Windows · Fixed build
10.0.22621.2715
MSRC advisory31 CVEs fixed by this build, deployed across 1 Windows SKUs.
- Published on
- 2021-07-13
- SKUs covered
- 1
- CVEs fixed
- 31
Windows SKUs covered by this build
The SKUs below share this MSRC build number. Deploying the corresponding KB secures all of them at once.
- CISA KEV
- 4
- Critical
- 2
- High
- 28
- NVD pending
- 0
CVEs fixed by this build
| CVE | Severity | KEV | Published | Description |
|---|---|---|---|---|
|
CVE-2023-36025
KEV
Windows SmartScreen Security Feature Bypass Vulnerability |
HIGH 8.8 | KEV | Windows SmartScreen Security Feature Bypass Vulnerability | |
|
CVE-2023-36036
KEV
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
HIGH 7.8 | KEV | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | |
|
CVE-2023-36424
KEV
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
HIGH 7.8 | KEV | Windows Common Log File System Driver Elevation of Privilege Vulnerability | |
|
CVE-2023-36033
KEV
Windows DWM Core Library Elevation of Privilege Vulnerability |
HIGH 7.8 | KEV | Windows DWM Core Library Elevation of Privilege Vulnerability | |
|
CVE-2023-36397
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CRITICAL 9.8 | — | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability | |
|
CVE-2023-36028
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
HIGH 9.8 | — | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability | |
|
CVE-2023-36423
Microsoft Remote Registry Service Remote Code Execution Vulnerability |
HIGH 8.8 | — | Microsoft Remote Registry Service Remote Code Execution Vulnerability | |
|
CVE-2023-36017
Windows Scripting Engine Memory Corruption Vulnerability |
HIGH 8.8 | — | Windows Scripting Engine Memory Corruption Vulnerability | |
|
CVE-2023-36402
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
HIGH 8.8 | — | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | |
|
CVE-2023-36400
Windows HMAC Key Derivation Elevation of Privilege Vulnerability |
CRITICAL 8.8 | — | Windows HMAC Key Derivation Elevation of Privilege Vulnerability | |
|
CVE-2023-36425
Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
HIGH 8.0 | — | Windows Distributed File System (DFS) Remote Code Execution Vulnerability | |
|
CVE-2023-36705
Windows Installer Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Installer Elevation of Privilege Vulnerability | |
|
CVE-2023-36408
Windows Hyper-V Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Hyper-V Elevation of Privilege Vulnerability | |
|
CVE-2023-36407
Windows Hyper-V Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Hyper-V Elevation of Privilege Vulnerability | |
|
CVE-2023-36396
Windows Compressed Folder Remote Code Execution Vulnerability |
HIGH 7.8 | — | Windows Compressed Folder Remote Code Execution Vulnerability | |
|
CVE-2023-36393
Windows User Interface Application Core Remote Code Execution Vulnerability |
HIGH 7.8 | — | Windows User Interface Application Core Remote Code Execution Vulnerability | |
|
CVE-2023-36047
Windows Authentication Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Authentication Elevation of Privilege Vulnerability | |
|
CVE-2023-36719
Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability | |
|
CVE-2023-36401
Microsoft Remote Registry Service Remote Code Execution Vulnerability |
HIGH 7.2 | — | Microsoft Remote Registry Service Remote Code Execution Vulnerability | |
|
CVE-2023-36399
Windows Storage Elevation of Privilege Vulnerability |
HIGH 7.1 | — | Windows Storage Elevation of Privilege Vulnerability | |
|
CVE-2023-36046
Windows Authentication Denial of Service Vulnerability |
HIGH 7.1 | — | Windows Authentication Denial of Service Vulnerability | |
|
CVE-2023-36427
Windows Hyper-V Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Hyper-V Elevation of Privilege Vulnerability | |
|
CVE-2023-36405
Windows Kernel Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Kernel Elevation of Privilege Vulnerability | |
|
CVE-2023-36403
Windows Kernel Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Kernel Elevation of Privilege Vulnerability | |
|
CVE-2023-36398
Windows NTFS Information Disclosure Vulnerability |
HIGH 6.5 | — | Windows NTFS Information Disclosure Vulnerability | |
|
CVE-2023-36428
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
HIGH 5.5 | — | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability | |
|
CVE-2023-36406
Windows Hyper-V Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows Hyper-V Information Disclosure Vulnerability | |
|
CVE-2023-36404
Windows Kernel Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows Kernel Information Disclosure Vulnerability | |
|
CVE-2023-24023
Indexed via Android Security Bulletin; full NVD metadata pending. |
HIGH | — | Indexed via Android Security Bulletin; full NVD metadata pending. | |
|
CVE-2023-38545
Hackerone: CVE-2023-38545 SOCKS5 heap buffer overflow |
HIGH | — | Hackerone: CVE-2023-38545 SOCKS5 heap buffer overflow | |
|
CVE-2023-38039
Hackerone: CVE-2023-38039 HTTP headers eat all memory |
LOW | — | Hackerone: CVE-2023-38039 HTTP headers eat all memory |