7.7
High
CVE-2021-1638 Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability
Description
Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft has released a software update that will fail attempts to pair if the remote device exchanges a public key with the same X coordinate as the locally exchanged public key
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows 10 Version 20H2 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server version 20H2 10.0 | 10.0.0 → latest | No fix stated |
| Windows 10 Version 1803 10.0 | 10.0.0 → latest | No fix stated |
| Windows 10 Version 1809 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server 2019 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server 2019 (Server Core installation) 10.0 | 10.0.0 → latest | No fix stated |
| Windows 10 Version 1909 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server, version 1909 (Server Core installation) 10.0 | 10.0.0 → latest | No fix stated |
| Windows 10 Version 2004 10.0 | 10.0.0 → latest | No fix stated |
Show the other branch Hide the other branch
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Server version 2004 10.0 | 10.0.0 → latest | No fix stated |
Other CVEs of Windows 10 Version 20H2
The 1260 CVEs of Windows 10 Version 20H2 →
CVE-2022-44684
Windows Local Session Manager (LSM) Denial of Service Vulnerability
6.5
Medium
CVE-2022-35759
Windows Local Security Authority (LSA) Denial of Service Vulnerability
6.5
Medium
CVE-2022-35758
Windows Kernel Memory Information Disclosure Vulnerability
5.5
Medium
CVE-2022-35757
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
7.3
High