Windows · Fixed build
10.0.19042.1466
MSRC advisory74 CVEs fixed by this build, deployed across 1 Windows SKUs.
- Published on
- 2020-11-10
- SKUs covered
- 1
- CVEs fixed
- 74
Windows SKUs covered by this build
The SKUs below share this MSRC build number. Deploying the corresponding KB secures all of them at once.
- CISA KEV
- 2
- Critical
- 6
- High
- 68
- NVD pending
- 0
CVEs fixed by this build
| CVE | Severity | KEV | Published | Description |
|---|---|---|---|---|
|
CVE-2022-21919
KEV
Windows User Profile Service Elevation of Privilege Vulnerability |
HIGH 7.0 | KEV | Windows User Profile Service Elevation of Privilege Vulnerability | |
|
CVE-2022-21882
KEV
Win32k Elevation of Privilege Vulnerability |
HIGH 7.0 | KEV | Win32k Elevation of Privilege Vulnerability | |
|
CVE-2022-21907
HTTP Protocol Stack Remote Code Execution Vulnerability |
CRITICAL 9.8 | — | HTTP Protocol Stack Remote Code Execution Vulnerability | |
|
CVE-2022-21849
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
HIGH 9.8 | — | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | |
|
CVE-2022-21857
Active Directory Domain Services Elevation of Privilege Vulnerability |
CRITICAL 8.8 | — | Active Directory Domain Services Elevation of Privilege Vulnerability | |
|
CVE-2022-21920
Windows Kerberos Elevation of Privilege Vulnerability |
HIGH 8.8 | — | Windows Kerberos Elevation of Privilege Vulnerability | |
|
CVE-2022-21922
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
HIGH 8.8 | — | Remote Procedure Call Runtime Remote Code Execution Vulnerability | |
|
CVE-2022-21850
Remote Desktop Client Remote Code Execution Vulnerability |
HIGH 8.8 | — | Remote Desktop Client Remote Code Execution Vulnerability | |
|
CVE-2022-21851
Remote Desktop Client Remote Code Execution Vulnerability |
HIGH 8.8 | — | Remote Desktop Client Remote Code Execution Vulnerability | |
|
CVE-2022-21893
Remote Desktop Protocol Remote Code Execution Vulnerability |
HIGH 8.0 | — | Remote Desktop Protocol Remote Code Execution Vulnerability | |
|
CVE-2022-21852
Windows DWM Core Library Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows DWM Core Library Elevation of Privilege Vulnerability | |
|
CVE-2022-21858
Windows Bind Filter Driver Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Bind Filter Driver Elevation of Privilege Vulnerability | |
|
CVE-2022-21874
Windows Security Center API Remote Code Execution Vulnerability |
HIGH 7.8 | — | Windows Security Center API Remote Code Execution Vulnerability | |
|
CVE-2022-21902
Windows DWM Core Library Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows DWM Core Library Elevation of Privilege Vulnerability | |
|
CVE-2022-21908
Windows Installer Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Installer Elevation of Privilege Vulnerability | |
|
CVE-2022-21912
DirectX Graphics Kernel Remote Code Execution Vulnerability |
CRITICAL 7.8 | — | DirectX Graphics Kernel Remote Code Execution Vulnerability | |
|
CVE-2022-21836
Windows Certificate Spoofing Vulnerability |
HIGH 7.8 | — | Windows Certificate Spoofing Vulnerability | |
|
CVE-2022-21914
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | |
|
CVE-2022-21895
Windows User Profile Service Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows User Profile Service Elevation of Privilege Vulnerability | |
|
CVE-2022-21916
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Common Log File System Driver Elevation of Privilege Vulnerability | |
|
CVE-2022-21835
Microsoft Cryptographic Services Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Microsoft Cryptographic Services Elevation of Privilege Vulnerability | |
|
CVE-2022-21833
Virtual Machine IDE Drive Elevation of Privilege Vulnerability |
CRITICAL 7.8 | — | Virtual Machine IDE Drive Elevation of Privilege Vulnerability | |
|
CVE-2022-21888
Windows Modern Execution Server Remote Code Execution Vulnerability |
HIGH 7.8 | — | Windows Modern Execution Server Remote Code Execution Vulnerability | |
|
CVE-2022-21885
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | |
|
CVE-2022-21878
Windows Geolocation Service Remote Code Execution Vulnerability |
HIGH 7.8 | — | Windows Geolocation Service Remote Code Execution Vulnerability | |
|
CVE-2022-21897
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Common Log File System Driver Elevation of Privilege Vulnerability | |
|
CVE-2022-21898
DirectX Graphics Kernel Remote Code Execution Vulnerability |
CRITICAL 7.8 | — | DirectX Graphics Kernel Remote Code Execution Vulnerability | |
|
CVE-2022-21843
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
HIGH 7.5 | — | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | |
|
CVE-2022-21904
Windows GDI Information Disclosure Vulnerability |
HIGH 7.5 | — | Windows GDI Information Disclosure Vulnerability | |
|
CVE-2022-21848
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
HIGH 7.5 | — | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | |
|
CVE-2022-21890
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
HIGH 7.5 | — | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | |
|
CVE-2022-21889
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
HIGH 7.5 | — | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | |
|
CVE-2022-21883
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
HIGH 7.5 | — | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | |
|
CVE-2022-21880
Windows GDI+ Information Disclosure Vulnerability |
HIGH 7.5 | — | Windows GDI+ Information Disclosure Vulnerability | |
|
CVE-2022-21872
Windows Event Tracing Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Event Tracing Elevation of Privilege Vulnerability | |
|
CVE-2022-21859
Windows Accounts Control Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Accounts Control Elevation of Privilege Vulnerability | |
|
CVE-2022-21860
Windows AppContracts API Server Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows AppContracts API Server Elevation of Privilege Vulnerability | |
|
CVE-2022-21861
Task Flow Data Engine Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Task Flow Data Engine Elevation of Privilege Vulnerability | |
|
CVE-2022-21862
Windows Application Model Core API Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Application Model Core API Elevation of Privilege Vulnerability | |
|
CVE-2022-21863
Windows StateRepository API Server file Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows StateRepository API Server file Elevation of Privilege Vulnerability | |
|
CVE-2022-21864
Windows UI Immersive Server API Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows UI Immersive Server API Elevation of Privilege Vulnerability | |
|
CVE-2022-21865
Connected Devices Platform Service Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Connected Devices Platform Service Elevation of Privilege Vulnerability | |
|
CVE-2022-21866
Windows System Launcher Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows System Launcher Elevation of Privilege Vulnerability | |
|
CVE-2022-21867
Windows Push Notifications Apps Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Push Notifications Apps Elevation of Privilege Vulnerability | |
|
CVE-2022-21868
Windows Devices Human Interface Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Devices Human Interface Elevation of Privilege Vulnerability | |
|
CVE-2022-21869
Clipboard User Service Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Clipboard User Service Elevation of Privilege Vulnerability | |
|
CVE-2022-21870
Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability | |
|
CVE-2022-21871
Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability | |
|
CVE-2022-21873
Tile Data Repository Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Tile Data Repository Elevation of Privilege Vulnerability | |
|
CVE-2022-21875
Windows Storage Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Storage Elevation of Privilege Vulnerability | |
|
CVE-2022-21834
Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability | |
|
CVE-2022-21881
Windows Kernel Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Kernel Elevation of Privilege Vulnerability | |
|
CVE-2022-21896
Windows DWM Core Library Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows DWM Core Library Elevation of Privilege Vulnerability | |
|
CVE-2022-21958
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
HIGH 6.8 | — | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | |
|
CVE-2022-21959
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
HIGH 6.8 | — | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | |
|
CVE-2022-21960
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
HIGH 6.8 | — | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | |
|
CVE-2022-21961
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
HIGH 6.8 | — | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | |
|
CVE-2022-21962
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
HIGH 6.8 | — | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | |
|
CVE-2022-21892
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
HIGH 6.8 | — | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | |
|
CVE-2022-21915
Windows GDI+ Information Disclosure Vulnerability |
HIGH 6.5 | — | Windows GDI+ Information Disclosure Vulnerability | |
|
CVE-2022-21918
DirectX Graphics Kernel File Denial of Service Vulnerability |
HIGH 6.5 | — | DirectX Graphics Kernel File Denial of Service Vulnerability | |
|
CVE-2022-21963
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
HIGH 6.4 | — | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | |
|
CVE-2022-21928
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
HIGH 6.3 | — | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | |
|
CVE-2022-21876
Win32k Information Disclosure Vulnerability |
HIGH 5.5 | — | Win32k Information Disclosure Vulnerability | |
|
CVE-2022-21877
Storage Spaces Controller Information Disclosure Vulnerability |
HIGH 5.5 | — | Storage Spaces Controller Information Disclosure Vulnerability | |
|
CVE-2022-21906
Windows Defender Application Control Security Feature Bypass Vulnerability |
HIGH 5.5 | — | Windows Defender Application Control Security Feature Bypass Vulnerability | |
|
CVE-2022-21838
Windows Cleanup Manager Elevation of Privilege Vulnerability |
HIGH 5.5 | — | Windows Cleanup Manager Elevation of Privilege Vulnerability | |
|
CVE-2022-21879
Windows Kernel Elevation of Privilege Vulnerability |
HIGH 5.5 | — | Windows Kernel Elevation of Privilege Vulnerability | |
|
CVE-2022-21913
Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass |
HIGH 5.3 | — | Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass | |
|
CVE-2022-21924
Workstation Service Remote Protocol Security Feature Bypass Vulnerability |
HIGH 5.3 | — | Workstation Service Remote Protocol Security Feature Bypass Vulnerability | |
|
CVE-2022-21921
Windows Defender Credential Guard Security Feature Bypass Vulnerability |
HIGH 4.4 | — | Windows Defender Credential Guard Security Feature Bypass Vulnerability | |
|
CVE-2022-21894
Secure Boot Security Feature Bypass Vulnerability |
HIGH 4.4 | — | Secure Boot Security Feature Bypass Vulnerability | |
|
CVE-2021-22947
Open Source Curl Remote Code Execution Vulnerability |
CRITICAL | — | Open Source Curl Remote Code Execution Vulnerability | |
|
CVE-2021-36976
Libarchive Remote Code Execution Vulnerability |
HIGH | — | Libarchive Remote Code Execution Vulnerability |