the impact to the availability of the impacted component resulting from a successfully exploited vulnerability. It refers to the loss of availability of the impacted component itself, such as a networked service (e.g., web, database, email). Since availability refers to the accessibility of information resources, attacks that consume network bandwidth, processor cycles, or disk space all impact the availability of an impacted component.

Title CPE22 CPE23 Type Vendor Product Version Update Edition Language SW Edition Target SW Target HW Other
Title CPE22 CPE23 Type Vendor Product Version Update Edition Language SW Edition Target SW Target HW Other
URL Type
https://docs.microsoft.com/en-us/lifecycle/announcements/windows-10-1511-end-of-servicing Product
https://docs.microsoft.com/en-us/lifecycle/announcements/windows-10-1607-end-of-servicing Product
https://docs.microsoft.com/en-us/windows/release-health/status-windows-10-20h2 Product
https://docs.microsoft.com/en-us/windows/release-health/status-windows-10-21h1 Product
https://docs.microsoft.com/en-us/windows/release-health/status-windows-10-21h2 Product
https://docs.microsoft.com/en-us/windows/release-health/status-windows-10-21h2 Version
https://docs.microsoft.com/en-us/windows/whats-new/ltsc/whats-new-windows-10-2019 Product
https://docs.microsoft.com/en-us/windows/whats-new/whats-new-windows-10-version-1709 Version
https://docs.microsoft.com/en-us/windows/whats-new/whats-new-windows-10-version-1803 Product
https://docs.microsoft.com/en-us/windows/whats-new/whats-new-windows-10-version-20h2 Product
https://dotnet.microsoft.com/en-us/apps/aspnet/mvc Product
https://github.com/Microsoft/ChakraCore/wiki/Roadmap#v173 Version
https://learn.microsoft.com/en-us/windows/release-health/release-information Version
https://learn.microsoft.com/en-us/windows/release-health/status-windows-10-22h2 Product
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2020-17095 Advisory
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-33744 Advisory
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-40465 Advisory
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-43227 Advisory
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-38015 Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8124 Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0722 Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1467 Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1199 Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1253 Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1405 Advisory
https://support.microsoft.com/en-us/help/4464619/windows-10-update-history Version
https://support.microsoft.com/en-us/help/4529964/windows-10-update-history Product
https://support.microsoft.com/en-us/kb/3105211
https://support.microsoft.com/en-us/topic/feature-update-through-windows-10-version-20h2-enablement-package-02d91e04-931e-f00d-090c-015467c49f6c Product
https://technet.microsoft.com/en-us/itpro/windows/whats-new/whats-new-windows-10-version-1703 Product
https://technet.microsoft.com/en-us/windows/release-info.aspx Version
https://technet.microsoft.com/library/security/ms15-135 Advisory
https://technet.microsoft.com/library/security/MS16-102 Advisory
https://www.catalog.update.microsoft.com/ScopedViewInline.aspx?updateid=8eb773b8-808c-4a1d-ae06-fd4de59378fb Version
https://www.catalog.update.microsoft.com/ScopedViewInline.aspx?updateid=a10eaf99-e3b6-4260-9da8-1474636e150e Version
https://www.catalog.update.microsoft.com/Search.aspx?q=kb4524570 Change Log
https://www.catalog.update.microsoft.com/Search.aspx?q=KB4557957 Version
https://www.catalog.update.microsoft.com/Search.aspx?q=microsoft%20windows%2010%202004 Change Log
https://www.catalog.update.microsoft.com/Search.aspx?q=windows%2010%201709%20x86 Change Log
https://www.catalog.update.microsoft.com/Search.aspx?q=windows%2010%201809 Version
https://www.catalog.update.microsoft.com/Search.aspx?q=windows%2010%201903 Version
https://www.catalog.update.microsoft.com/Search.aspx?q=windows%2010%20version%201709 Product
https://www.catalog.update.microsoft.com/Search.aspx?q=windows+10+1703+x64 Version
https://www.catalog.update.microsoft.com/Search.aspx?q=windows+10+1809 Version
https://www.dell.com/support/kbdoc/en-us/000186134/dsa-2021-096-dell-wyse-windows-embedded-system-security-update-for-an-improper-authorization-vulnerability Advisory
https://www.microsoft.com/en-us/ Vendor
https://www.microsoft.com/en-us/software-download/windows10 Product
https://www.microsoft.com/en-us/windows-server Product
https://www.microsoft.com/en-us/windows/features Product
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date
Loading...