# Microsoft Windows 10 20h2


- [CVE-2021-31166](https://insights.sbomify.com/CVE-2021-31166/): Microsoft HTTP Protocol Stack Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2023-21674](https://insights.sbomify.com/CVE-2023-21674/): Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2022-41128](https://insights.sbomify.com/CVE-2022-41128/): Microsoft Windows Scripting Languages Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2022-26923](https://insights.sbomify.com/CVE-2022-26923/): Microsoft Active Directory Domain Services Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2021-40444](https://insights.sbomify.com/CVE-2021-40444/): Microsoft MSHTML Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2021-34527](https://insights.sbomify.com/CVE-2021-34527/): Microsoft Windows Print Spooler Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2021-33739](https://insights.sbomify.com/CVE-2021-33739/): Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation (high 8.4, exploited in the wild)
- [CVE-2022-26925](https://insights.sbomify.com/CVE-2022-26925/): Microsoft Windows LSA Spoofing (high 8.1, exploited in the wild)
- [CVE-2023-28252](https://insights.sbomify.com/CVE-2023-28252/): Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2023-21823](https://insights.sbomify.com/CVE-2023-21823/): Microsoft Windows Graphic Component Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2023-23376](https://insights.sbomify.com/CVE-2023-23376/): Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-41073](https://insights.sbomify.com/CVE-2022-41073/): Microsoft Windows Print Spooler Privilege Escalation (high 7.8, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/products/microsoft/windows-10-20h2/