Windows · Fixed build

10.0.19042.1586

MSRC advisory

29 CVEs fixed by this build, deployed across 1 Windows SKUs.

Published on: 2020-11-10
SKUs covered: 1
CVEs fixed: 29

Windows SKUs covered by this build

The SKUs below share this MSRC build number. Deploying the corresponding KB secures all of them at once.

Windows 10 20H2 · 2020-H2

CISA KEV: 0
Critical: 0
High: 29
NVD pending: 0

CVEs fixed by this build

CVE	Severity	KEV	Published	Description
CVE-2022-21990 2022-03-08 Remote Desktop Client Remote Code Execution Vulnerability	HIGH 8.8	—	2022-03-08	Remote Desktop Client Remote Code Execution Vulnerability
CVE-2022-23294 2022-03-08 Windows Event Tracing Remote Code Execution Vulnerability	HIGH 8.8	—	2022-03-08	Windows Event Tracing Remote Code Execution Vulnerability
CVE-2022-24508 2022-03-08 Win32 File Enumeration Remote Code Execution Vulnerability	HIGH 8.8	—	2022-03-08	Win32 File Enumeration Remote Code Execution Vulnerability
CVE-2022-23285 2022-03-08 Remote Desktop Client Remote Code Execution Vulnerability	HIGH 8.8	—	2022-03-08	Remote Desktop Client Remote Code Execution Vulnerability
CVE-2022-23290 2022-03-08 Windows Inking COM Elevation of Privilege Vulnerability	HIGH 7.8	—	2022-03-08	Windows Inking COM Elevation of Privilege Vulnerability
CVE-2022-23291 2022-03-08 Windows DWM Core Library Elevation of Privilege Vulnerability	HIGH 7.8	—	2022-03-08	Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2022-23299 2022-03-08 Windows PDEV Elevation of Privilege Vulnerability	HIGH 7.8	—	2022-03-08	Windows PDEV Elevation of Privilege Vulnerability
CVE-2022-24454 2022-03-08 Windows Security Support Provider Interface Elevation of Privilege Vulnerability	HIGH 7.8	—	2022-03-08	Windows Security Support Provider Interface Elevation of Privilege Vulnerability
CVE-2022-24507 2022-03-08 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	HIGH 7.8	—	2022-03-08	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2022-24459 2022-03-08 Windows Fax and Scan Service Elevation of Privilege Vulnerability	HIGH 7.8	—	2022-03-08	Windows Fax and Scan Service Elevation of Privilege Vulnerability
CVE-2022-23293 2022-03-08 Windows Fast FAT File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	2022-03-08	Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
CVE-2022-23296 2022-03-08 Windows Installer Elevation of Privilege Vulnerability	HIGH 7.8	—	2022-03-08	Windows Installer Elevation of Privilege Vulnerability
CVE-2022-23284 2022-03-08 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH 7.2	—	2022-03-08	Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-23298 2022-03-08 Windows NT OS Kernel Elevation of Privilege Vulnerability	HIGH 7.0	—	2022-03-08	Windows NT OS Kernel Elevation of Privilege Vulnerability
CVE-2022-21967 2022-03-08 Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability	HIGH 7.0	—	2022-03-08	Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability
CVE-2022-23286 2022-03-08 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability	HIGH 7.0	—	2022-03-08	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2022-23287 2022-03-08 Windows ALPC Elevation of Privilege Vulnerability	HIGH 7.0	—	2022-03-08	Windows ALPC Elevation of Privilege Vulnerability
CVE-2022-23288 2022-03-08 Windows DWM Core Library Elevation of Privilege Vulnerability	HIGH 7.0	—	2022-03-08	Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2022-24460 2022-03-08 Tablet Windows User Interface Application Elevation of Privilege Vulnerability	HIGH 7.0	—	2022-03-08	Tablet Windows User Interface Application Elevation of Privilege Vulnerability
CVE-2022-24505 2022-03-08 Windows ALPC Elevation of Privilege Vulnerability	HIGH 7.0	—	2022-03-08	Windows ALPC Elevation of Privilege Vulnerability
CVE-2022-23283 2022-03-08 Windows ALPC Elevation of Privilege Vulnerability	HIGH 7.0	—	2022-03-08	Windows ALPC Elevation of Privilege Vulnerability
CVE-2022-24525 2022-03-08 Windows Update Stack Elevation of Privilege Vulnerability	HIGH 7.0	—	2022-03-08	Windows Update Stack Elevation of Privilege Vulnerability
CVE-2022-23253 2022-03-08 Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability	HIGH 6.5	—	2022-03-08	Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
CVE-2022-23281 2022-03-08 Windows Common Log File System Driver Information Disclosure Vulnerability	HIGH 5.5	—	2022-03-08	Windows Common Log File System Driver Information Disclosure Vulnerability
CVE-2022-23297 2022-03-08 Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability	HIGH 5.5	—	2022-03-08	Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
CVE-2022-24503 2022-03-08 Remote Desktop Protocol Client Information Disclosure Vulnerability	HIGH 5.4	—	2022-03-08	Remote Desktop Protocol Client Information Disclosure Vulnerability
CVE-2022-22010 2022-03-08 Media Foundation Information Disclosure Vulnerability	HIGH 4.4	—	2022-03-08	Media Foundation Information Disclosure Vulnerability
CVE-2022-24502 2022-03-08 Windows HTML Platforms Security Feature Bypass Vulnerability	HIGH 4.3	—	2022-03-08	Windows HTML Platforms Security Feature Bypass Vulnerability
CVE-2022-21977 2022-03-08 Media Foundation Information Disclosure Vulnerability	HIGH 3.3	—	2022-03-08	Media Foundation Information Disclosure Vulnerability